GitLab compliance frameworks: Adhere to SOC 2 in minutes

This post details the implementation and usage of custom compliance frameworks in GitLab, focusing on adhering to SOC 2. It explains how to create frameworks from templates (e.g., SOC 2 JSON), apply them to groups and projects, and leverage the compliance status report for continuous monitoring. It also describes how security policies can be scoped to compliance frameworks for enforcement. The post highlights specific controls mapped to SOC 2 criteria, such as SAST, dependency scanning, secret detection, default branch protection, and approval rules.