Connecting Source Code: GitHub, GitLab, Bitbucket and Generic Git

BeginnerFree5 modules · 15 lessons · ~2 min

About this course

A developer's guide to connecting Source Code Management (SCM) providers, GitHub, GitLab, Bitbucket and any generic Git remote, as the root input to Safeguard. You will choose between an installed app, a Personal Access Token (PAT) and a deploy key, scope access to the least privilege the platform actually needs, onboard org-wide or repo-by-repo, handle monorepos and branch selection, wire up webhooks and PR Guard, connect self-hosted GitLab and generic Git over SSH, and keep the connection's own credentials clean through rotation and offboarding.

What you'll learn

The Connection as Root of Trust

Why the Source Code Management (SCM) Connection Is Where Everything Starts
What the First Scan Actually Reads
Authorizing an App versus a Personal Access Token (PAT) versus a Deploy Key

Scopes and Onboarding Shape

Least-Privilege Scopes: What Safeguard Actually Needs to Read
Org-Wide Installation versus Repo-by-Repo Onboarding
Monorepos: Path Scoping, Multiple Manifests and Selective Scanning

Branches and Multi-Provider Connections

Branch Selection: Default Branch, Release Branches and Feature Branches
GitLab Cloud and Self-Hosted: OAuth, Group Tokens and Runner Reachability
Bitbucket Cloud and Server: App Passwords and Workspace Permissions
Generic Git over SSH: Deploy Keys, Known Hosts and the Local Runner

01The Connection as Root of Trust3 lessons

Why the Source Code Management (SCM) Connection Is Where Everything Starts
What the First Scan Actually Reads
Authorizing an App versus a Personal Access Token (PAT) versus a Deploy Key

02Scopes and Onboarding Shape3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

Webhooks and Continuous Review

Webhooks and Triggers: Push, Pull Request Events, Schedules and Manual Runs
PR Guard: Wiring Griffin AI Review into Pull Requests
Secrets Hygiene During Onboarding: Tokens, Storage and Rotation

Operating the Connection Over Time

Troubleshooting Connections: Permission Errors, Rate Limits and Stale Tokens
Offboarding and Re-Authorizing: Removing Repos, Revoking Access, Starting Clean

Least-Privilege Scopes: What Safeguard Actually Needs to Read

Org-Wide Installation versus Repo-by-Repo Onboarding

Monorepos: Path Scoping, Multiple Manifests and Selective Scanning

03Branches and Multi-Provider Connections4 lessons

Branch Selection: Default Branch, Release Branches and Feature Branches
GitLab Cloud and Self-Hosted: OAuth, Group Tokens and Runner Reachability
Bitbucket Cloud and Server: App Passwords and Workspace Permissions
Generic Git over SSH: Deploy Keys, Known Hosts and the Local Runner

04Webhooks and Continuous Review3 lessons

Webhooks and Triggers: Push, Pull Request Events, Schedules and Manual Runs
PR Guard: Wiring Griffin AI Review into Pull Requests
Secrets Hygiene During Onboarding: Tokens, Storage and Rotation

05Operating the Connection Over Time2 lessons

Troubleshooting Connections: Permission Errors, Rate Limits and Stale Tokens
Offboarding and Re-Authorizing: Removing Repos, Revoking Access, Starting Clean2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.