> ## Documentation Index
> Fetch the complete documentation index at: https://gecko.security/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# October 2026

> What we shipped each week in October 2026, published every Friday.

**October 23, 2026**

## API

* **Scan a specific commit:** [`POST /scans`](https://gecko.security/docs/scanning/run-a-scan#run-a-scan-from-the-api) takes an optional `commit`, a full or abbreviated SHA that's already pushed. Gecko scans that commit instead of the branch tip, so a scan started from CI matches the code under review even if the branch moves on.

## Integrations

* **Replace a GitLab token in place:** **Settings → GitLab** opens a **Connect** or **Replace token** sheet that validates the new token against your instance before saving it. See [Connect GitLab](https://gecko.security/docs/connect/gitlab.md).

## Docs

* **Workflow guides:** [Roll out Gecko](https://gecko.security/docs/guides/rollout.md), [Gecko for developers](https://gecko.security/docs/guides/developers.md), [Fix and verify](https://gecko.security/docs/guides/fix-and-verify.md), and [False positives and context](https://gecko.security/docs/guides/false-positives-and-context.md).
* **New pages:** [Re-scans and fix detection](https://gecko.security/docs/concepts/rescans.md) and [Service accounts](https://gecko.security/docs/admin/service-accounts.md).

## Bug fixes

* **GitLab token emails:** A token GitLab rejects is reported as rejected, not expired.
* **Email layout:** Gecko emails render correctly in Outlook and Gmail.

**October 16, 2026**

## Access

* **Repository access:** Under **Settings → Members**, choose **Enforce permissions** to limit each member to the repositories they can access on GitHub or GitLab, or **Show all**. The **Access** column shows each member's scope, and members connect with **Link your GitHub account** or **Link your GitLab account**. The scope applies across the app and the API. Service-account and team keys stay team-wide. See [Teams & permissions](https://gecko.security/docs/teams-permissions.md).

## Findings

* **Settings search:** Search across every settings page.
* **Type filter:** Lists only the types that appear in your results.
* **Repository trends:** The **Repositories** page shows change over the selected time range.

## Docs

* **Okta SAML guide:** Step-by-step [Okta SAML onboarding](https://gecko.security/docs/access/okta-saml-onboarding.md).

## Bug fixes

* **CSV export:** One row per finding.
* **Date filters:** Use your local calendar date.
* **Outbound webhooks:** Failed deliveries retry correctly.
* **Jira:** Prompts you to reconnect when its token refresh fails with `unauthorized_client`.

**October 2, 2026**

## Findings

* **Vulnerabilities are now Findings:** The page, navigation, and links use **Findings**. Old links redirect.
* **One findings list:** A single list with connected repositories first.
* **Verified before saving:** Gecko verifies each finding's code path and fix patch before it reaches your list.

## Integrations

* **Wiz:** A new connect form, hourly sync, and richer SAST findings pushed to Wiz.

## Bug fixes

* **Auto-fix PRs:** Recover after a failed attempt.
* **PDF reports:** The table of contents shows the right page numbers.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.