GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

GitLab warned today that a critical vulnerability in its product's GitLab Community and Enterprise editions allows attackers to run pipeline jobs as any other user. The GitLab DevSecOps platform has ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

App security testing tools provider GrammaTech today announced a technology partnership with GitLab to integrate the GrammaTech CodeSonar Static Application Security Testing (SAST) solution with ...

Addressing large enterprise and government agencies, the UK's National Cyber Security Center (NCSC) has issued a warning that attacks on a software build pipeline "can have wide-reaching impact". NCSC ...

SYDNEY--(BUSINESS WIRE)--Secure Code Warrior, the global developer driven security leader, today announced it has joined GitLab Inc.’s global partner program. As part of the partnership, Secure Code ...

The breakout startup is looking to ramp engagement with resellers, services providers and tech partners as enterprises rapidly adopt its comprehensive DevOps platform. GitLab rolled out its first ...