v1.8September 6, 2026
GitLab previews, connected read-only
- GitLab.com is live, on every plan. Connect GitLab from Settings → Integrations, then import any project you can see — nested groups included — from the GitLab tab of Connect repo. Push a branch and it builds like a GitHub repo does: same detection, same container, same live URL and expiry.
- The grant is read-only by default. Connecting asks GitLab for
read_apiandread_repositoryonly: enough to list projects and branches, clone, and build. Nothing can be written to your GitLab. This is deliberate — a preview tool should not hold write access to your code host just to show you a URL. - Automation is a separate, optional step. GitLab has no narrow write scope; creating a webhook or commenting on a merge request requires its
apiscope. So that is an explicit Enable automation button, not a default. Turn it on and PreviewDrop registers the webhook on each imported project and posts the preview URL on every merge request. Leave it off and you paste one webhook per project by hand — the project's Settings tab shows the URL, secret and triggers — and previews still build on every push. - One secret per project. Each imported GitLab project gets its own webhook secret. A delivery is authenticated against that secret and routed to that project, so a leaked secret never reaches another workspace.
- Honest status in the dashboard. The Integrations card shows Connected · read-only or Connected · automation, the project webhook card says whether the hook is installed or waiting on you, and the docs at /docs/git-integration spell out both levels.
- Bitbucket Cloud is next. The plumbing is in place; the connection opens once the OAuth consumers are registered.