Blog security

Browse articles that include the security tag

Security 5 - cover
Our step-by-step guide to evaluating runtime security tools Key learnings from the GitLab Security team’s runtime security tool evaluation on Kubernetes clusters and Linux servers using real-world attack simulations. Authors: Hiroki Suezawa, Mitra Jozenazemian Read Post
Product security patch release cover

GitLab Patch Release: 17.11.2, 17.10.6, 17.9.8

Learn more about this patch release for GitLab Community Edition (CE) and Enterprise Edition (EE).

Security checkmark - cover - security

How to use GitLab's Custom Compliance Frameworks in your DevSecOps environment

Explore how new frameworks, along with more than 50 out-of-the-box controls, transform regulatory requirements from burdensome checkboxes to integrated, automated workflow components.

Security custom compliance frameworks - cover

Introducing Custom Compliance Frameworks in GitLab

Reduce manual tracking, accelerate audit readiness, and enforce controls faster natively within GitLab DevSecOps workflows.

Bulletin Board tanukilifecycle.png

GitLab rotating Omnibus Linux package signing key

Learn who is impacted by the rotation of the GNU Privacy Guard (GPG) key and what you need to know.

Product security patch release cover

GitLab Patch Release: 17.10.4, 17.9.6, 17.8.7

Learn more about this patch release for GitLab Community Edition (CE) and Enterprise Edition (EE).

Security GitLab and HackerOne logo lockup

Enhance application security with GitLab + HackerOne

Learn about the GitLab + HackerOne partnership and how to easily implement an integration that improves your organization’s application security posture.

Security security 5 - cover

Secure and safe login and commits with GitLab + Yubico

Learn how GitLab and Yubico have partnered to strengthen software development security through robust authentication measures.

Product security team - cover

Improving OAuth ROPC security on GitLab.com

GitLab.com is improving the security of OAuth Resource Owner Password Credentials (ROPC) by requiring client authentication, effective April 8, 2025.

Security security - chainlink - cover

Strengthen data security with custom PII detection rulesets

This tutorial explains how GitLab's customizable Secret Detection rulesets enhance data security by identifying PII patterns in code repositories. Learn how AI can help.

Ready to get started?

See what your team could do with a unified DevSecOps Platform.

Get free trial

Find out which plan works best for your team

Learn about pricing

Learn about what GitLab can do for your team

Talk to an expert