Skip to main content

Set up Cases and GitLab Issues

Set up cases in a space to allow users in the space to keep track of security tasks and add GitLab issues directly from within the Mondoo Console. Cases setup involves configuring Mondoo to integrate with GitLab.

For an overview of cases, read Track and Fix Findings with Cases and Your Ticket System.

Prerequisites​

  • A Mondoo account with Owner or Editor access to the space where you want to add the GitLab integration

  • Access to a GitLab group

Create a personal access token to give Mondoo access to GitLab​

A personal access token gives Mondoo the ability to access GitLab resources on your behalf. For Mondoo to continuously monitor your GitLab groups, you must create a personal access token.

  1. Log into GitLab.

  2. In the upper-left corner of any GitLab page, select your profile photo and then select Edit Profile.

  3. In the left sidebar, select Access tokens.

  4. Select the Add new token button.

  5. In the Token name box, enter a name for the token, such as mondoo-frontend-repo.

  6. Under Expiration date, specify the date on which to expire the token. (Be sure to note the expiration date so that, as it approaches, you can create a new one without interrupting the Mondoo-GitLab integration.)

  7. Under Select scopes, check the api box.

  8. Select the Create a personal access token button.

  9. When GitLab finishes creating the token, it displays this message: "Your new personal access token has been created." Below the message, locate the Your new personal access token box. Use the copy icon to the right of the box to copy the token.

To learn more, read Create a personal access token in the GitLab documentation.

Add a GitLab integration​

  1. In the Mondoo Console, navigate to the space where you want to set up cases and, in the side navigation bar, select Cases.

    Configure cases in Mondoo

  2. Select the ADD INTEGRATION button.

    Configure cases in Mondoo

  3. Select GitLab Issues.

    Configure cases in Mondoo

  4. In the Choose an integration name box, enter a name for the integration. Make it a name that clearly shows this is a GitLab integration.

  5. If you self-host GitLab, enter your custom GitLab URL in the Provide a GitLab base URL box. This is the URL you use to access GitLab. If you don't self-host GitLab, leave the box empty.

  6. In the Provide your personal access token box, paste the token you copied from GitLab in the steps above.

  7. To close a case in Mondoo when the corresponding GitLab issue closes, enable Automatically close cases.

  8. To create a case and a corresponding GitLab issue when an asset becomes more exposed to attack, enable Create drift issues in this integration and enter the GitLab project where you want to create new issues. To learn more, read Automatically create cases on drift.

  9. Select the CREATE INTEGRATION button.

Learn more​