GitLab and Bitbucket

Use this when the code is not on GitHub. Invince downloads a repository archive and runs the same file scanners as a GitHub connection.

What you get

• Secrets, dependency CVEs (when those binaries ran), auth and injection patterns in fetched files
• Duplicate code and unused-export leads from the last graph
• Structure score from duplication, unused exports, and file complexity
• Improve ranking and engineering prompts you paste into your own coding assistant

What you do not get

• Merge-request check runs. Those need the GitHub App.
• Invince merging or rewriting your repository
• Self-hosted GitLab or Bitbucket Server. Only gitlab.com and bitbucket.org.

Use Before you deploy on the last scan for the same Ready / Fix first / Do not launch rules.

Connect

1. Open the project → Connect a repository.
2. Paste an https://gitlab.com/... or https://bitbucket.org/... URL.
3. Paste a read-only token (GitLab: read_api and read_repository; Bitbucket: username:app-password with repository read).
4. Invince stores the token encrypted and starts a scan.

Disconnect from the project to drop the token. One repository source per project.