# Connect GitLab Account

Aikido requests read-only access to your GitLab group to analyze your projects. After analysis, your code is always wiped from the system.

_**Important before you start**_

* If your GitLab is behind a firewall, we have a [list of Static IPs](https://help.aikido.dev/en/articles/8731261-allowing-ip-addresses-for-code-scanning) you can allowlist.
* The person who sets up the account needs to have access rights both to the GitLab instance **and** GitLab group.

{% hint style="info" %}
Important that the user direct member of the subgroup. Inherited membership is not supported for this action.
{% endhint %}

{% hint style="warning" %}
* Important that the user setting up the workspace is a direct member of each Gitlab (sub)group. Inherited membership alone is not sufficient.
* An Aikido workspace maps by default to a single GitLab group. We recommend to connect Aikido to a top-level GitLab group (i.e. root group) that contains all subgroups. If that's not possible and you need to connect multiple groups to the same Aikido workspace, please follow the specific instructions for [Connecting multiple top-level GitLab groups to a single workspace](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-account-to-aikido/connecting-multiple-top-level-gitlab-groups-to-a-single-workspace).
{% endhint %}

{% hint style="success" %}
**Repositories not linked to a group**, but linked to just your user can currently not be scanned. If you do have personal repositories which you'd like to have scanned, we recommend to create a personal group, or transfer them to a group you own.
{% endhint %}

#### Step 1. Logging in using GitLab <a href="#step-1-logging-in-using-gitlab" id="step-1-logging-in-using-gitlab"></a>

To get started, navigate to [https://app.aikido.dev](https://app.aikido.dev) and log in with GitLab. This will look like the screenshot below. Here, Aikido only requests access to your identity on GitLab and the associated email address.

![Aikido Security requests access to read personal information from a GitLab account.](https://help.aikidogov.us/_assets/7890891670ef/ucarecdn-dd58925f-aa33-4b89-9e02-bd75cc1009ad.png)

#### Step 2. Creating a workspace, join an existing workspace or create a demo <a href="#step-2-creating-a-workspace-join-an-existing-workspace-or-create-a-demo" id="step-2-creating-a-workspace-join-an-existing-workspace-or-create-a-demo"></a>

After authorizing Aikido to read your personal GitLab information you get the following screen.

<figure><img src="https://help.aikidogov.us/_assets/74a6e3cc780a/image-408.png" alt=""><figcaption></figcaption></figure>

On this page you can do one of 3 things:

* **Create a new workspace:** select this option if you want to connect a GitLab group to Aikido and start scanning your code repositories and clouds.
* **Join your team:** select this option if someone in your organization already connected a GitLab group to Aikido, and you'd like to get access to it
* **Use sample repo:** want to have a sneak peak of what Aikido looks like and what it can do? Create a demo account to get a taste of Aikido. You can always connect your GitLab group at a later moment

#### Step 3. Connect a GitLab group to Aikido <a href="#step-3-connect-a-gitlab-group-to-aikido" id="step-3-connect-a-gitlab-group-to-aikido"></a>

If you would like to create a new workspace, Aikido will need **read-only access** to your projects and groups. We will therefore redirect you back to GitLab so you can authorize Aikido.

**Note.** This does _not_ give access to the actual repos yet. Selecting which ones you want to have scanned is in the step after this one.

![Aikido Security requests GitLab read access and user information authorization.](https://help.aikidogov.us/_assets/6db2771f2a26/ucarecdn-b461947a-bf2e-4a4e-936a-84efb59a1f48.png)

#### Step 4. Selecting groups & selecting repos <a href="#step-4-selecting-groups--selecting-repos" id="step-4-selecting-groups--selecting-repos"></a>

After authorizing Aikido to read your groups and projects, you can select which group you'd like to connect to Aikido.

**Note:** Aikido will include any subgroups of the GitLab group you selected in the workspace

<figure><img src="https://help.aikidogov.us/_assets/b134bf473899/image-409.png" alt=""><figcaption></figcaption></figure>

​After selecting the groups of choice, you can choose which repositories you want to give access to.

<figure><img src="https://help.aikidogov.us/_assets/1a3c15ab81df/image-410.png" alt=""><figcaption></figcaption></figure>

#### 5. Checking results <a href="#id-5-checking-results" id="id-5-checking-results"></a>

After granting access and validating the repositories you want to scan, Aikido will automatically start scanning. After about 1 minute, you should see the first results come in!
