GitLab

Reducing vulnerability backlog with Rezilion and GitLab

Mar 23, 2022Baksheesh Singh Ghuman
Reducing vulnerability backlog with Rezilion and GitLab
SummaryAI, from the source post

This post details the integration of Rezilion's DevSecOps technology with GitLab CI. Key contributions include: enabling developers to detect and remediate vulnerabilities early, reducing vulnerability backlog by up to 70% by identifying unexploitable vulnerabilities, prioritizing vulnerabilities based on exploitability, faster remediation by integrating Rezilion into the GitLab workflow, actionable insights within the CI pipeline (marking false positives), dynamic Software Bill of Materials (SBOM) for identifying loaded/unloaded components, and shifting security left by validating vulnerabilities in the CI pipeline. Results are available in the GitLab Security Dashboard and Vulnerability Management.

More from the FIPS Package Dependency Management trail