GitLab Sync Feedback

[GrassRootsCrypto]

Ask a question, start a conversation, or make an annoucement

I am using the Gitsync feature to sync with Gitlab. The feature works; however, I have noticed some drawbacks.

1. The personnel access token is in plain view after it is set up. This means other admins can see this token if they go to the Gitlab sync settings, which poses a security risk. It would be better if it were like a credit card: you enter it once, then it is hidden, and you can only delete it and re-enter another.
2. When going to Gitsync settings, you cannot see the repo it is synced to, as it only shows the first 9 or so letters. If the username is longer, you cannot tell what repo is selected. A tooltip or something so the full name/repo can be shown in the Gitsync settings would be good to confirm configuration once set up. The same applies to the branch name; a tooltip, at least, would be appreciated, not limited to 8 letters.
3. For repos that are co-located with code, it would be good to have the merge request option or a read-only sync option (Gitlab to Gitbook only), so that Gitbook can't make direct changes to Gitbook without some kind of review. This is related to point 1 as well – a read-write token on a repo can be a dangerous thing if it is exposed.

Thanks