FIPS Package Dependency Management
GitLab's Maven dependency proxy is available in Beta

GitLab's Maven dependency proxy is available in Beta

12/11/2023 · Tim Rizzi

What this post added

Introduces the Maven dependency proxy, a new feature for artifact management that allows enterprises to consolidate on the DevSecOps platform. The proxy caches packages from external Java repositories locally, improving pipeline speed and reliability, and reducing data transfer costs. It detects changes in external repositories and invalidates cached packages to ensure correct versions are downloaded and to help reduce security vulnerabilities. The feature is in the Premium tier and configurable via project settings. Roadmap includes npm, container, PyPI, and NuGet dependency proxies.

Read the original post ↗