Assembla
Connect Assembla to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Assembla to collect version control evidence with automated compliance tests, switched on per workspace.
| Category | Version Control |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Assembla's guide | api-docs.assembla.cc |
Connect with an API token
-
In Assembla:
- Sign in to Assembla as a user who can see every space Safeguard should read.
- Open the applications management page (https://www.assembla.com/user/edit/manage_clients); the docs say you find your API key and API secret there.
- Copy the API key and secret into Safeguard (Assembla sends them as the X-Api-Key and X-Api-Secret headers).
Assembla's public documentation does not cover every step.
Assembla's API docs only say the API key and secret are on the applications management page; the button labels for creating a new key pair, whether the secret is shown once, and where to find the space name are not documented on the fetched page.
Source: api-docs.assembla.cc, checked 2026-10-07.
The permissions Safeguard needs. Assembla issues no read-only credential. Safeguard only reads with it, and you can revoke it at any time. The credential carries its user's rights: create it as a user who can see every account.
-
On Compliance › Connectors, open Assembla, click Connect, choose API token and fill in:
Field What to enter API key Required. Stored encrypted and never shown again. API secret Required. Stored encrypted and never shown again. Space (optional) — -
Click Connect with token.
Frameworks
Safeguard's automated tests read Assembla and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.2, CC6.3 | 3 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.6.5, A.8.2 | 3 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4) | 3 |
| PCI DSS | Automated tests | 7.2.2, 7.2.4, 8.2.5 | 3 |
| NIST CSF 2.0 | Automated tests | PR.AA-01, PR.AA-05 | 3 |
These tests are switched on per workspace by the Safeguard team.
Related
- Version Control connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks