[{"data":1,"prerenderedAt":1012},["ShallowReactive",2],{"/blog/automate-embedded-systems-compliance-with-gitlab-and-codesonar":3,"navigation-en-us":218,"banner-en-us":646,"footer-en-us":656,"blog-post-authors-en-us-Mark Hermeling|Darwin Sanoy":901,"blog-related-posts-en-us-automate-embedded-systems-compliance-with-gitlab-and-codesonar":930,"blog-promotions-en-us":949,"next-steps-en-us":1002},{"id":4,"title":5,"authors":6,"body":9,"category":199,"date":200,"description":201,"extension":202,"externalUrl":203,"faq":203,"featured":204,"heroImage":205,"meta":206,"navigation":204,"path":207,"seo":208,"slug":211,"stem":212,"tags":213,"template":216,"updatedDate":203,"__hash__":217},"blogPosts/en-us/blog/automate-embedded-systems-compliance-with-gitlab-and-codesonar.md","Automate embedded systems compliance with GitLab and CodeSonar",[7,8],"Mark Hermeling","Darwin Sanoy",{"type":10,"value":11,"toc":190},"minimark",[12,16,25,30,33,41,45,54,57,72,76,79,91,95,98,119,123,126,143,147,154,163,168,176],[13,14,15],"p",{},"Embedded systems development teams face a persistent challenge: maintaining development velocity while meeting stringent functional safety and code quality requirements. Standards like ISO 26262, IEC 62304, DO-178C, and IEC 61508 demand rigorous verification processes that are often manual and time-consuming. Compliance reviews against coding standards like MISRA C/C++, isolated scanning workflows, and post-development verification create bottlenecks. Teams are forced to choose between speed and safety.",[13,17,18,24],{},[19,20,23],"a",{"href":21,"rel":22},"https://gitlab.com/explore/catalog/codesonar/components/codesonar-ci",[],"GitLab's integration with CodeSonar"," (from AdaCore) addresses this challenge by automating compliance workflows and enabling continuous verification throughout the development lifecycle.",[26,27,29],"h2",{"id":28},"specialized-scanning-for-safety-critical-systems","Specialized scanning for safety-critical systems",[13,31,32],{},"Safety-critical systems require deep analysis of C/C++ code compiled with specialized embedded tools. These systems must demonstrate compliance with coding standards (MISRA C/C++, CERT C/C++, AUTOSAR C++) and functional safety frameworks (ISO 26262, DO-178C, IEC 61508) that require detailed evidence trails. Beyond aligning with coding standards, teams also need to address security concerns. This means testing for memory problems as well as a host of other problems like uninitialized variables and command injection.",[13,34,35,40],{},[19,36,39],{"href":37,"rel":38},"https://www.adacore.com/codesonar",[],"CodeSonar"," performs whole program analysis with specialized scanning capabilities for these standards. Pairing CodeSonar with GitLab enables teams to automate compliance workflows and maintain comprehensive audit trails throughout the development lifecycle.",[26,42,44],{"id":43},"automating-compliance-from-commit-to-merge","Automating compliance from commit to merge",[13,46,47,48,53],{},"The GitLab and CodeSonar integration provides a compliance-as-code approach that automates policy enforcement from the earliest stages of development. CodeSonar functions as an additional scanner within ",[19,49,52],{"href":50,"rel":51},"https://docs.gitlab.com/ci/",[],"GitLab CI/CD pipelines",", analyzing code in every commit and merge request.",[13,55,56],{},"Because CodeSonar was purpose-built for embedded systems, it performs deep control flow and data flow analysis across entire programs, identifying vulnerabilities like buffer overruns, data taint, uninitialized variables, use-after-free conditions, and command injection — the root causes of most security incidents in embedded systems.",[13,58,59,60,65,66,71],{},"The integration works through GitLab's CI/CD configuration. When developers push code changes, the pipeline triggers CodeSonar scanning. For C and C++ firmware, CodeSonar observes compiler invocations during the actual build process, creating an internal representation of the code that enables sophisticated analysis. Results are converted from SARIF format to GitLab's Static Application Security Testing (",[19,61,64],{"href":62,"rel":63},"https://docs.gitlab.com/user/application_security/sast/",[],"SAST",") format and surfaced directly in merge requests, where they feed into GitLab Ultimate's Security Dashboard, Vulnerability Management, and ",[19,67,70],{"href":68,"rel":69},"https://docs.gitlab.com/user/compliance/compliance_frameworks/",[],"Compliance Frameworks",".",[26,73,75],{"id":74},"example-workflow-iso-26262-asil-d-compliance","Example workflow: ISO 26262 ASIL-D compliance",[13,77,78],{},"The demo video below shows the complete workflow for an embedded system subject to ISO 26262 ASIL-D requirements. The scenario illustrates how embedded development teams can implement continuous compliance without compromising development velocity.",[80,81,82],"div",{},[83,84],"iframe",{"src":85,"frameBorder":86,"allow":87,"referrerPolicy":88,"style":89,"title":90},"https://player.vimeo.com/video/1139086924?badge=0&autopause=0&player_id=0&app_id=58479","0","autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share","strict-origin-when-cross-origin","position:absolute;top:0;left:0;width:100%;height:100%;","Automated Compliance for Embedded Systems using GitLab and CodeSonar",[92,93],"script",{"src":94},"https://player.vimeo.com/api/player.js",[13,96,97],{},"The workflow begins with a developer submitting a merge request for firmware changes. GitLab's CI/CD pipeline automatically triggers CodeSonar scanning, which performs deep C/C++ analysis against custom ISO 26262 policies configured in the pipeline. When CodeSonar identifies an ASIL-D relevant vulnerability, the pipeline halts automatically per the compliance policy, with clear documentation explaining the issue. The complete scan results, issue tracking, and approval workflow are maintained in GitLab as a single source of truth for audit trails.",[13,99,100,101,106,107,112,113,118],{},"Developers can use both the CodeSonar hub interface and ",[19,102,105],{"href":103,"rel":104},"https://docs.gitlab.com/user/gitlab_duo/",[],"GitLab Duo AI"," to understand the vulnerability. CodeSonar provides detailed information about the path through the source code that leads to the problem, along with code navigation features to isolate the root cause. GitLab Duo ",[19,108,111],{"href":109,"rel":110},"https://docs.gitlab.com/user/application_security/vulnerabilities/#vulnerability-explanation",[],"explains the vulnerability"," and provides specific ",[19,114,117],{"href":115,"rel":116},"https://docs.gitlab.com/user/application_security/vulnerabilities/#vulnerability-resolution",[],"remediation recommendations",". After the developer implements the fix and validates the resolution, the code merges successfully with full compliance evidence automatically collected throughout the process.",[26,120,122],{"id":121},"benefits-of-the-integration","Benefits of the integration",[13,124,125],{},"Organizations implementing this integrated compliance with GitLab and CodeSonar will see significant improvements in both development velocity and compliance confidence.",[127,128,129,137],"ul",{},[130,131,132,136],"li",{},[133,134,135],"strong",{},"Efficiency gains:"," Development teams reduce time-to-market by catching coding standard compliance issues early when they're less expensive to fix. Automated security policy enforcement decreases manual security review overhead, freeing specialists to focus on complex problems rather than routine checks. Audit readiness improves through automated evidence collection. Compliance artifacts are generated as a by-product of normal development rather than through separate documentation efforts.",[130,138,139,142],{},[133,140,141],{},"Compliance maturity:"," This integrated approach helps organizations maintain continuous compliance with industry standards and regulations. By embedding verification into every code change, teams build comprehensive audit trails that demonstrate adherence to ISO 26262, DO-178C, MISRA C/C++, and other requirements. The automated workflow transforms compliance from a periodic checkpoint into an ongoing verification process.",[26,144,146],{"id":145},"implementation-considerations","Implementation considerations",[13,148,149,150,153],{},"Implementing the GitLab and CodeSonar integration requires access to GitLab Ultimate, a CodeSonar hub, GitLab runners where code can be compiled and analyzed, and appropriate mechanisms for managing analysis data files. Both GitLab and CodeSonar fully support ",[133,151,152],{},"on-premises and air-gapped environments"," and can be deployed to auto-scalable cloud environments as well.",[13,155,156,157,162],{},"Teams should configure ",[19,158,161],{"href":159,"rel":160},"https://about.gitlab.com/blog/introducing-custom-compliance-frameworks-in-gitlab/",[],"Custom Compliance Frameworks"," in GitLab to define specific policies for their relevant standards: ISO 26262 for automotive, DO-178C for aerospace, IEC 62304 for medical devices, and others. These frameworks enable automated enforcement of compliance requirements through merge request approval rules, vulnerability thresholds, and scan policy gates.",[164,165,167],"h1",{"id":166},"get-started","Get started",[13,169,170,171,175],{},"The ",[19,172,174],{"href":21,"rel":173},[],"CodeSonar GitLab CI component"," is available through GitLab's CI/CD Catalog. Detailed integration documentation provides platform-specific setup instructions for Linux, Docker, and Windows environments. For organizations evaluating this solution, the implementation demonstrates how specialized embedded systems tools can integrate with a modern DevSecOps platform to deliver both development velocity and compliance rigor.",[13,177,178,179,184,185,71],{},"For more information about implementing GitLab with CodeSonar for your embedded systems development, visit the ",[19,180,183],{"href":181,"rel":182},"https://support-resources.codesecure.com/integrations/gitlab/documentation/",[],"CodeSonar integration documentation",". You can also ",[19,186,189],{"href":187,"rel":188},"https://www.adacore.com/request-a-codesonar-trial",[],"request a trial of CodeSonar",{"title":191,"searchDepth":192,"depth":192,"links":193},"",2,[194,195,196,197,198],{"id":28,"depth":192,"text":29},{"id":43,"depth":192,"text":44},{"id":74,"depth":192,"text":75},{"id":121,"depth":192,"text":122},{"id":145,"depth":192,"text":146},"product","2025-12-02","Continuous compliance verification for ISO 26262, DO-178C, MISRA, and other code quality and functional safety standards.","md",null,true,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659978/Blog/Hero%20Images/automation.png",{},"/en-us/blog/automate-embedded-systems-compliance-with-gitlab-and-codesonar",{"config":209,"title":5,"description":201},{"noIndex":210},false,"automate-embedded-systems-compliance-with-gitlab-and-codesonar","en-us/blog/automate-embedded-systems-compliance-with-gitlab-and-codesonar",[214,215,199],"embedded DevOps","tutorial","BlogPost","gncnK19qiUIFQn-j3IZOIeJgBzomciIHeL6nFIDJhjE",{"logo":219,"freeTrial":224,"sales":229,"login":234,"items":239,"search":566,"minimal":597,"duo":616,"switchNav":625,"pricingDeployment":636},{"config":220},{"href":221,"dataGaName":222,"dataGaLocation":223},"/","gitlab logo","header",{"text":225,"config":226},"Get free trial",{"href":227,"dataGaName":228,"dataGaLocation":223},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":230,"config":231},"Request a demo",{"href":232,"dataGaName":233,"dataGaLocation":223},"/sales/?contact-topic=request-demo","sales",{"text":235,"config":236},"Sign in",{"href":237,"dataGaName":238,"dataGaLocation":223},"https://gitlab.com/users/sign_in/","sign in",[240,269,369,374,488,544],{"text":241,"config":242,"menu":244},"Platform",{"dataNavLevelOne":243},"platform",{"type":245,"columns":246},"cards",[247,253,261],{"title":241,"description":248,"link":249},"The intelligent orchestration platform for DevSecOps",{"text":250,"config":251},"Explore our Platform",{"href":252,"dataGaName":243,"dataGaLocation":223},"/platform/",{"title":254,"description":255,"link":256},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":257,"config":258},"Meet GitLab Duo",{"href":259,"dataGaName":260,"dataGaLocation":223},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":262,"description":263,"link":264},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":265,"config":266},"Learn more",{"href":267,"dataGaName":268,"dataGaLocation":223},"/why-gitlab/","why gitlab",{"text":270,"left":204,"config":271,"menu":273},"Product",{"dataNavLevelOne":272},"solutions",{"type":274,"link":275,"columns":279,"feature":348},"lists",{"text":276,"config":277},"View all Solutions",{"href":278,"dataGaName":272,"dataGaLocation":223},"/solutions/",[280,304,327],{"title":281,"description":282,"link":283,"items":288},"Automation","CI/CD and automation to accelerate deployment",{"config":284},{"icon":285,"href":286,"dataGaName":287,"dataGaLocation":223},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[289,293,296,300],{"text":290,"config":291},"CI/CD",{"href":292,"dataGaLocation":223,"dataGaName":290},"/solutions/continuous-integration/",{"text":254,"config":294},{"href":259,"dataGaLocation":223,"dataGaName":295},"gitlab duo agent platform - product menu",{"text":297,"config":298},"Source Code Management",{"href":299,"dataGaLocation":223,"dataGaName":297},"/solutions/source-code-management/",{"text":301,"config":302},"Automated Software Delivery",{"href":286,"dataGaLocation":223,"dataGaName":303},"Automated software delivery",{"title":305,"description":306,"link":307,"items":312},"Security","Deliver code faster without compromising security",{"config":308},{"href":309,"dataGaName":310,"dataGaLocation":223,"icon":311},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[313,317,322],{"text":314,"config":315},"Application Security Testing",{"href":309,"dataGaName":316,"dataGaLocation":223},"Application security testing",{"text":318,"config":319},"Software Supply Chain Security",{"href":320,"dataGaLocation":223,"dataGaName":321},"/solutions/supply-chain/","Software supply chain security",{"text":323,"config":324},"Software Compliance",{"href":325,"dataGaName":326,"dataGaLocation":223},"/solutions/software-compliance/","software compliance",{"title":328,"link":329,"items":334},"Measurement",{"config":330},{"icon":331,"href":332,"dataGaName":333,"dataGaLocation":223},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[335,339,343],{"text":336,"config":337},"Visibility & Measurement",{"href":332,"dataGaLocation":223,"dataGaName":338},"Visibility and Measurement",{"text":340,"config":341},"Value Stream Management",{"href":342,"dataGaLocation":223,"dataGaName":340},"/solutions/value-stream-management/",{"text":344,"config":345},"Analytics & Insights",{"href":346,"dataGaLocation":223,"dataGaName":347},"/solutions/analytics-and-insights/","Analytics and insights",{"title":349,"type":274,"items":350},"GitLab for",[351,357,363],{"text":352,"config":353},"Enterprise",{"icon":354,"href":355,"dataGaLocation":223,"dataGaName":356},"Building","/enterprise/","enterprise",{"text":358,"config":359},"Small Business",{"icon":360,"href":361,"dataGaLocation":223,"dataGaName":362},"Work","/small-business/","small business",{"text":364,"config":365},"Public Sector",{"icon":366,"href":367,"dataGaLocation":223,"dataGaName":368},"Organization","/solutions/public-sector/","public sector",{"text":370,"config":371},"Pricing",{"href":372,"dataGaName":373,"dataGaLocation":223,"dataNavLevelOne":373},"/pricing/","pricing",{"text":375,"config":376,"menu":378},"Resources",{"dataNavLevelOne":377},"resources",{"type":274,"link":379,"columns":383,"feature":477},{"text":380,"config":381},"View all resources",{"href":382,"dataGaName":377,"dataGaLocation":223},"/resources/",[384,417,444],{"title":385,"items":386},"Getting started",[387,392,397,402,407,412],{"text":388,"config":389},"Install",{"href":390,"dataGaName":391,"dataGaLocation":223},"/install/","install",{"text":393,"config":394},"Quick start guides",{"href":395,"dataGaName":396,"dataGaLocation":223},"/get-started/","quick setup checklists",{"text":398,"config":399},"Learn",{"href":400,"dataGaLocation":223,"dataGaName":401},"https://university.gitlab.com/","learn",{"text":403,"config":404},"Product documentation",{"href":405,"dataGaName":406,"dataGaLocation":223},"https://docs.gitlab.com/","product documentation",{"text":408,"config":409},"Best practice videos",{"href":410,"dataGaName":411,"dataGaLocation":223},"/getting-started-videos/","best practice videos",{"text":413,"config":414},"Integrations",{"href":415,"dataGaName":416,"dataGaLocation":223},"/integrations/","integrations",{"title":418,"items":419},"Discover",[420,425,430,435,439],{"text":421,"config":422},"Customer success stories",{"href":423,"dataGaName":424,"dataGaLocation":223},"/customers/","customer success stories",{"text":426,"config":427},"Blog",{"href":428,"dataGaName":429,"dataGaLocation":223},"/blog/","blog",{"text":431,"config":432},"Demo Hub",{"href":433,"dataGaName":434,"dataGaLocation":223},"/demo-hub/","demo hub",{"text":436,"config":437},"The Source",{"href":438,"dataGaName":429,"dataGaLocation":223},"/the-source/",{"text":440,"config":441},"Remote",{"href":442,"dataGaName":443,"dataGaLocation":223},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":445,"items":446},"Connect",[447,452,457,462,467,472],{"text":448,"config":449},"GitLab Services",{"href":450,"dataGaName":451,"dataGaLocation":223},"/services/","services",{"text":453,"config":454},"Contribute",{"href":455,"dataGaName":456,"dataGaLocation":223},"https://contributors.gitlab.com","contribute",{"text":458,"config":459},"Community",{"href":460,"dataGaName":461,"dataGaLocation":223},"/community/","community",{"text":463,"config":464},"Forum",{"href":465,"dataGaName":466,"dataGaLocation":223},"https://forum.gitlab.com/","forum",{"text":468,"config":469},"Events",{"href":470,"dataGaName":471,"dataGaLocation":223},"/events/","events",{"text":473,"config":474},"Partners",{"href":475,"dataGaName":476,"dataGaLocation":223},"/partners/","partners",{"config":478,"title":481,"text":482,"link":483},{"background":479,"textColor":480},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":484,"config":485},"Read the latest",{"href":486,"dataGaName":487,"dataGaLocation":223},"/whats-new/","whats new",{"text":489,"config":490,"menu":492},"Company",{"dataNavLevelOne":491},"company",{"type":274,"columns":493},[494],{"items":495},[496,501,507,509,514,519,524,529,534,539],{"text":497,"config":498},"About",{"href":499,"dataGaName":500,"dataGaLocation":223},"/company/","about",{"text":502,"config":503,"footerGa":506},"Jobs",{"href":504,"dataGaName":505,"dataGaLocation":223},"/jobs/","jobs",{"dataGaName":505},{"text":468,"config":508},{"href":470,"dataGaName":471,"dataGaLocation":223},{"text":510,"config":511},"Leadership",{"href":512,"dataGaName":513,"dataGaLocation":223},"/company/team/e-group/","leadership",{"text":515,"config":516},"Handbook",{"href":517,"dataGaName":518,"dataGaLocation":223},"https://handbook.gitlab.com/","handbook",{"text":520,"config":521},"Investor relations",{"href":522,"dataGaName":523,"dataGaLocation":223},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":525,"config":526},"Trust Center",{"href":527,"dataGaName":528,"dataGaLocation":223},"/security/","trust center",{"text":530,"config":531},"AI Transparency Center",{"href":532,"dataGaName":533,"dataGaLocation":223},"/ai-transparency-center/","ai transparency center",{"text":535,"config":536},"Newsletter",{"href":537,"dataGaName":538,"dataGaLocation":223},"/company/contact/#contact-forms","newsletter",{"text":540,"config":541},"Press",{"href":542,"dataGaName":543,"dataGaLocation":223},"/press/","press",{"text":545,"config":546,"menu":547},"Contact us",{"dataNavLevelOne":491},{"type":274,"columns":548},[549],{"items":550},[551,556,561],{"text":552,"config":553},"Talk to sales",{"href":554,"dataGaName":555,"dataGaLocation":223},"/sales/","talk to sales",{"text":557,"config":558},"Support portal",{"href":559,"dataGaName":560,"dataGaLocation":223},"https://support.gitlab.com/hc/en-us","support portal",{"text":562,"config":563},"Customer portal",{"href":564,"dataGaName":565,"dataGaLocation":223},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":567,"login":568,"suggestions":575},"Close",{"text":569,"link":570},"To search repositories and projects, login to",{"text":571,"config":572},"gitlab.com",{"href":237,"dataGaName":573,"dataGaLocation":574},"search login","search",{"text":576,"default":577},"Suggestions",[578,580,584,586,590,594],{"text":254,"config":579},{"href":259,"dataGaName":254,"dataGaLocation":574},{"text":581,"config":582},"Code Suggestions (AI)",{"href":583,"dataGaName":581,"dataGaLocation":574},"/solutions/code-suggestions/",{"text":290,"config":585},{"href":292,"dataGaName":290,"dataGaLocation":574},{"text":587,"config":588},"GitLab on AWS",{"href":589,"dataGaName":587,"dataGaLocation":574},"/partners/technology-partners/aws/",{"text":591,"config":592},"GitLab on Google Cloud",{"href":593,"dataGaName":591,"dataGaLocation":574},"/partners/technology-partners/google-cloud-platform/",{"text":595,"config":596},"Why GitLab?",{"href":267,"dataGaName":595,"dataGaLocation":574},{"freeTrial":598,"mobileIcon":603,"desktopIcon":608,"secondaryButton":611},{"text":599,"config":600},"Start free trial",{"href":601,"dataGaName":228,"dataGaLocation":602},"https://gitlab.com/-/trials/new/","nav",{"altText":604,"config":605},"Gitlab Icon",{"src":606,"dataGaName":607,"dataGaLocation":602},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":604,"config":609},{"src":610,"dataGaName":607,"dataGaLocation":602},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":612,"config":613},"Get Started",{"href":614,"dataGaName":615,"dataGaLocation":602},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":617,"mobileIcon":621,"desktopIcon":623},{"text":618,"config":619},"Learn more about GitLab Duo",{"href":259,"dataGaName":620,"dataGaLocation":602},"gitlab duo",{"altText":604,"config":622},{"src":606,"dataGaName":607,"dataGaLocation":602},{"altText":604,"config":624},{"src":610,"dataGaName":607,"dataGaLocation":602},{"button":626,"mobileIcon":631,"desktopIcon":633},{"text":627,"config":628},"/switch",{"href":629,"dataGaName":630,"dataGaLocation":602},"#contact","switch",{"altText":604,"config":632},{"src":606,"dataGaName":607,"dataGaLocation":602},{"altText":604,"config":634},{"src":635,"dataGaName":607,"dataGaLocation":602},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":637,"mobileIcon":642,"desktopIcon":644},{"text":638,"config":639},"Back to pricing",{"href":372,"dataGaName":640,"dataGaLocation":602,"icon":641},"back to pricing","GoBack",{"altText":604,"config":643},{"src":606,"dataGaName":607,"dataGaLocation":602},{"altText":604,"config":645},{"src":610,"dataGaName":607,"dataGaLocation":602},{"title":647,"titleMobile":648,"button":649,"config":654},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":265,"config":650},{"href":651,"dataGaName":652,"dataGaLocation":653},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":655,"disabled":210},"release",{"data":657},{"text":658,"source":659,"edit":665,"contribute":670,"config":675,"items":680,"minimal":890},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":660,"config":661},"View page source",{"href":662,"dataGaName":663,"dataGaLocation":664},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":666,"config":667},"Edit this page",{"href":668,"dataGaName":669,"dataGaLocation":664},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":671,"config":672},"Please contribute",{"href":673,"dataGaName":674,"dataGaLocation":664},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":676,"facebook":677,"youtube":678,"linkedin":679},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[681,728,782,826,858],{"title":370,"links":682,"subMenu":697},[683,687,692],{"text":684,"config":685},"View plans",{"href":372,"dataGaName":686,"dataGaLocation":664},"view plans",{"text":688,"config":689},"Why Premium?",{"href":690,"dataGaName":691,"dataGaLocation":664},"/pricing/premium/","why premium",{"text":693,"config":694},"Why Ultimate?",{"href":695,"dataGaName":696,"dataGaLocation":664},"/pricing/ultimate/","why ultimate",[698],{"title":699,"links":700},"Contact Us",[701,704,706,708,713,718,723],{"text":702,"config":703},"Contact sales",{"href":554,"dataGaName":233,"dataGaLocation":664},{"text":557,"config":705},{"href":559,"dataGaName":560,"dataGaLocation":664},{"text":562,"config":707},{"href":564,"dataGaName":565,"dataGaLocation":664},{"text":709,"config":710},"Status",{"href":711,"dataGaName":712,"dataGaLocation":664},"https://status.gitlab.com/","status",{"text":714,"config":715},"Terms of use",{"href":716,"dataGaName":717,"dataGaLocation":664},"/terms/","terms of use",{"text":719,"config":720},"Privacy statement",{"href":721,"dataGaName":722,"dataGaLocation":664},"/privacy/","privacy statement",{"text":724,"config":725},"Cookie preferences",{"dataGaName":726,"dataGaLocation":664,"id":727,"isOneTrustButton":204},"cookie preferences","ot-sdk-btn",{"title":270,"links":729,"subMenu":738},[730,734],{"text":731,"config":732},"DevSecOps platform",{"href":252,"dataGaName":733,"dataGaLocation":664},"devsecops platform",{"text":735,"config":736},"AI-Assisted Development",{"href":259,"dataGaName":737,"dataGaLocation":664},"ai-assisted development",[739],{"title":740,"links":741},"Topics",[742,747,752,757,762,767,772,777],{"text":743,"config":744},"CICD",{"href":745,"dataGaName":746,"dataGaLocation":664},"/topics/ci-cd/","cicd",{"text":748,"config":749},"GitOps",{"href":750,"dataGaName":751,"dataGaLocation":664},"/topics/gitops/","gitops",{"text":753,"config":754},"DevOps",{"href":755,"dataGaName":756,"dataGaLocation":664},"/topics/devops/","devops",{"text":758,"config":759},"Version Control",{"href":760,"dataGaName":761,"dataGaLocation":664},"/topics/version-control/","version control",{"text":763,"config":764},"DevSecOps",{"href":765,"dataGaName":766,"dataGaLocation":664},"/topics/devsecops/","devsecops",{"text":768,"config":769},"Cloud Native",{"href":770,"dataGaName":771,"dataGaLocation":664},"/topics/cloud-native/","cloud native",{"text":773,"config":774},"AI for Coding",{"href":775,"dataGaName":776,"dataGaLocation":664},"/topics/devops/ai-for-coding/","ai for coding",{"text":778,"config":779},"Agentic AI",{"href":780,"dataGaName":781,"dataGaLocation":664},"/topics/agentic-ai/","agentic ai",{"title":783,"links":784},"Solutions",[785,787,789,794,798,801,805,808,810,813,816,821],{"text":314,"config":786},{"href":309,"dataGaName":314,"dataGaLocation":664},{"text":303,"config":788},{"href":286,"dataGaName":287,"dataGaLocation":664},{"text":790,"config":791},"Agile development",{"href":792,"dataGaName":793,"dataGaLocation":664},"/solutions/agile-delivery/","agile delivery",{"text":795,"config":796},"SCM",{"href":299,"dataGaName":797,"dataGaLocation":664},"source code management",{"text":743,"config":799},{"href":292,"dataGaName":800,"dataGaLocation":664},"continuous integration & delivery",{"text":802,"config":803},"Value stream management",{"href":342,"dataGaName":804,"dataGaLocation":664},"value stream management",{"text":748,"config":806},{"href":807,"dataGaName":751,"dataGaLocation":664},"/solutions/gitops/",{"text":352,"config":809},{"href":355,"dataGaName":356,"dataGaLocation":664},{"text":811,"config":812},"Small business",{"href":361,"dataGaName":362,"dataGaLocation":664},{"text":814,"config":815},"Public sector",{"href":367,"dataGaName":368,"dataGaLocation":664},{"text":817,"config":818},"Education",{"href":819,"dataGaName":820,"dataGaLocation":664},"/solutions/education/","education",{"text":822,"config":823},"Financial services",{"href":824,"dataGaName":825,"dataGaLocation":664},"/solutions/finance/","financial services",{"title":375,"links":827},[828,830,832,834,837,839,842,844,846,848,850,852,854,856],{"text":388,"config":829},{"href":390,"dataGaName":391,"dataGaLocation":664},{"text":393,"config":831},{"href":395,"dataGaName":396,"dataGaLocation":664},{"text":398,"config":833},{"href":400,"dataGaName":401,"dataGaLocation":664},{"text":403,"config":835},{"href":405,"dataGaName":836,"dataGaLocation":664},"docs",{"text":426,"config":838},{"href":428,"dataGaName":429,"dataGaLocation":664},{"text":840,"config":841},"What's new",{"href":486,"dataGaName":487,"dataGaLocation":664},{"text":421,"config":843},{"href":423,"dataGaName":424,"dataGaLocation":664},{"text":440,"config":845},{"href":442,"dataGaName":443,"dataGaLocation":664},{"text":448,"config":847},{"href":450,"dataGaName":451,"dataGaLocation":664},{"text":453,"config":849},{"href":455,"dataGaName":456,"dataGaLocation":664},{"text":458,"config":851},{"href":460,"dataGaName":461,"dataGaLocation":664},{"text":463,"config":853},{"href":465,"dataGaName":466,"dataGaLocation":664},{"text":468,"config":855},{"href":470,"dataGaName":471,"dataGaLocation":664},{"text":473,"config":857},{"href":475,"dataGaName":476,"dataGaLocation":664},{"title":489,"links":859},[860,862,864,866,868,870,874,879,881,883,885],{"text":497,"config":861},{"href":499,"dataGaName":491,"dataGaLocation":664},{"text":502,"config":863},{"href":504,"dataGaName":505,"dataGaLocation":664},{"text":510,"config":865},{"href":512,"dataGaName":513,"dataGaLocation":664},{"text":515,"config":867},{"href":517,"dataGaName":518,"dataGaLocation":664},{"text":520,"config":869},{"href":522,"dataGaName":523,"dataGaLocation":664},{"text":871,"config":872},"Sustainability",{"href":873,"dataGaName":871,"dataGaLocation":664},"/sustainability/",{"text":875,"config":876},"Diversity, inclusion and belonging (DIB)",{"href":877,"dataGaName":878,"dataGaLocation":664},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":525,"config":880},{"href":527,"dataGaName":528,"dataGaLocation":664},{"text":535,"config":882},{"href":537,"dataGaName":538,"dataGaLocation":664},{"text":540,"config":884},{"href":542,"dataGaName":543,"dataGaLocation":664},{"text":886,"config":887},"Modern Slavery Transparency Statement",{"href":888,"dataGaName":889,"dataGaLocation":664},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":891},[892,895,898],{"text":893,"config":894},"Terms",{"href":716,"dataGaName":717,"dataGaLocation":664},{"text":896,"config":897},"Cookies",{"dataGaName":726,"dataGaLocation":664,"id":727,"isOneTrustButton":204},{"text":899,"config":900},"Privacy",{"href":721,"dataGaName":722,"dataGaLocation":664},[902,916],{"id":903,"title":7,"body":203,"config":904,"content":906,"description":203,"extension":910,"meta":911,"navigation":204,"path":912,"seo":913,"stem":914,"__hash__":915},"blogAuthors/en-us/blog/authors/mark-hermeling.yml",{"template":905},"BlogAuthor",{"name":7,"config":907,"bio":191,"role":909},{"headshot":908},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1764087517/ay8u8nobvaebiibelkzx.jpg","Head of Technical Marketing, AdaCore (parent company of CodeSonar product)","yml",{},"/en-us/blog/authors/mark-hermeling",{},"en-us/blog/authors/mark-hermeling","OqPJzf741jcekkwi_E_9NsCfboiDZfeXfhk9d18WbDc",{"id":917,"title":8,"body":203,"config":918,"content":919,"description":203,"extension":910,"meta":925,"navigation":204,"path":926,"seo":927,"stem":928,"__hash__":929},"blogAuthors/en-us/blog/authors/darwin-sanoy.yml",{"template":905},{"role":920,"name":8,"config":921},"Field Chief Cloud Architect",{"headshot":922,"linkedin":923,"ctfId":924},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659751/Blog/Author%20Headshots/Darwin-Sanoy-headshot-395-square-gitlab-teampage-avatar.png","https://linkedin.com/in/darwinsanoy","DarwinJS",{},"/en-us/blog/authors/darwin-sanoy",{},"en-us/blog/authors/darwin-sanoy","UkMMwmU5o2e6Y-wBltA9E_z96LvHuB-bG6VW9DsLzIY",[931,937,941],{"title":932,"description":933,"heroImage":934,"category":199,"date":935,"authors":203,"slug":203,"externalUrl":936},"GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6","Learn about this latest patch release for Community Edition and Enterprise Edition.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749661926/Blog/Hero%20Images/security-patch-blog-image-r2-0506-700x400-fy25_2x.jpg","2026-08-12","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/",{"title":938,"description":933,"heroImage":934,"category":199,"date":939,"authors":203,"slug":203,"externalUrl":940}," GitLab Patch Release: 19.2.1, 19.1.3, 19.0.5","2026-07-29","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/",{"title":942,"description":943,"heroImage":944,"category":199,"date":945,"authors":946,"slug":948,"externalUrl":203},"Automate work item assignment with a \"Work item created\" trigger","Our step-by-step guide walks through this AI capability, which enables instant, scalable triage without manual intervention.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1773866173/vte9qh8rriznvyclhkes.png","2026-07-20",[947],"Cesar Saavedra","how-to-use-a-work-item-created-trigger",{"promotions":950},[951,965,976,988],{"id":952,"categories":953,"header":955,"text":956,"button":957,"image":962},"ai-modernization",[954],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":958,"config":959},"Get your AI maturity score",{"href":960,"dataGaName":961,"dataGaLocation":429},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":963},{"src":964},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":966,"categories":967,"header":968,"text":956,"button":969,"image":973},"devops-modernization",[199,766],"Are you just managing tools or shipping innovation?",{"text":970,"config":971},"Get your DevOps maturity score",{"href":972,"dataGaName":961,"dataGaLocation":429},"/assessments/devops-modernization-assessment/",{"config":974},{"src":975},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":977,"categories":978,"header":980,"text":956,"button":981,"image":985},"security-modernization",[979],"security","Are you trading speed for security?",{"text":982,"config":983},"Get your security maturity score",{"href":984,"dataGaName":961,"dataGaLocation":429},"/assessments/security-modernization-assessment/",{"config":986},{"src":987},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":989,"paths":990,"header":993,"text":994,"button":995,"image":1000},"github-azure-migration",[991,992],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":996,"config":997},"See how GitLab compares to GitHub",{"href":998,"dataGaName":999,"dataGaLocation":429},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1001},{"src":975},{"header":1003,"blurb":1004,"button":1005,"secondaryButton":1010},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":1006,"config":1007},"Get your free trial",{"href":1008,"dataGaName":228,"dataGaLocation":1009},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":702,"config":1011},{"href":554,"dataGaName":233,"dataGaLocation":1009},1786803747099]