# Gecko Security

> Gecko Security documentation.

## Docs

- [SSO & Login](https://gecko.security/docs/access/okta-saml-onboarding.md): Set up team login in Gecko with Okta SAML, verify the first sign-in, and add SCIM after SSO works.
- [API reference](https://gecko.security/docs/api-reference/introduction.md): Authenticate with a Gecko API key, understand team scope and rate limits, and start using the v1 API.
- [List repositories](https://gecko.security/docs/api-reference/repositories/list-repositories.md): Returns repositories for the team attached to your API key.
- [List vulnerabilities for a repository](https://gecko.security/docs/api-reference/repositories/list-vulnerabilities-for-a-repository.md): Returns vulnerabilities for the repository path in `repositoryId`. URL-encode the repository path before you send it. For example, use `gecko-security%2FPaperbaum` for `gecko-security/Paperbaum`.
- [Get scan endpoint definitions](https://gecko.security/docs/api-reference/scans/get-scan-endpoint-definitions.md): Returns the scan endpoint definition that Gecko stored for the scan. Gecko returns the raw value and a parsed object when the stored format is JSON.
- [Get scan wiki markdown](https://gecko.security/docs/api-reference/scans/get-scan-wiki-markdown.md): Returns the generated scan summary as Markdown. Gecko uses the stored summary string directly when it is already Markdown and builds Markdown from the structured summary payload otherwise.
- [Launch a scan](https://gecko.security/docs/api-reference/scans/launch-a-scan.md): Starts a new scan for a GitLab repository that the team can access. This route requires a key whose role includes the `scans.run` permission, a configured team GitLab integration, and available scan capacity on the current plan. Gecko resolves the target branch in this order: request `branch`, branc…
- [List scans](https://gecko.security/docs/api-reference/scans/list-scans.md): Returns scans for the team attached to your API key. This route requires a key whose role includes the `scans.read` permission.
- [List vulnerabilities for a scan](https://gecko.security/docs/api-reference/scans/list-vulnerabilities-for-a-scan.md): Returns vulnerabilities for a specific scan in the team attached to your API key.
- [Check API health](https://gecko.security/docs/api-reference/utility/check-api-health.md): Returns the current API health status and the list of public `v1` endpoints. This endpoint does not require authentication.
- [List vulnerabilities across the active team](https://gecko.security/docs/api-reference/vulnerabilities/list-vulnerabilities-across-the-active-team.md): Returns vulnerabilities across all scans that belong to the team attached to your API key.
- [Findings & Remediation](https://gecko.security/docs/findings-remediation.md): Review Gecko findings, prioritize the right issues, and build a clean remediation workflow.
- [GitHub & GitLab integration](https://gecko.security/docs/github-gitlab-integration.md): Connect source control to Gecko so repositories and scans fit the normal engineering workflow.
- [Gecko Security](https://gecko.security/docs/index.md): Find real vulnerabilities in your code. Fix what matters.
- [Integrations](https://gecko.security/docs/integrations.md): Connect Gecko to source control, issue trackers, and notifications.
- [Jira integration](https://gecko.security/docs/jira-integration.md): Send validated Gecko findings into Jira when remediation needs to move into team planning.
- [Linear integration](https://gecko.security/docs/linear-integration.md): Connect Linear so Gecko findings move cleanly into the engineering backlog.
- [Quick start](https://gecko.security/docs/quick-start.md): Connect a repository, run your first scan, and review findings.
- [Repository Scanning](https://gecko.security/docs/repository-scanning.md): Choose the right Gecko scan input and understand how repository onboarding works.
- [Scanner settings](https://gecko.security/docs/scanner-settings.md): Configure scan behavior, schedules, and rules.
- [Slack integration](https://gecko.security/docs/slack-integration.md): Connect Slack for scan notifications and timely vulnerability follow-up.
- [Teams & Permissions](https://gecko.security/docs/teams-permissions.md): Choose the right Gecko role for each person on your team and understand what each role can access.

## OpenAPI Specs

- [openapi](https://gecko.security/docs/api-reference/openapi.json)

## Optional

- [Dashboard](https://app.gecko.security)