How to protect your source code with GitLab and Jscrambler
Jun 9, 2021Pedro Fortuna

Summary
This post introduces an integration with Jscrambler to provide runtime code protection for JavaScript-based applications. It details the importance of protecting client-side code from tampering and reverse engineering, and provides a step-by-step guide on configuring Jscrambler with GitLab CI. This includes setting up Jscrambler's JSON configuration file, storing API keys as GitLab environment variables, and defining a new 'protect' stage in the `.gitlab-ci.yml` file to run Jscrambler before deployment. The post also demonstrates how to check the protection result by inspecting the obfuscated source code.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting