Import repositories with OAuth

Last updated: Mar 25, 2026


Enable OAuth

You can connect Fluid Attacks' platform to your account on the code repository hosting providers GitLab, GitHub, Bitbucket and Azure via OAuth (Open Authorization). Allowing this connection, you authorize Fluid Attacks to access the repositories there to clone them without you having to share your credentials with Fluid Attacks.

The following is a step-by-step example of using OAuth for Fluid Attacks to access your GitLab repositories.

  1. Go to your organization's Credentials section.

  2. Select the provider that you want to authorize to connect to the platform (in this example, GitLab).

    Connect the Fluid Attacks platform with providers
  3. Upon choosing the provider, you are directed to their authorization page, where you are asked to authorize the connection between Fluid Attacks' platform and your account.

    Authorize Fluid Attacks platform on GitLab
  4. Click on Authorize to establish the connection.

When you authorize the connection, you are redirected to your organization's Credentials section, where you can see the new credentials created with the type "OAUTH".

View OAuth credentials on Fluid Attacks platform

This method recognizes the repositories that have had activity in the last 60 days. To see a list of them, go to the Out of Scope section from the collapsible sidebar.

Find the Out of Scope section on Fluid Attacks platform

The repositories that are listed in Out of Scope are those that are not associated with any group of that specific organization in the platform. Please allow approximately 30 minutes to 1 hour for the repositories to appear while the service connection is established.

Import repositories

Follow these steps to import a single repository leveraging OAuth:

  1. Go to your organization's Out of Scope section.

  2. Click the plus symbol in the Action column.

    Import a single repository on the Fluid Attacks platform
  3. Specify the group within your organization where you want to add the repository.

    Import repository to a group on the Fluid Attacks platform
  4. Click Confirm to initiate the import process.

  5. Provide the required information in the pop-up window and click Confirm when you are done. (Refer to Add a new Git repository manually for explanations of every field if needed.)

    Provide details of Git repository on the Fluid Attacks platform

To import multiple repositories, follow these steps:

  1. In Out of Scope, select the desired repositories using the checkboxes.

    Import multiple repositories on the Fluid Attacks platform
  2. Click the Bulk assign button.

  3. Choose the group for the selected repositories.

  4. Provide the required information in the pop-up window and click Confirm when you are done.

Provide details of Git repositories on the Fluid Attacks platform

Remove OAuth connection

You can remove the OAuth credentials in your organization's Credentials section. Just select the credentials and click on Manage credentials > Remove. The credentials are then removed along with the linked repositories in the Out of Scope section.

Remove OAuth connection with the Fluid Attacks platform

On this page