Monitor your web attack surface with GitLab CI/CD and GitLab Pages

This post details the implementation of a web application attack surface monitoring solution using GitLab CI/CD and GitLab Pages. It outlines the creation of three shell scripts (`setup.sh`, `discover-services.sh`, `take-screenshots.sh`) to install tooling (httpx, gowitness), discover web services, and generate a static screenshot report. The `.gitlab-ci.yml` file is configured to orchestrate these scripts, with artifacts generated for job outputs and the `public` directory deployed via GitLab Pages. The post also covers setting up CI variables for targets and scheduling pipeline runs.