Why isn't my git@ SSH repository URL accepted?

Why this happens

The field is labelled Repo URL (HTTPS), and its help text says "Public repos cloned at scan launch; SSH git@ not supported." An address like git@host:acme/web.git uses SSH, so it does not fit. SSH is not supported for cloning, whether the repository is public or private.

How to fix it

1. On your code host, open the repository and choose the HTTPS option in its clone menu.
2. Paste that address somewhere safe. It starts with https://, for example https://git.example.com/acme/web.
3. In Cyberlop, go to Targets and click + New target.
4. Choose White-box and paste the address into Repo URL (HTTPS).
5. For a private repository, save a read-only token first under Settings → Git Access.
6. Click Create target.

If you already saved the target with the wrong address, you cannot edit it. Targets are immutable, so delete it and create it again, remembering that deleting also removes its profiles, scans and findings.

Still not working?

• Check that the address is complete and has no stray spaces at the start or the end, which is easy to miss when you paste.
• Confirm that the repository is public, or that a token is saved and the host is in Allowed hosts.
• Make sure the scan type is White-box, since black-box targets ignore the repository.

Read what a private repository needs for token details. We can help at /contact.

Related questions

• How do I connect a Git repository to a target?
• How do I scan a private repository?
• My private repository won't clone. What do I need?
• The New target dialog says a repo URL is required, but my app has no repository. What do I do?
• How do I change a target's URL or repository after creating it?

Full tutorial

Connect a repository to Cyberlop for white-box scans

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre