Top 5 compliance features to leverage in GitLab
Jul 13, 2022Madeline Lake

Summary
This post details the implementation and compliance relevance of several security features within GitLab, including Multi-Factor Authentication (MFA), privileged access review, protected branches, merge request approval settings, and audit events. It provides specific technical configurations and links to documentation for each feature, and maps them to relevant compliance standards and GitLab controls. The post emphasizes the importance of proactive security design and adherence to the principle of least privilege.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting