Fine-grained permissions with impersonation in CI/CD tunnel
…In this blog post, we review how you can securely access your clusters from your CI/CD pipelines by using generic impersonation. In addition, we will briefly cover the activity list of…
Search
People also ask
How can you shift security left without slowing down?
Security scans generate hundreds of findings. Security teams manually triage each one while developers wait for approval to deploy. Most findings are false positives or low-risk issues, but identifying the real threats requires expertise and time. AI can prioritize findings by actual exploitability and auto-remediate common vulnerabilities, allowing security teams to focus on the threats that matter.
10 AI prompts to speed your team’s software deliveryHow do you keep documentation current as code changes?
Code changes faster than documentation. Onboarding new developers takes weeks because docs are outdated or missing. Teams know documentation is important, but it always gets deferred when deadlines approach. Automating documentation generation and updates as part of your standard workflow ensures docs stay current without adding manual work.
10 AI prompts to speed your team’s software deliveryFAQ: GitLab CI/CD Catalog
…Can the component reference URL use a branch name as the version, similar to how docs show a tag (e.g., $CI_SERVER_FQDN/my-org/security-components/secret-detection@master)? Yes…
How adSoul transitioned to GitLab CI from Jenkins
…Get every member of the team involved and aware of the upcoming changes, including how tools are working together and what the expectations are moving forward. “Take your time for the migration…
GitLab and HashiCorp streamline delivery workflows
…Users define infrastructure in HashiCorp Configuration Language (HCL) configuration files, Terraform reads those configurations, offers a speculative plan of what it will create, and then users confirm and apply those changes. Terraform…
Using the Dependency Proxy to improve your pipelines
…The Dependency Proxy is more available, more secure, and easier to use than ever. These updates also come right as Docker Hub has rolled out rate limits on image pulls, which the…
Heroes journey: Working with GitLab's Kubernetes agent
…Push mode is when your Git project activates the upgrade of your infrastructure following a change. Pull mode is when your infrastructure verifies without interruption of your Git project and applies changes…
How AI-assisted code suggestions will advance DevSecOps
…GitLab’s competitive advantages GitLab’s unified DevSecOps platform enables businesses to deliver software more quickly and efficiently while enhancing security and compliance and maximizing the total return of investment on software…
How I built a demo generator with GitLab Duo Agent Platform
…Create a project and generate realistic demo data that supports the story; for example, seeded vulnerabilities for a security dashboard, or data for meaningful charts. Capture the content : Take screenshots or record…
SourceWarp: Make data-driven, agile DevSecOps decisions
…GitLab Vulnerability Research Team DevSecOps CI/CD security At GitLab, we use different strategies to make assessments about the stability or robustness of a feature by means of best practices such as…
Setting up 100 AWS Graviton Spot Runners for GitLab
…Jobs that have special security requirements, e.g., security credentials, role-based access or managed identities for Continuous Delivery (CD). These security requirements can enable instance-level (AWS IAM Instance Profile) security…