GitLab, the hugely popular devops platform, today announced the introduction of secrets detection with version 11.9 of the service. This means that should someone inadvertently include an API key or ...

GitLab 披露了多个高危拒绝服务（Denial-of-Service，DoS）漏洞，未经认证的攻击者可利用这些漏洞使自托管 GitLab 实例崩溃。这些漏洞影响 18.4.1、18.3.3 和 18.2.7 之前的社区版（Community Edition，CE）和企业版（Enterprise Edition，EE），攻击者可通过 HTTP 端点和 GraphQL API 发起 ...

A new patch fixes six important GitLab flaws ...

近日，被视为全球第二大开源代码托管和项目管理平台的 GitLab 宣布其将对中国区用户停止提供 GitLab.com 账号服务，建议现有用户迁移到极狐。 中国 IP 地址现在访问 GitLab.com 页面会弹出下面窗口且直接转到 about.gitlab.com 页面，推荐用户访问极狐。 与此同时，也 ...

【TechWeb】12月23日消息，有开发者用户在社区发言称，在登录代码托管平台 GitLab Global 国际站后个人主页显示了一则重要通知《Important Change to Your GitLab.com Account》， 宣布将不再为位于中国大陆、澳门和香港的用户提供 GitLab.com 账户服务。平台建议受影响的用户将 ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their systems against a five-year-old GitLab vulnerability that is actively being exploited in ...

Researcher Luke Marshall found 17,000 exposed secrets in GitLab Cloud repositories Leaked credentials risk hijacks, cryptomining, and deeper infrastructure compromise Marshall automated scans, earned ...

The DevSecOps system unifies CI/CD and built-in security scans in one platform so that teams can ship faster with fewer vulnerabilities.

Moving forward on AI, GitLab is offering a public beta of GitLab Duo Agent Platform, a devsecops orchestration platform intended to unlock asynchronous collaboration between developers and AI agents.