GitLab
Restrict how your agents can use GitLab.
Require agents to confirm every push, or set up custom rules for automation.
GitLabOps agent · Acme GitLabkc_…c21e
| Permission | Access | Projects | Only when |
|---|---|---|---|
Repository · Read repository.read | Allowed | acme/api | Any request |
Repository · Push repository.push | Allowed | acme/api | git.ref starts with refs/heads/agent/ |
Merge requests · Create merge_requests.create | Allowed | acme/api | Any request |
Merge requests · Merge merge_requests.merge | Ask meWaits up to 24 hours | acme/api | Any request |
Pipelines · Run pipelines.run | Ask meWaits up to 24 hours | acme/api | Any request |
Allowed goes straight throughAsk me waits for your confirmation
What you can control
Permissions
Each row of a key's GitLab access is one of these, set to Allowed or Ask me.
| Permission | Name in the API |
|---|---|
| Project details · Read | project.read |
| Repository · Read | repository.read |
| Repository · Push | repository.push |
| Issues · Read | issues.read |
| Issues · Create | issues.create |
| Issues · Update | issues.update |
| Merge requests · Read | merge_requests.read |
| Merge requests · Create | merge_requests.create |
| Merge requests · Merge | merge_requests.merge |
| Comments · Read | comments.read |
| Comments · Create | comments.create |
| Pipelines · Read | pipelines.read |
| Pipelines · Run | pipelines.run |
| Projects · List | projects.list |
| Users · Read | users.read |
| Custom rule: a method or git action (git fetch or git push) and a path that you choose. | |