Why are the repository fields greyed out in the New target dialog?

Why this happens

The New target dialog offers two scan types. Black-box tests the live URL with no source code, so it has no use for a repository. When you pick it, the dialog greys out Repo URL (HTTPS) and Repo branch, and the help text reads "Not used for black-box scans." Nothing has broken. The fields switch off on purpose.

How to fix it

1. Check the Scan type. In the New target dialog, look at the two cards under Scan type and see which one is highlighted.
2. Select White-box. Click the White-box card. The repository fields turn editable straight away.
3. Enter the repository. Type the HTTPS address in Repo URL (HTTPS). Leave Repo branch as main, or change it to the branch you want scanned.
4. Create the target. Choose an Environment, then click Create target.

Still not working?

The repository address must use HTTPS. SSH addresses that start with git@ do not work. Public repositories clone when the scan starts, while private ones need a Git token, which an admin adds under Settings → Git Access.

If you only want a black-box test, leave the fields greyed out. You will then need to prove you own the URL before that scan can run.

Chose black-box by mistake? Targets cannot be edited. Delete the target and create it again, as described in why targets are immutable. For anything else, write to /contact.

Related questions

• What's the difference between a white-box and a black-box target?
• How do I add a new target?
• The New target dialog says a repo URL is required, but my app has no repository. What do I do?
• Why isn't my git@ SSH repository URL accepted?
• How do I connect a Git repository to a target?

Full tutorial

How to add a target in Cyberlop: the New target dialog, field by field

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre