Get better container security with GitLab: 4 real-world examples
Jul 28, 2020Thiago Figueiró

Summary
This post details how GitLab's security features (Secret Detection, Dependency Scanning, DAST, WAF, Container Host Security, Network Policies, Pod Security Policies) can be used to prevent and detect specific attack vectors (exposed credentials, supply chain attacks, exploits leading to execution, lateral movement, reverse shells, filesystem modification) in containerized applications. It maps these attack scenarios to MITRE ATT&CK tactics and demonstrates how GitLab's CI/CD pipeline and Kubernetes integrations provide layered security.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting