CodeGuards v1
// gitlab merge request security

Security review on every GitLab merge request.

CodeGuards connects to GitLab, watches new changes, and posts clear review results back where engineers are already working.

How the integration works

connect

Add a personal access token with api scope, choose the GitLab host, and select the projects you want reviewed.

scan

On push or merge_request events, CodeGuards receives the change, runs the review, and creates a report.

read

The verdict appears on the merge request thread, in the dashboard, and inside workspace reports.

Self-hosted GitLab

Self-hosted GitLab is supported as a first-class workflow. The connection pattern stays the same as cloud: token, repository selection, webhook, review.

GitLab CI escalation

If you want CI involved, call POST /api/scans/ci from your pipeline and decide how strict that workflow should be.

Connect GitLab and keep the review where the code already lives. Cloud or self-hosted.
Connect a repo