> ## Documentation Index
> Fetch the complete documentation index at: https://gecko.security/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# August 2026

> What we shipped each week in August 2026, published every Friday.

**August 28, 2026**

## API

* **Outbound webhooks:** Manage endpoints under **Settings → Webhooks** on Pro and Enterprise. Subscribe to `scan.completed`, `scan.failed`, `vulnerability.created`, `vulnerability.status_changed`, and `vulnerability.severity_changed`, send a test event, rotate the signing secret, and redeliver from **Recent Deliveries**. See [Webhook events](https://gecko.security/docs/api-reference/webhooks.md).
* **GitLab token API:** `GET /integrations/gitlab` returns the token's expiry date, and `PATCH /integrations/gitlab` swaps in a new token for rotation scripts. See [Token expiry and rotation](https://gecko.security/docs/connect/gitlab.md#token-expiry-and-rotation).
* **Release versions:** Releases carry a customer-facing version (`1.1`, `1.2`, ...) pinned to one SHA and image digest. `GET /releases/{channel}/{version}` resolves it to an `image_ref`.

## Scanning

* **Scan scope:** Per-repository path rules either **Skip entirely** or use a path as **Context only**. Manage them over MCP too. See [Scanner settings](https://gecko.security/docs/scanner-settings.md).

## Integrations

* **GitLab token reminders:** Team admins get an email 7 days before the GitLab token expires, and again when it expires or is revoked.
* **Multiple GitHub App installations:** Connect more than one.
* **Group filters:** Filter repositories by GitHub team or organization and by GitLab group.
* **Integration health:** A banner warns you when an integration needs attention.
* **Select all:** Selects every matching row, not only the visible page.

## Bug fixes

* **GitLab sync:** Syncs every repository past the first 2,000, with clear errors when it can't.
* **Scan page:** Loads for scans without a branch.

**August 14, 2026**

## Integrations

* **Wiz:** Connect under **Settings → Integrations → Wiz**. **Enable Wiz context** brings Secrets, IaC, SCA, SAST, and Runtime signals into analysis, scoped to the Wiz projects you pick. **Push findings to Wiz** sends findings above a **Minimum severity**. Findings Wiz also flags show **Corroborated by Wiz**.

**August 7, 2026**

## AI tools

* **MCP server:** Connect Claude, Claude Code, ChatGPT, Codex, and other MCP clients to `https://app.gecko.security/api/mcp` with OAuth or an API key. Scopes are capped by your role. Manage connections under **Settings → Integrations → Agents**. See [Connect AI tools](https://gecko.security/docs/ai-tools/overview.md).

## API

* **Redesigned v1 API:** A consistent response envelope, cursor pagination, rate limits, idempotency keys, and request IDs, plus endpoints for triage, repository settings, and scan schedules. See the [API reference](https://gecko.security/docs/api-reference/introduction.md).
* **OpenAPI spec:** Live at [`/api/v1/openapi.json`](https://app.gecko.security/api/v1/openapi.json), with a machine-readable changelog at `/api/v1/changelog`.
* **API keys:** Visible to the whole team with owner attribution and usage logging, and sent as `Authorization: Bearer`.

## Findings

* **Export:** Download findings as CSV, Markdown, or JSON, filtered by status.
* **Dismissal notes:** Dismissing a finding saves your rationale as a note.

## Access

* **Connected accounts:** **Settings → Authentication** shows your GitHub, GitLab, Slack, Linear, and Jira identities, with suggested matches to confirm or remove.
* **Require SSO without sign-outs:** Turning on SSO-required keeps existing sessions signed in.

## Bug fixes

* **GitLab links:** Resolve branch and tag refs correctly.
* **Access errors:** Pages you can't access show a 403 page instead of an error.
* **Safer exports:** CSV exports guard against formula injection.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.