Updates to de-identifying Service Usage Data
…What isn’t changing? The service usage data policy for SaaS and Self-Managed remains unchanged. What is changing? With user privacy in mind, we are building a pseudonymization process to run…
Search
Avoid the massive end-to-end tax of default full history clones
…LFS changes how binaries are stored, keeping their history off the packfile, while the clone policy changes what each clone asks for. Because they operate on different layers, they stack rather than…
A guide to the high-impact breaking changes in GitLab 17.0
…impact breaking changes in GitLab 17.0 Find, assess, and mitigate the impact of deprecations and breaking changes in this year’s major release. Martin Brümmer Sam Wiskow DevSecOps platform product releases…
5 ways to fix misleading vulnerability severities with policy
…Manual overrides by authorized users always take precedence over policy overrides. Every automated change is logged in the vulnerability's history and audit events, so you maintain a complete record of what…
A guide to the breaking changes in GitLab 18.0
…Reject container image pull policies not in allowed_pull_policies GitLab.com | Self-Managed | Dedicated All configured pull policies should be present in the allowed_pull_policies configuration specified in the runner…
OWASP Top 10 2025: What's changed and why it matters
…Platform, to quickly determine what are the most critical vulnerabilities and how to take action on them. You can enforce additional controls through merge request approval policies and pipeline execution policies to…
Reduce supply chain risk with SBOM-based dependency scanning
…Security and platform teams configure scanning once and apply it across hundreds of projects, instead of editing each pipeline by hand. You can mandate these security standards using scan execution policies and…
Claude Opus 5 on GitLab: Reasoning built for the hard tasks
…the context layer, policy checks, and audit trail that cover every model on GitLab Duo Agent Platform. Put Opus 5 to work Claude Opus 5 is available now on GitLab Duo Agent…
The ultimate guide to least privilege access with GitLab
…Scan Execution policies allow project maintainers and administrators the confidence of knowing that the scans they set up have not been changed, altered, or disabled. Merge Request Approval policies prevent insecure code…
3 signs your team is ready to uplevel security controls in GitLab
…You can't definitively say who changed what and when. You're unsure if security policies are consistently followed. Do any of these signs resonate with you? Let's explore how teams…