The second door into the code Specsight reads. An organisation connects GitLab.com or its own instance with an access token that Specsight checks live and stores encrypted; from then on every merge to a watched branch queues a sync, and a daily check warns before the token expires or when GitLab stops accepting it.