[waleedlatif1]

Summary

• Let an organization admin read the current revision and replace both permission CSVs for a configured GitLab Search source through the v2 API. The update uses the same validation, grant store, and revision check as Settings. It cannot change the connection or resume a paused source.
• Document how Search authorizes a reader and how to publish a complete permissions export from a scheduled GitLab CI job.

Type of Change

• Feature

Testing

The HTTP test runs against a real Sim app and Postgres. It covers grants and revocations, competing uploads, invalid files, organization boundaries, and preserving the source configuration. It runs in the existing organization Search E2E job. Also checked the GitLab CSV parser, live authorization tests, generated API contracts, lint, and the example's YAML and shell syntax.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added for the public endpoint
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Nov 10, 2026 6:38pm UTC

[cubic-dev-ai]

All reported issues were addressed across 20 files

_{Turn on auto-fix | Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable issues remain in this review.

Summary

Adds API endpoints for organization admins to read a GitLab Search permission revision and replace both permission CSVs.

• Organization admins can update both GitLab Search permission files through the v2 API.
• The CLI can read a permission revision and replace both GitLab Search CSVs.
• The GitLab Search guide shows how to publish permission CSVs from GitLab CI.

Diagram

sequenceDiagram
  participant CI as GitLab CI
  participant API as Sim API
  participant DB as Postgres
  CI->>API: GET permission revision
  API->>API: Check organization admin access
  API->>DB: Read current revision
  API-->>CI: Revision
  CI->>CI: Export both CSVs
  CI->>API: PUT CSVs and expected revision
  API->>API: Check access and CSVs
  API->>DB: Lock source and check revision
  alt Revision matches
    API->>DB: Replace files and grants together
    API-->>CI: New revision
  else Revision changed
    API-->>CI: 409 Conflict
  end

Loading

_{Reviews (3) · Last reviewed commit: "test(cli): cover confirmation for GitLab..." · Reviewed by Greptile}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 23 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}