Browse articles from Security
Recent posts
Terraform as part of the software supply chain, Part 1 - Modules and Providers
We examine the supply chain aspects of Terraform, starting with a closer look at malicious Terraform modules and providers and how you can better secure them.
How we run Red Team operations remotely
Our team shares the process and templates that drive our successful red team ops in our all-remote environment.
Updates regarding Rubygems ‘Unauthorized gem takeover for some gems’ vulnerability CVE-2022-29176
Actions we've taken to investigate the Rubygems takeover vulnerability.
One DevOps platform can help you achieve DevSecOps
GitLab drives innovation in the AST market to secure cloud-native applications.
Updates regarding Spring remote code execution vulnerabilities CVE-2022-22965 and CVE-2022-22963
Actions we've taken to investigate the Spring RCE vulnerabilities.
How to ensure separation of duties and enforce compliance with GitLab
Use your DevSecOps platform to help maintain compliance without compromising on development speed.
Comply with NIST's secure software supply chain framework with GitLab
The U.S. government's Secure Software Development Framework has four key practices. GitLab's DevOps platform has features to address them all.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert