Product names are listed because Journey Lanes works with them, not because of a partnership. Where something depends on how this installation is set up, the table says so.
Code hosts
Code host
Connects with
Access
GitHub
A token
Read-only: contents and metadata of the repositories you choose
GitLab.com
A token
Read-only: read_repository, read_api
GitLab self-managed
A token and the repository’s URL
read_api and read_repository; on a private network through a relay agent
Bitbucket Cloud
A token
Read-only: repositories and account
Bitbucket Server and Data Center
An HTTP access token and the repository’s URL
Read through its REST API; on a private network through a relay agent
React Router, Vue Router, Angular, Next.js pages, with the API calls each page makes
–
Roles come from Keycloak realm settings and exports, and from role checks in Symfony, Laravel, NestJS, Spring and ASP.NET Core. See what the scanners read.
Identity and sign-in
Identity provider or stack
Signs in with
Keycloak
OAuth password grant, client credentials, or the login page (including Keycloakify themes)
A login request, with cookies and CSRF tokens where they use them
WordPress
Application passwords, or the login page with its REST nonce
SAML, WS-Federation, OIDC form_post
Followed on login pages that submit them
Your own API
A login request, client credentials, an API key, a bearer token or HTTP Basic
Two-factor: TOTP, emailed codes, texted codes from a Twilio test number, and fixed staging codes. Passkeys (WebAuthn), with Journey Lanes as the authenticator. Saved sign-ins (a refresh token or cookies) for accounts that refuse automated sign-in.
Test inboxes
Service
Used for
Mailpit
Email steps (invitations, links, codes) and emailed two-factor codes
Mailtrap
Email steps, with an API token
Twilio (test numbers)
Texted two-factor codes
Alerts
Channel
Format
Email
Confirmed addresses, up to 10 per channel
Microsoft Teams
Adaptive Card through a Workflows or incoming webhook
Slack
Incoming webhook
Webhook
JSON POST over https
CI and exports
Integration
What it does
Any CI (GitHub Actions, GitLab CI and others)
Calls the deploy hook after a deploy and reads the result
Argo CD
Calls the deploy hook from its notification controller once per synced revision
GitHub commit statuses
One status per environment on the deployed commit
Playwright
Export as a @playwright/test file
Postman
Export as a v2.1 collection
AI
Provider
Used for
Anthropic (Claude)
Drafting flows, “Help me” and “Explain this failure”, when someone asks for them; limits and fallback
Connect what you have
Start with a repository or an OpenAPI document, then add the environment and alert channel your team uses.