How to ensure separation of duties and enforce compliance with GitLab

This post details the implementation of three new policy types for enforcing security and compliance: Scan Execution Policies (requiring specific scans like SAST), Merge Request Approval Policies (acting on scan results to require approvals), and Pipeline Execution Policies (enforcing CI/CD jobs). It also introduces Audit Events for tracking actions and the Standards Adherence report within the Compliance Center for an overview of merge request activity.