Secure by Design principles meet DevSecOps innovation in GitLab 17
Jun 5, 2024Elisabeth Burrows

Summary
GitLab 17 introduces enhanced SAST analyzer coverage for more languages, improved API Security Testing, advanced vulnerability tracking for Secret Detection, and Dependency Scanning support for Android. The acquisition of Oxeye is highlighted for improving SAST accuracy. GitLab Duo's AI capabilities are expanded to assist with memory-safe code conversions, code explanation/suggestions, and vulnerability resolution, with new AI Impact Analytics to measure ROI. Enhanced governance controls and permissions customizations for custom roles are introduced to reinforce the principle of least privilege.