The app authenticates to GitLab with a service account token stored outside the repository. Users can connect their own token in Settings.