Add test accounts and source code access

#Add a test account

1. Open the asset on the Assets page.
2. In Test accounts, choose Add test account.
3. Enter a Role / label (for example *Workspace owner*) and the Username.
4. Add a Password, and if the account uses them, an Authenticator secret and an API token.
5. Tick Primary account for the account agents should use first to explore the app.
6. Choose Add account.

Secrets are encrypted at rest, and only the agent running your scan can read them. After saving, Countermind shows only which secrets an account has, never the values. To change an account, remove it and add it again.

#Connect source code for Whitebox

1. Add an asset of type GitHub repository with the repository as org/repo.
2. In GitHub, create a fine-grained personal access token for that repository only, with Contents: Read-only.
3. Open the asset, choose Connect GitHub and paste the token.

The token is stored encrypted and is only given to the agent for Whitebox scans of that repository. Use Replace token to rotate it.