Meet the demand for SBOMs with GitLab and Rezilion

This post details the integration of GitLab with Rezilion to enhance software supply chain security. It explains the need for SBOMs, the typical SDLC for vulnerability management, and how to implement GitLab's security scanners (SAST, DAST, IaC, Container, Dependency, Fuzzing, Secret Detection) via CI/CD templates or UI configuration. It also covers managing vulnerabilities through the MR view and vulnerability report, and generating SBOMs using GitLab's Dependency List (CycloneDX format) or Rezilion's dynamic SBOM. The integration with Rezilion specifically focuses on triaging exploitable vulnerabilities by identifying and filtering out false positives.