Pipeline security lessons from March supply chain incidents
Learn how centralized pipeline policies can detect and block the patterns behind a series of recent attacks.
Read PostSecurity Labs
Learn about cybersecurity trends, best practices, and third-party threats to secure your code and digital infrastructure.
Featured post
Recent posts
Security Labs
Automating detection gap analysis with GitLab Duo Agent Platform
Learn how GitLab's Signals Engineering team uses our AI platform to automatically surface detection gaps from security incidents — no manual review required.
Security Labs
How GitLab built a security control framework from scratch
GitLab's Security Compliance team created a custom control framework to scale across multiple certifications and products — here's why and how you can, too.
Security Labs
GitLab Threat Intelligence Team reveals North Korean tradecraft
Gain threat intelligence about North Korea’s Contagious Interview and fake IT worker campaigns and learn how GitLab disrupted their operations.
Security Labs
GitLab discovers widespread npm supply chain attack
Malware driving attack includes "dead man's switch" that can harm user data.
Security Labs
How to transform compliance observation management with GitLab
Learn how GitLab's Security Compliance team improved observation management using the DevSecOps platform, enhancing visibility, collaboration, and accountability.
Security Labs
Self-service security alert handling with GitLab's UAM
The User Attestation Module automates security alerts by routing them directly to team members for verification, reducing manual SecOps work and enhancing audit trails.
Security Labs
How GitLab measures Red Team impact: The adoption rate metric
Follow our journey to develop and implement better metrics, including how we used GitLab to track our results end-to-end. Also find out the lessons learned along the way.
