GitLab

Overview

Use GitLab credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	gitlab
Category	Developer Tools
Credential Type	API Key

Step 1: Get Credentials

Log in to GitLab

Log in to GitLab at gitlab.com.

Go to User Settings → Access Tokens

Go to User Settings → Access Tokens at gitlab.com/-/user_settings/personal_access_tokens.

Add a new token

Click ‘Add new token’, set name, expiration, and scopes.

Copy your token

Copy the generated token.

Enter hostname if self-hosted

If using a self-hosted instance, enter the hostname in the GitLab Hostname field.

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add GitLab

Go to Managed Secrets > Add Provider > GitLab.

Enter credentials

Paste your Personal Access Token into the credential field. If using a self-hosted instance, also enter your GitLab hostname in the GitLab Hostname field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.GET,
    "https://YOUR_GITLAB_HOST/api/v4/projects",
    grant_id="YOUR_GRANT_ID",  # Use gitlab.com for cloud or your self-hosted hostname
)

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Rules saved with the former V3-prefixed operation IDs continue to match as compatibility aliases. New rules and audit filters should use the canonical GitLab ApiV4 IDs below.

Operation ID	Families	Method	Provider path
getApiV4Projects	read	GET	/api/v4/projects
getApiV4ProjectsId	read	GET	/api/v4/projects/{id}
postApiV4Projects	write	POST	/api/v4/projects
putApiV4ProjectsId	admin	PUT	/api/v4/projects/{id}
deleteApiV4ProjectsId	delete	DELETE	/api/v4/projects/{id}
getApiV4Issues	read	GET	/api/v4/issues
getApiV4ProjectsIdIssues	read	GET	/api/v4/projects/{id}/issues
getApiV4ProjectsIdIssuesIssueIid	read	GET	/api/v4/projects/{id}/issues/{issue_iid}
postApiV4ProjectsIdIssues	write	POST	/api/v4/projects/{id}/issues
putApiV4ProjectsIdIssuesIssueIid	write	PUT	/api/v4/projects/{id}/issues/{issue_iid}
deleteApiV4ProjectsIdIssuesIssueIid	delete	DELETE	/api/v4/projects/{id}/issues/{issue_iid}
postApiV4ProjectsIdIssuesIssueIidNotes	write	POST	/api/v4/projects/{id}/issues/{issue_iid}/notes
getApiV4ProjectsIdMergeRequests	read	GET	/api/v4/projects/{id}/merge_requests
getApiV4ProjectsIdMergeRequestsMergeRequestIid	read	GET	/api/v4/projects/{id}/merge_requests/{merge_request_iid}
getApiV4ProjectsIdMergeRequestsMergeRequestIidChanges	read	GET	/api/v4/projects/{id}/merge_requests/{merge_request_iid}/changes
postApiV4ProjectsIdMergeRequests	write	POST	/api/v4/projects/{id}/merge_requests
putApiV4ProjectsIdMergeRequestsMergeRequestIid	write	PUT	/api/v4/projects/{id}/merge_requests/{merge_request_iid}
putApiV4ProjectsIdMergeRequestsMergeRequestIidMerge	write	PUT	/api/v4/projects/{id}/merge_requests/{merge_request_iid}/merge
postApiV4ProjectsIdMergeRequestsMergeRequestIidNotes	write	POST	/api/v4/projects/{id}/merge_requests/{merge_request_iid}/notes
getApiV4ProjectsIdRepositoryBranches	read	GET	/api/v4/projects/{id}/repository/branches
postApiV4ProjectsIdRepositoryBranches	write	POST	/api/v4/projects/{id}/repository/branches
deleteApiV4ProjectsIdRepositoryBranchesBranch	delete	DELETE	/api/v4/projects/{id}/repository/branches/{branch}
getApiV4ProjectsIdRepositoryCommits	read	GET	/api/v4/projects/{id}/repository/commits
getApiV4ProjectsIdRepositoryCommitsSha	read	GET	/api/v4/projects/{id}/repository/commits/{sha}
postApiV4ProjectsIdRepositoryCommits	write	POST	/api/v4/projects/{id}/repository/commits
getApiV4ProjectsIdRepositoryFilesFilePath	read	GET	/api/v4/projects/{id}/repository/files/{+file_path}
getApiV4ProjectsIdRepositoryFilesFilePathRaw	read	GET	/api/v4/projects/{id}/repository/files/{+file_path}/raw
getApiV4ProjectsIdRepositoryFilesFilePathBlame	read	GET	/api/v4/projects/{id}/repository/files/{+file_path}/blame
postApiV4ProjectsIdRepositoryFilesFilePath	write	POST	/api/v4/projects/{id}/repository/files/{+file_path}
putApiV4ProjectsIdRepositoryFilesFilePath	write	PUT	/api/v4/projects/{id}/repository/files/{+file_path}
deleteApiV4ProjectsIdRepositoryFilesFilePath	delete	DELETE	/api/v4/projects/{id}/repository/files/{+file_path}
getApiV4ProjectsIdPipelines	read	GET	/api/v4/projects/{id}/pipelines
getApiV4ProjectsIdPipelinesPipelineId	read	GET	/api/v4/projects/{id}/pipelines/{pipeline_id}
getApiV4ProjectsIdMembers	read	GET	/api/v4/projects/{id}/members
postApiV4ProjectsIdMembers	admin	POST	/api/v4/projects/{id}/members
putApiV4ProjectsIdMembersUserId	admin	PUT	/api/v4/projects/{id}/members/{user_id}
deleteApiV4ProjectsIdMembersUserId	admin	DELETE	/api/v4/projects/{id}/members/{user_id}
getApiV4ProjectsIdHooks	read	GET	/api/v4/projects/{id}/hooks
postApiV4ProjectsIdHooks	admin	POST	/api/v4/projects/{id}/hooks
deleteApiV4ProjectsIdHooksHookId	admin, delete	DELETE	/api/v4/projects/{id}/hooks/{hook_id}
getApiV4Groups	read	GET	/api/v4/groups
getApiV4GroupsId	read	GET	/api/v4/groups/{id}
getApiV4User	read	GET	/api/v4/user