Harden your pipeline perimeter for the era of AI-assisted coding
… You can't enforce what isn't automated Enforcement is the difference between a policy that exists and a policy that runs. …
Search
The ultimate guide to least privilege access with GitLab
… Now, whenever you are creating a security policy, the following options will be available: Inserting a CI code block Scan Execution policy only Loading CI/CD code from file Scan Execution policy only Linking an existing CI file from another project Scan Execution policy only Scoping a policy to pro… …
5 ways to fix misleading vulnerability severities with policy
… Multiple rules within a policy = OR match any Limits 3 criteria per rule, 5 rules per policy, 5 policies per security policy project Scope Project-level or group-level. policy scope for compliance framework targeting Manual override precedence Manual overrides by authorized users always take preced… …
FinServ: How to implement GitLab's separation of duties features
… To implement further restrictions, please consider these key policy features: Prevent approval by author: This policy puts a guardrail in place so that a merge request author cannot approve their own changes. …
How to ensure separation of duties and enforce compliance with GitLab
… All scan execution policy changes are applied through a background job that runs once every 10 minutes. Allow up to 10 minutes for any policy changes committed to this project to take effect. …
Secure every commit to production with Claude and GitLab
… GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle. …
A guide to the breaking changes in GitLab 18.0
… You can learn more about the high-impact changes occurring within each of these windows in this breaking changes documentation . Note: Breaking changes may fall slightly outside of these windows in exceptional circumstances. …
How to govern agentic AI, MCPs, and AI code assistants
… Where do our subprocessors sit, and can we be notified when that list changes? …
Agentic coding is only as good as its context
… The agent reads the feedback, makes requested changes, commits them, and lets CI/CD validate the result. The human reviewer still validates the outcome, approving or requesting further changes, making the final merge decision. …
A guide to the high-impact breaking changes in GitLab 17.0
Published on: April 10, 2024 5 min read A guide to the high-impact breaking changes in GitLab 17.0 Find, assess, and mitigate the impact of deprecations and breaking changes in this year’s major release. …