​

GitLab

Qodex can review GitLab merge requests in linked GitLab.com projects. It reads the merge request context, posts review output and replies to supported commands, and refreshes linked code after the default branch changes.

​

Before you start

You need:

• A Qodex project and Qodex project-admin access.
• A GitLab.com account or bot with the Maintainer role on each GitLab project you plan to link.
• A GitLab connection: use Connect GitLab when it is available, or provide a GitLab token with the api scope.

GitLab.com is the only supported GitLab host in this release. Self-managed GitLab instances are not yet supported.

​

Connect a GitLab project

1. In Qodex, open your project’s Settings > Connections and select GitLab.
2. Connect with GitLab OAuth when your Qodex instance offers it, or paste a token with the api scope. Use Test connection before saving.
3. Select the GitLab project to link. The picker shows projects where the connected account is a Maintainer.
4. Choose the repository root or a folder. Choose a folder for a large monorepo when only one application should be analyzed.
5. Save the link. Qodex completes the project connection and starts a background code analysis.

A personal access token works on GitLab Free and posts as that user. GitLab project and group access tokens are useful for a shared bot identity, but GitLab requires Premium or Ultimate for those token types.

​

What triggers a review

Qodex can start review work when a linked merge request is opened, reopened, receives new commits, changes target branch, or becomes ready for review. It also accepts supported Qodex mentions in merge-request notes. Qodex skips automatic review for merge requests marked to ignore Qodex. Its code analysis refreshes after pushes to the linked project’s default branch, so future reviews use the latest application context.

​

Access and safety

• The connected GitLab account needs Maintainer so Qodex can receive merge-request and repository events for each linked project.
• Disconnecting removes the linked repositories from the current Qodex project; it does not grant another Qodex project access.
• GitLab credentials are stored by Qodex and are not shown again after they are saved. Reconnect the integration if the token is revoked or expires.
• A repository larger than 500 MB must be linked at a folder scope instead of as the whole repository.

​

Related