Using ScanSuite

Git repository authentication

Give ScanSuite access to a private repository with an SSH key.

To analyse source code from private repositories, authenticate using an SSH key.

SSH key authentication is currently the only supported method for accessing protected repositories.

1. Generate an SSH key

Create a new key with a standard tool such as ssh-keygen.

Shell
ssh-keygen -t ed25519 -f ./scansuite_deploy_key -N ""

Do not set a passphrase. Passphrase-protected SSH keys are not supported, and the clone will fail with an authentication error that does not name the passphrase as the cause.

2. Add the public key to your repository host

Add the public key to your version control platform:

PlatformWhere
GitLabSettings → SSH Keys
BitbucketPersonal Settings → SSH Keys
GitHubSettings → SSH and GPG keys, or a per-repository deploy key

Prefer a read-only deploy key scoped to the single repository over a personal account key. ScanSuite only ever needs to clone.

3. Add the private key to your account

  1. 01
    Open Current User → Settings in ScanSuite
  2. 02
    Paste the private SSH key into the Git SSH key field
  3. 03
    Click Save

The key must include its header and footer lines:

text
-----BEGIN OPENSSH PRIVATE KEY-----
...
-----END OPENSSH PRIVATE KEY-----
ScanSuite SSH key setting
The SSH key field in user settings

4. Specify the repository in SSH format

On the Static Analysis tab, enter the repository path using the SSH form:

Shell
git@mydomain.com:username/reponame.git

This format is what tells the platform to authenticate with the stored key.

Last reviewed 2026-08-16