Repos
Connect GitHub via App; connect GitLab via OAuth. Self-hosted supported on both.
GitHub
vemlor authenticates as a GitHub App. The App installation grants scoped access to the repos you choose — no PATs, no org-wide token.
Install
- In onboarding (or Settings → Repositories) click Connect GitHub.
- Pick repos or "all repositories" in the install screen.
- vemlor receives the installation, registers webhooks, and indexes the repos.
Self-hosted GHE
Set GITHUB_API_BASE in your self-host install. The App must be
created on the GHE instance, not on github.com.
GitLab
vemlor uses OAuth 2.0 with PKCE, requesting api,
read_repository, write_repository. Scopes are minimised — vemlor
never reads other users' projects.
Connect
- Click Connect GitLab.
- Approve on your GitLab instance.
- The token is stored encrypted; refresh is automatic.
Self-hosted GitLab
Two env vars:
GITLAB_ENDPOINT=https://gitlab.acme.eu/api/v4
GITLAB_OAUTH_AUTHORIZE_URL=https://gitlab.acme.eu/oauth/authorize
GITLAB_OAUTH_TOKEN_URL=https://gitlab.acme.eu/oauth/tokenRegister the OAuth application on your GitLab instance with redirect URI
matching your vemlor PUBLIC_URL + /oauth/gitlab/redirect.
Webhooks
Both platforms register a webhook back to vemlor pointing at
/webhooks/gitlab/<workspace-secret> or
/webhooks/github. Each workspace has its own inbound webhook secret;
events with mismatched secrets are dropped.