Building GitLab with GitLab: Expanding our security certification portfolio

This post details how GitLab's Security Compliance team used Agile planning features (Epics, issues, labels, recurring issues, issue boards) and security features (Merge request approval settings, Protected branch settings, Code owners, SAST/DAST, Audit events) to achieve TISAX and SOC 2 Type 2 certifications. It highlights the practical application of these features for compliance audits and demonstrates how the GitLab DevSecOps Platform can be used to scale compliance efforts.