FIPS Package Dependency Management
Coming soon: GitLab dependency firewall

Coming soon: GitLab dependency firewall

3/26/2024 · Tim Rizzi

What this post added

Introduces the upcoming 'dependency firewall' feature, which will act as a security layer for package downloads. It will include policy-based warnings or blocks for packages with known vulnerabilities, building upon the existing Maven dependency proxy. The initial implementation will focus on warning about critical vulnerabilities detected by dependency scanning.

Read the original post ↗