New CIS GitLab Benchmark scanner boosts security and compliance

This post introduces the open-source `gitlabcis` scanner, a Python CLI tool that audits GitLab projects against the CIS GitLab Benchmark. It details the installation process via pip, command-line usage for generating JSON reports, and the internal structure of the scanner including YAML recommendations and dedicated control functions. It highlights limitations of the current project-level scanning and outlines future roadmap items for instance/group-level scanning and integration into the GitLab product's Compliance Adherence Report. It also mentions two features contributed back to the product: 'Show crosslinked/related issues in merge requests via the API' and 'Groups API: Add Restrict group access by Domain'.