Updates to de-identifying Service Usage Data
…What isn’t changing? The service usage data policy for SaaS and Self-Managed remains unchanged. What is changing? With user privacy in mind, we are building a pseudonymization process to run…
Search
Avoid the massive end-to-end tax of default full history clones
…Internally it's organized into six small, independently testable pieces (policy parsing, the fixed-sequence interpreter, git command execution, logging, cross-platform detection, and the entry point handling all four invocation modes…
A guide to the high-impact breaking changes in GitLab 17.0
…impact breaking changes in GitLab 17.0 Find, assess, and mitigate the impact of deprecations and breaking changes in this year’s major release. Martin Brümmer Sam Wiskow DevSecOps platform product releases…
5 ways to fix misleading vulnerability severities with policy
…Manual overrides by authorized users always take precedence over policy overrides. Every automated change is logged in the vulnerability's history and audit events, so you maintain a complete record of what…
A guide to the breaking changes in GitLab 18.0
…You can learn more and find your assigned maintenance window here . We’ve also developed custom tooling and resources to help you assess the impact of these changes on your environment and…
OWASP Top 10 2025: What's changed and why it matters
…Platform, to quickly determine what are the most critical vulnerabilities and how to take action on them. You can enforce additional controls through merge request approval policies and pipeline execution policies to…
Reduce supply chain risk with SBOM-based dependency scanning
…Security and platform teams configure scanning once and apply it across hundreds of projects, instead of editing each pipeline by hand. You can mandate these security standards using scan execution policies and…
Claude Opus 5 on GitLab: Reasoning built for the hard tasks
…the context layer, policy checks, and audit trail that cover every model on GitLab Duo Agent Platform. Put Opus 5 to work Claude Opus 5 is available now on GitLab Duo Agent…
The ultimate guide to least privilege access with GitLab
…Scan Execution policies allow project maintainers and administrators the confidence of knowing that the scans they set up have not been changed, altered, or disabled. Merge Request Approval policies prevent insecure code…
3 signs your team is ready to uplevel security controls in GitLab
…But, as your team grows it becomes more challenging (if not impossible) to follow all code changes and activities. It’s also easy to lose sight of security policies and whether all…