Import repositories with OAuth

Last updated: Nov 4, 2026

---

Enable OAuth

You can connect the Fluid Attacks platform to your account on the code repository hosting providers Azure, Bitbucket, GitHub, and GitLab with OAuth (Open Authorization). With this connection, Fluid Attacks can access and clone your repositories, and you do not share your credentials with Fluid Attacks.

This is a step-by-step example of how Fluid Attacks uses OAuth to access your GitLab repositories.

1. Go to Integrations > Source control in your organization.

2. Select the provider to connect to the platform (GitLab in this example).

   

3. The authorization page of the provider opens. There, authorize the connection between the Fluid Attacks platform and your account.

   

4. Click Authorize to make the connection.

When you authorize the connection, the provider sends you back to the Source control tab of your organization. There, you can see the new credentials with the type "OAUTH".

This method recognizes the repositories with activity in the last 60 days. To see a list of them, go to the Out of Scope section from the collapsible sidebar.

Out of Scope shows the repositories that are not in a group of that organization on the platform. The service connection can be slow. Out of Scope can show the repositories after approximately 30 minutes to 1 hour.

Import repositories

To import one repository with OAuth, do these steps:

1. Go to the Out of Scope section of your organization.

2. Click the plus symbol in the Action column.

   

3. Select the group of your organization where you want to add the repository.

   

4. Click Confirm to start the import process.

5. Give the necessary information in the pop-up window. Then, click Confirm. (For an explanation of each field, read Add a new Git repository manually.)

   

To import more than one repository, do these steps:

1. In Out of Scope, select the checkboxes of the repositories.

   

2. Click Bulk assign.

3. Select the group for the selected repositories.

4. Give the necessary information in the pop-up window. Then, click Confirm.

Remove OAuth connection

You can remove the OAuth credentials of your organization in Integrations > Source control. Select the credentials and click Manage credentials > Remove. The platform removes the credentials and the linked repositories in the Out of Scope section.