How do I connect a Git repository to a target?

A repository is part of a white-box target. You connect it when you create the target, in the same dialog.

Steps

1. Open Targets and click + New target.
2. Fill in Name and Main URL.
3. Select the White-box card under Scan type.
4. Paste the HTTPS address of your repository into Repo URL (HTTPS). That field is required for any white-box target, and the dialog will not let you continue without it.
5. Keep Repo branch as main, or type the branch you want.
6. Click Create target.
7. Open the target. The Repository and Branch rows show what you saved, and a note reads "Scans clone the latest from this repository at launch."

Good to know

• The address must use HTTPS. An SSH address that starts with git@ is not supported.
• A public repository clones at scan launch, and you set nothing else up beyond the address itself.
• A private repository needs a read-only Git token. Save one under Settings → Git Access, or a personal one in My Account.
• You cannot change the repository later. To use another one, delete the target and create it again.

Cyberlop only reads your code, so a read-only token is all it asks for. Once the target is saved, which takes a second, open its page and confirm the repository and branch look right, because you cannot fix a typo by editing. The fix is to delete the target and create it again, which also removes its profiles and scans. Learn more in how to scan a private repository. Questions? Use /contact.

Related questions

• How do I scan a private repository?
• Why isn't my git@ SSH repository URL accepted?
• My private repository won't clone. What do I need?
• How do I scan a branch other than main?
• What's the difference between a white-box and a black-box target?

Full tutorial

Connect a repository to Cyberlop for white-box scans

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre