Building GitLab with GitLab: Expanding our security certification portfolio

What this post added

This post details how GitLab's Security Compliance team used its own platform for Agile planning (Epics, issues, labels, recurring issues, issue boards) and security features (Merge request approval settings, Protected branch settings, Code owners, SAST/DAST, Audit events) to achieve TISAX and SOC 2 Type 2 certifications. It highlights the use of these features for implementing security controls, scaling compliance efforts, and delivering results faster.