Skip to main content
Each slipway organization is anchored to exactly one upstream account: a GitHub App installation or a GitLab group. Installing on the same account again signs you back into the same organization. A different account creates a second one. Use Add an organization in the sidebar to connect another.

​
GitHub

Installing the slipway GitHub App on a user or org creates your slipway org. The app asks for:
  • Repository contents, read, to fetch slipway.yaml and clone for builds.
  • Pull requests, read and write, to read PR metadata and post status comments.
  • Checks, write, to surface build and deploy status on commits.
  • Webhooks, for push, pull request and installation events.
Repositories you do not grant at install are invisible to slipway. Adding repositories. In GitHub, open the installation settings and grant more. slipway syncs the list automatically, and Settings → Integrations → Sync repos forces it. Uninstalling and reinstalling later keeps your organization and its deployment history.

​
GitLab

Only gitlab.com is supported.
Connect a group from the login page, or Add an organization then Continue with GitLab. You need Maintainer or higher on the group. slipway lists the groups you can use. Picking one mints a group access token, registers a webhook, creates the organization, and ingests every project under the group, including subgroups and excluding archived projects. The group access token is rotated ahead of expiry, so the connection does not lapse. GitLab projects behave like GitHub repositories once connected. A push to the tracked branch deploys, and slipway posts commit statuses. Adding projects. Projects added to the group later are picked up with Settings → Integrations → Sync repos, which also refreshes names and default branches and installs any missing webhooks. If the connection breaks, through a revoked token or a deleted webhook, reconnecting the same group repairs it in place and keeps your organization and its history.

​
What triggers what

Every incoming webhook is signature-verified before slipway acts on it.