Bring the intended repository into TraceMint. Choose the connection and permissions that fit your source-control environment, then scope the security work.
All five providers have repository connection, discovery and import paths. Authentication, event triggers and result feedback are provider-specific—not a single blanket integration promise.
GitHub App or supported token connection.
Repository discovery, selection and import. Scope access to the repositories used for the evaluation.
Configured push / pull-request webhooks and GitHub Actions workflows.
Explore delivery workflowsGitLab.com or a configured self-managed URL.
Repository discovery, selection and import using the configured authentication method.
Configured push / merge-request webhooks and GitLab CI workflows.
Explore delivery workflowsCloud or a separate Server / Data Center setup.
Repository access depends on the selected edition and connection. Cloud and self-managed paths are not interchangeable.
Edition-specific webhook configuration; Bitbucket Pipelines for Cloud.
Explore delivery workflowsPersonal access token and organization / collection URL.
Discover and import repositories through a manual connection configured for your Azure DevOps environment.
Azure Pipelines configuration. A native Azure SCM webhook receiver is not currently provided.
Explore delivery workflowsPersonal access token and Gitea server URL.
Discover and import repositories through a manual connection to your Gitea instance.
Configured signed push / pull-request webhooks, with commit-status and pull-request feedback paths.
Explore delivery workflowsConfigure least-privilege credentials, allowed server URLs and the exact provider edition. Webhooks and external feedback require their own permissions and setup; a saved connection does not enable them automatically.
Review your provider, hosted or self-managed setup, network access and supported authentication method.
Grant the access needed for the selected workflow. Keep credentials scoped and follow your organization’s rotation process.
Select the intended repository and scan configuration. Review the project and revision behind each result.
Confirm provider edition, authentication method, repository visibility, branch selection and network reachability.
A working repository connection does not imply every PR, webhook or scheduled-scan combination. Test the exact event flow you intend to use.
Agree whether reviewers use the TraceMint workspace, a supported integration or exported evidence. Do not assume automatic write-back is enabled.
Tell us what you want to evaluate. Our team will review your request and contact you to agree the scope and arrange a time.
Request a demo
GitHub
GitLab
Bitbucket
Azure DevOps
Gitea