Integrations

​

Overview

Integrations connect Cysmiq to your development tools. Each integration is scoped to a single workspace and can be configured independently.

​

Version control

Connect your repositories to enable automatic security scanning.

• GitHub: GitHub Cloud and GitHub Enterprise Server
• GitLab: GitLab.com and self-managed instances

Once connected, Cysmiq syncs your organizations and repositories, enabling:

• Automatic scans on push events
• VCS permission sync for developers
• Vulnerability attribution to commits

​

Cloud IP allowlisting

If your version control provider restricts access by IP address, add this Cysmiq Cloud IPv4 range to its allowlist: Cysmiq Cloud uses addresses within this range for outbound connections to version control providers. Allow the full CIDR so repository discovery, branch fetches, and scans can reach your provider. Configure the range in your provider’s access settings:

• GitHub Cloud: an organization owner can add the CIDR under Settings, Authentication security, then IP allow list. See GitHub organization IP allowlists.
• GitLab: add the CIDR to the group’s Restrict access by IP address setting when group IP restrictions are enabled. See GitLab group IP restrictions.
• Bitbucket Cloud: add the CIDR under the workspace’s Access controls when IP restrictions are enabled. See Bitbucket workspace IP allowlisting.

For a GitHub App you manage, see Managing allowed IP addresses for a GitHub App. GitHub can use an installed app’s registered addresses when the organization enables Enable IP allow list configuration for installed GitHub Apps. A GitHub 403 that says the organization’s IP allowlist does not permit access can occur even with valid credentials. Confirm the range is enabled in the applicable organization or enterprise allowlist. Allow a few minutes for GitHub’s change to take effect, then retry the operation that failed. For self-hosted Cysmiq, allow the public outbound IP addresses of your own installation. See Self-hosted network requirements for destination endpoints.

​

Ticketing

Send vulnerabilities to your issue tracker for remediation workflows.

• Jira: Create issues in Jira projects
• Linear: Create issues in Linear workspaces

Ticketing integrations support issue templates and tags, with status captured when the issue is created.

​

Webhooks

Send Cysmiq events to HTTPS endpoints for automation, monitoring, and downstream processing.

• Configure scoped endpoints for workspace, organization, or repository events
• Subscribe to scan, repository, vulnerability, and ping events
• Verify deliveries with signing secrets

See Outbound Webhooks for setup, signing, and delivery history.

​

CLI

The Cysmiq CLI queries results from existing scans. It does not run scans.

• Gate CI jobs by failing on severity thresholds or max counts
• Fetch scan summaries for a repo, ref, or SHA
• Output summaries in table or JSON for pipelines

​

Related guides

• Connect a VCS
• Connect ticketing
• Use the CLI in CI/CD
• Use the CLI with coding agents