Settings & Administration

Manage SCM integrations, member access tiers, and API credentials.

Connected Source Control & Credential Stores

Manage webhooks, SCM providers, and secret reference resolvers.

Sample data(tenant integrations)

GitHub Organization (StratoGroup)

connected

PR status checks, check suites, and repository webhook events enabled.

Endpoint: https://api.github.com · Last checked: 3 minutes ago

Configure

HashiCorp Vault KMS

connected

Zero plaintext secrets stored. Inputs carry references (Invariant 7).

Endpoint: vault://droplet/scm · Last checked: 1 hour ago

Configure

BYO-CI GitHub Actions Runners

connected

Isolated runner execution dispatches without running arbitrary code in control plane.

Endpoint: github-actions://org/runners · Last checked: Just now

Configure

SCM Integration Security Law

Zero Control-Plane Repository Execution

Connecting a GitHub or GitLab repository never clones or executes untrusted code in the Droplet control plane. Discovery is performed via static AST analysis or runner uploads.

Vault/KMS Reference Resolution (Invariant 7)

Droplet never persists raw access tokens or OAuth secrets in its databases. Access credentials must point to configured KMS/Vault endpoints with short-lived tokens.