Running CI jobs in sequential, parallel, and custom orders
…If there are any vulnerabilities in our latest changes, we want to know ASAP. That's why it's a good idea to add security scans to your pipeline. They'll check…
Search
People also ask
How can you shift security left without slowing down?
Security scans generate hundreds of findings. Security teams manually triage each one while developers wait for approval to deploy. Most findings are false positives or low-risk issues, but identifying the real threats requires expertise and time. AI can prioritize findings by actual exploitability and auto-remediate common vulnerabilities, allowing security teams to focus on the threats that matter.
10 AI prompts to speed your team’s software deliveryHow do you keep documentation current as code changes?
Code changes faster than documentation. Onboarding new developers takes weeks because docs are outdated or missing. Teams know documentation is important, but it always gets deferred when deadlines approach. Automating documentation generation and updates as part of your standard workflow ensures docs stay current without adding manual work.
10 AI prompts to speed your team’s software deliveryGitLab helps mitigate Docker Hub's open source image removal
…Observability and security The number of failed CI/CD pipelines can be a good service level indicator (SLI) to verify whether the environment is affected by the Docker Hub changes. The same…
10 best practices for using AI-powered GitLab Duo Chat
…Show a GitLab CI/CD configuration for building the C# project In this example, Chat encouraged us to request specific changes. Let's ask to use the .NET SDK 8.0 instead…
A first look at the new GitLab Web IDE and remote development experience
…The new Web IDE is more user-friendly and efficient, combining VS Code's powerful core features with significantly improved performance and the ability to securely connect to a remote development environment…
GitLab automates instrumented fuzzing via American Fuzzy Lop
…From scanner coverage to AI governance Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Start building faster today See what…
How we introduced DevOps at the province of Nova Scotia
…DOCKER_HOST="${DOCKER_DEV_HOST}" docker service update --image ${DOCKER_REGISTRY}/${NAMESPACE}/${CI_PROJECT_NAME}:${CI_COMMIT_SHA} ${CI_PROJECT_NAME}_app_1 Automating security scanning (DevSecOps!) In addition to building the…
How what we learned at KubeCon EU 2022 will impact our product roadmaps
…Besides the wiring of the tools, the industry is still looking for a unified approach to multi-tenancy (there might not be one), and sometimes integrating security processes seems overly challenging. How…
We need to talk: Can we standardize NO_PROXY?
…However, when a user makes a change in the UI, Gitaly forwards the request to a gitaly-ruby service, which is written in Ruby. gitaly-ruby makes changes to the repository and…
Code Suggestions available to all GitLab tiers while in Beta
…It keeps your proprietary source code secure within GitLab's enterprise cloud infrastructure, and this code isn't used as training data. Source code inference against the Code Suggestions model is not…
How to use GitLab tools for continuous delivery
…Check security and compliance-related items of the project by visiting the Security dashboard . The security dashboard in GitLab. These dashboards help you preempt out-of-compliance scenarios to avoid penalties. They…