Secure every commit to production with Claude and GitLab

This post details the integration of Anthropic's Claude security guidance plugin with GitLab's DevSecOps platform. It outlines a five-step workflow for governing agentic coding at scale, focusing on enforcing security controls from code authoring to production. Key contributions include leveraging GitLab's security configuration profiles and merge request approval policies to enforce scans and prevent unauthorized merges, generating audit evidence through pipeline logs and approval records, controlling sensitive data sent to AI models via context exclusions and prompt guardrails, and extending security scanning coverage to dependencies, container images, and infrastructure as code. It also highlights the use of deterministic scanners alongside LLM-based reviews for compliance and auditability.