Vulnerability risk prioritization made simple with GitLab
Mar 12, 2025Fernando Diaz

Summary
This post introduces the integration of CVSS, KEV, and EPSS frameworks into GitLab's vulnerability management system. It details how these frameworks are displayed in the vulnerability report and insights pages, and how users can leverage them to prioritize remediation efforts. The post also provides instructions on adding security scanners (SAST, DAST, Dependency Scanning, Container Scanning, etc.) to CI/CD pipelines and managing vulnerability statuses with dismissal reasons.