APIIntegrationsDocs
API
- Scan a specific commit:
POST /scanstakes an optionalcommit, a full or abbreviated SHA that’s already pushed. Gecko scans that commit instead of the branch tip, so a scan started from CI matches the code under review even if the branch moves on.
Integrations
- Replace a GitLab token in place: Settings → GitLab opens a Connect or Replace token sheet that validates the new token against your instance before saving it. See Connect GitLab.
Docs
- Workflow guides: Roll out Gecko, Gecko for developers, Fix and verify, and False positives and context.
- New pages: Re-scans and fix detection and Service accounts.
Bug fixes
- GitLab token emails: A token GitLab rejects is reported as rejected, not expired.
- Email layout: Gecko emails render correctly in Outlook and Gmail.
AccessFindingsDocs
Access
- Repository access: Under Settings → Members, choose Enforce permissions to limit each member to the repositories they can access on GitHub or GitLab, or Show all. The Access column shows each member’s scope, and members connect with Link your GitHub account or Link your GitLab account. The scope applies across the app and the API. Service-account and team keys stay team-wide. See Teams & permissions.
Findings
- Settings search: Search across every settings page.
- Type filter: Lists only the types that appear in your results.
- Repository trends: The Repositories page shows change over the selected time range.
Docs
- Okta SAML guide: Step-by-step Okta SAML onboarding.
Bug fixes
- CSV export: One row per finding.
- Date filters: Use your local calendar date.
- Outbound webhooks: Failed deliveries retry correctly.
- Jira: Prompts you to reconnect when its token refresh fails with
unauthorized_client.
FindingsIntegrations
Findings
- Vulnerabilities are now Findings: The page, navigation, and links use Findings. Old links redirect.
- One findings list: A single list with connected repositories first.
- Verified before saving: Gecko verifies each finding’s code path and fix patch before it reaches your list.
Integrations
- Wiz: A new connect form, hourly sync, and richer SAST findings pushed to Wiz.
Bug fixes
- Auto-fix PRs: Recover after a failed attempt.
- PDF reports: The table of contents shows the right page numbers.