Announcing GitLab for DevSecOps
…Building upon the security features we’ve added over the past 12 months (SAST, DAST, dependency scanning, and container scanning), we’ve also released Auto Remediation, Security Dashboards, and will release Security…
Search
People also ask
How can you shift security left without slowing down?
Security scans generate hundreds of findings. Security teams manually triage each one while developers wait for approval to deploy. Most findings are false positives or low-risk issues, but identifying the real threats requires expertise and time. AI can prioritize findings by actual exploitability and auto-remediate common vulnerabilities, allowing security teams to focus on the threats that matter.
10 AI prompts to speed your team’s software deliveryHow do you keep documentation current as code changes?
Code changes faster than documentation. Onboarding new developers takes weeks because docs are outdated or missing. Teams know documentation is important, but it always gets deferred when deadlines approach. Automating documentation generation and updates as part of your standard workflow ensures docs stay current without adding manual work.
10 AI prompts to speed your team’s software deliveryBuilding GitLab with GitLab: Web API Fuzz Testing
…GitLab's Web API Fuzz Testing complements and should be run in addition to GitLab Secure’s other security scanners such as static application security testing ( SAST ) and dynamic application security testing…
Meet the demand for SBOMs with GitLab and Rezilion
…An appsec engineer can change the status, add additional information, and create confidential issues from this view. Manage dependencies Now that you have seen how to run security scans on your application…
Top ten GitLab hacks for all stages of the DevOps Platform
…It also allows you to unfold included files, and possible job overrides (for example changing the stage of an included SAST security template ). Let’s try a quick example – create a new…
Certificate-based Kubernetes integration sunsetting on GitLab.com
…Enhanced security Eliminates the need for storing cluster credentials in GitLab Provides secure, bidirectional communication between GitLab and your clusters Supports fine-grained access control and authorization policies Enables secure GitOps workflows…
Ask GitLab Security: Paul Harrison
…In the past decade, how has your area of expertise changed? 10 years ago I was almost entirely focused on the security and compliance tools necessary to keep a solid grasp on…
How to get the most out of software documentation
…Think about the security requirements for your software. For instance, when a project uses network communication over public transport, does it provide secure communication with TLS and/or https? Inform users about…
Introducing GitLab browser-based active checks in DAST
…More to explore Security GitLab Duo Security Review spots logic flaws scanners miss Security When a version bump breaks your build, GitLab fixes it Security One vulnerability view: From scanner coverage to…
AI Catalog updates for governance and operations
…Corinne Dent AI product Enterprise AI adoption often stalls not because the technology isn't ready, but because admins can't answer the question their security team is asking: What's actually…
How Developer-Centric AppSec Testing Transforms DevOps Teams
…August 21, 2020 7 min read How developer-centric AppSec testing can dramatically change your DevOps team Find and fix security bugs faster by implementing developer-centric application security testing in the…