API tokens let CI run your contracts without a browser. Unlike your login, a token can be named and revoked on its own - so a secret stored in someone else's build system stays under your control.

Create token

Store it as a secret named GATTLAB_TOKEN, then:

- uses: Umer-Mahmood/TestLabX/.github/actions/gattlab-run@main
  with:
    contract: tests/blinky.yaml
    agents: android,windows
    token: ${{ secrets.GATTLAB_TOKEN }}
    junit: results/junit.xml

See the CI integration docs for the full option list and exit codes.