GitHub Secrets Setup Guide

1. Navigate to GitHub Repository

1. Go to your gitlab-mcp repository on GitHub
2. Click on the Settings tab
3. In the left sidebar, select "Secrets and variables" → "Actions"

2. Add Secrets

Click the "New repository secret" button and add the following secrets:

GITLAB_TOKEN_TEST

• Name: GITLAB_TOKEN_TEST
• Value: Your GitLab Personal Access Token
• Used for integration tests to call the real GitLab API

TEST_PROJECT_ID

• Name: TEST_PROJECT_ID
• Value: Your test project ID (e.g., 70322092)
• The GitLab project ID used for testing

GITLAB_API_URL (Optional)

• Name: GITLAB_API_URL
• Value: https://gitlab.com
• Only set this if using a different GitLab instance (default is https://gitlab.com)

3. Verify Configuration

To verify your secrets are properly configured:

1. Create a PR or update an existing PR
2. Check the workflow execution in the Actions tab
3. Confirm that the "integration-test" job successfully calls the GitLab API

Security Best Practices

• Never commit GitLab tokens directly in code
• Grant minimal required permissions to tokens (read_api, write_repository)
• Rotate tokens regularly

Local Testing

To run integration tests locally:

export GITLAB_TOKEN_TEST="your-token-here"
export TEST_PROJECT_ID="70322092"
export GITLAB_API_URL="https://gitlab.com"

npm run test:integration

⚠️ Important: When testing locally, use environment variables and never commit tokens to the repository!