Three things you might not know about GitLab security
Nov 23, 2021Matt Wilson

Summary
This post introduces the GraphQL API for vulnerability management, enabling programmatic creation of vulnerability records. It also details the implementation of security approvals in merge requests to prevent the merging of new vulnerabilities and introduces compliance pipelines for enforcing security hygiene by combining project and group-level configurations.
More from the Bug Triage and Reporting trail
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
- Manage vulnerability noise at scale with auto-dismiss policies
- How to transform compliance observation management with GitLab
- Self-service security alert handling with GitLab's UAM
- How GitLab measures Red Team impact: The adoption rate metric