Bridging the visibility gap in software supply chain security

GitLab 18.2 introduces two new capabilities: Security Inventory and Dependency Path visualization. Security Inventory provides a centralized, portfolio-wide view of risk and scan coverage across GitLab groups and projects, helping identify blind spots and prioritize mitigation. Dependency Path visualization displays the full route from a top-level package to a vulnerable component following an SCA scan, clarifying how open source vulnerabilities are introduced through the dependency chain and aiding developers in pinpointing fixes.