[{"data":1,"prerenderedAt":1042},["ShallowReactive",2],{"/blog/developers-write-secure-code-gitlab":3,"navigation-en-us":260,"banner-en-us":687,"footer-en-us":697,"blog-post-authors-en-us-Vanessa Wegner":940,"blog-related-posts-en-us-developers-write-secure-code-gitlab":954,"blog-promotions-en-us":979,"next-steps-en-us":1032},{"id":4,"title":5,"authors":6,"body":8,"category":237,"date":238,"description":239,"extension":240,"externalUrl":241,"faq":241,"featured":242,"heroImage":243,"meta":244,"navigation":245,"path":246,"seo":247,"slug":251,"stem":252,"tags":253,"template":258,"updatedDate":241,"__hash__":259},"blogPosts/en-us/blog/developers-write-secure-code-gitlab.md","4 Ways developers can write secure code with GitLab",[7],"Vanessa Wegner",{"type":9,"value":10,"toc":216},"minimark",[11,26,31,34,39,48,52,59,63,76,80,93,97,112,116,119,123,138,142,145,154,163,167,170,174,177,181,188,192,195,199,202],[12,13,14,15,20,21,25],"p",{},"Writing secure code is a standard part of day-to-day development work, but\nsecurity often appears to be a roadblock instead of a critical piece of the\npuzzle. To make security efforts easier, ",[16,17,19],"a",{"href":18},"/stages-devops-lifecycle/secure/","GitLab Secure","\noffers a number of different tools that help developers identify and remediate vulnerabilities\nwithin their code, ",[22,23,24],"em",{},"as they’re writing it",". Our goal is to seamlessly integrate\nsecurity into your code writing practices so you’re better able to protect\nyour business from growing cybersecurity threats.",[27,28,30],"h2",{"id":29},"testing","Testing",[12,32,33],{},"There are a variety of testing tools available to developers within GitLab.\nGenerally, they alert developers to vulnerabilities within their code and report\nthem within the merge request so developers can adjust their code as they\ngo. In addition to the testing methods outlined below, developers can also use\nother tools outside of GitLab by integrating\nthe results of your scanners with our merge request security reports.",[35,36,38],"h3",{"id":37},"static-application-security-testing","Static application security testing",[12,40,41,42,47],{},"Our ",[16,43,46],{"href":44,"rel":45},"https://docs.gitlab.com/user/application_security/sast/",[],"static application security testing","\n(SAST) tool scans the application source code\nand binaries to spot potential vulnerabilities before deployment. It uses open\nsource tools that are installed as part of GitLab. Vulnerabilities are shown\nin-line with every merge request and results are collected and presented as a\nsingle report.",[35,49,51],{"id":50},"secret-detection","Secret detection",[12,53,54,58],{},[16,55,51],{"href":56,"rel":57},"https://docs.gitlab.com/user/application_security/sast/#secret-detection",[],"\nwithin GitLab is able to detect secrets and credentials that\nhave been unintentionally pushed to the repository. This check is performed by\na specific analyzer during the SAST job, runs regardless of the programming\nlanguage of your app, and displays results within the SAST report.",[35,60,62],{"id":61},"dynamic-application-security-testing","Dynamic application security testing",[12,64,41,65,70,71,75],{},[16,66,69],{"href":67,"rel":68},"https://docs.gitlab.com/user/application_security/dast/",[],"DAST tool","\nanalyzes your web application for known runtime\nvulnerabilities. It conducts live attacks against a review app and can be created for every\nmerge request as part of GitLab’s ",[16,72,74],{"href":73},"/topics/ci-cd/","CI/CD capabilities",". Users can provide HTTP\ncredentials to test private areas. Vulnerabilities are shown in-line with every\nmerge request.",[35,77,79],{"id":78},"dependency-scanning","Dependency scanning",[12,81,82,86,87,92],{},[16,83,79],{"href":84,"rel":85},"https://docs.gitlab.com/user/application_security/dependency_scanning/",[],"\nanalyzes external dependencies (e.g. libraries like Ruby gems) for known\nvulnerabilities on each code commit with GitLab CI/CD. This scan relies on open\nsource tools and on the integration with ",[16,88,91],{"href":89,"rel":90},"https://docs.gitlab.com/user/import/",[],"Gemnasium","\ntechnology (now part of\nGitLab) to show, in-line with every merge request, vulnerable dependencies\nin need of updating. Results are collected and available as a single report.\nDependency scanning also provides a list of your project’s dependencies with\ndifferent versions for languages and package managers supported by Gemnasium.",[35,94,96],{"id":95},"container-scanning","Container scanning",[12,98,99,100,105,106,111],{},"If you’re using GitLab CI/CD, ",[16,101,104],{"href":102,"rel":103},"https://docs.gitlab.com/user/application_security/container_scanning/",[],"container scanning","\nwill let you check Docker images (and containers) for\nknown vulnerabilities in the application environment. Analyze image contents\nagainst public vulnerability databases using the open source tool, ",[16,107,110],{"href":108,"rel":109},"https://coreos.com/clair/docs/latest/",[],"Clair",",\nthat\nis able to scan any kind of Docker (or app) image. Vulnerabilities are shown\nin-line with every merge request.",[35,113,115],{"id":114},"license-management","License management",[12,117,118],{},"Upon code commit, project dependencies are reviewed for approved and blacklisted\nlicenses\ndefined by custom policies per project. Software licenses are\nidentified if they are not within policy, and new licenses are also listed if\nthey require a status designation. This scan relies on an open source tool,\nLicenseFinder, and license analysis results are shown in-line for every merge\nrequest for immediate resolution.",[35,120,122],{"id":121},"code-quality-analysis","Code quality analysis",[12,124,125,126,131,132,137],{},"With the help of GitLab CI/CD, you can analyze your source code quality using\nGitLab ",[16,127,130],{"href":128,"rel":129},"https://docs.gitlab.com/ci/testing/code_quality/",[],"Code Quality",".\nCode Quality uses ",[16,133,136],{"href":134,"rel":135},"https://codeclimate.com/",[],"Code Climate Engines","\nand runs in pipelines using a Docker image built into the Code Quality\nproject. Once the\nCode Quality job has completed, GitLab checks the generated report, compares the\nmetrics between the source and target branches, and shows the information\nwithin the merge request. With pipelines that enable concurrent testing and\nparallel execution, teams quickly receive insight about every commit, allowing\nthem to deliver higher quality code faster.",[35,139,141],{"id":140},"the-security-dashboard","The Security Dashboard",[12,143,144],{},"Security dashboards in GitLab exist at both the project and group level. The\ngroup dashboard provides an overview of all the security vulnerabilities in your\ngroups and projects. In the dashboard, developers are able to drill down into a\nvulnerability for further details, see which project it comes from and the file\nit’s in, and view various metadata to help analyze the risk.",[12,146,147,148,153],{},"The dashboard also allows viewers to\n",[16,149,152],{"href":150,"rel":151},"https://docs.gitlab.com/user/application_security/#interacting-with-the-vulnerabilities",[],"interact with vulnerabilities","\nby creating an issue for them or dismissing them. For ease of use, vulnerabilities\nwithin the group Security Dashboard can be filtered by severity, confidence, report type, and project.",[12,155,156,157,162],{},"In addition to the vulnerability overview, the group Security Dashboard also\nprovides a timeline that displays how many open vulnerabilities your projects\nhad at various points in time. While security scans are automatically run for\neach code update, you’ll have some default branches that are infrequently\nupdated. To keep your Security Dashboard up to date on those branches, you can\nuse GitLab to ",[16,158,161],{"href":159,"rel":160},"https://docs.gitlab.com/ci/pipelines/schedules/",[],"configure a scheduled pipeline","\nto run a daily security scan.",[27,164,166],{"id":165},"whats-next-for-gitlab-secure","What’s next for GitLab Secure?",[12,168,169],{},"While we already have a number of ways to help you write secure code and build\nsecure products and services, we’re always looking for ways to give you more.\nHere are a few of the things we’re working on:",[35,171,173],{"id":172},"interactive-application-security-testing","Interactive application security testing",[12,175,176],{},"Interactive application security testing (IAST) checks the runtime behavior of applications by\ninstrumenting the code and\nchecking for error conditions. It is composed by an agent that lives inside the\napplication environment, and an external component, like DAST, that can interact\nand trigger unintended results.",[35,178,180],{"id":179},"fuzzing","Fuzzing",[12,182,183,187],{},[16,184,180],{"href":185,"rel":186},"https://docs.gitlab.com/user/application_security/coverage_fuzzing/",[],"\nis a testing technique focused on finding flaws and vulnerabilities in\napplications by sending arbitrary payloads instead of valid input. The idea is to\ntrigger exceptions and unintended code paths that may lead to crashes and\nunauthorized operations. Once a possible problem – like a crash – is found,\nattackers can attempt to find the exact conditions needed to trigger the bug\nand see if they can be fine-tuned to obtain a useful result. (It is worth noting\nthat fuzzing is primarily intended for security teams because it requires more\ntime to execute. While fuzzing is a useful testing method, it should not be a\ndevelopment blocker).",[35,189,191],{"id":190},"vulnerability-database","Vulnerability database",[12,193,194],{},"GitLab integrates access to proprietary and open source application security\nscanning tools. In order to maintain the efficacy of those scans, we strive to\nkeep their underlying vulnerability databases up to date.",[35,196,198],{"id":197},"auto-remediation","Auto remediation",[12,200,201],{},"Vulnerabilities that require manual intervention to create a fix and push it to\nproduction have a time window where attackers have the ability to leverage the\nvulnerability. Auto remediation aims to automate the vulnerability solution flow and\nautomatically create a fix. The fix is then tested, and if it passes all the\ntests already defined for the application, it is deployed to production.",[12,203,204,205,210,211],{},"Photo by ",[16,206,209],{"href":207,"rel":208},"https://unsplash.com/@d_mccullough?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText",[],"Daniel McCullough","\non ",[16,212,215],{"href":213,"rel":214},"https://unsplash.com/search/photos/write?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText",[],"Unsplash",{"title":217,"searchDepth":218,"depth":218,"links":219},"",2,[220,231],{"id":29,"depth":218,"text":30,"children":221},[222,224,225,226,227,228,229,230],{"id":37,"depth":223,"text":38},3,{"id":50,"depth":223,"text":51},{"id":61,"depth":223,"text":62},{"id":78,"depth":223,"text":79},{"id":95,"depth":223,"text":96},{"id":114,"depth":223,"text":115},{"id":121,"depth":223,"text":122},{"id":140,"depth":223,"text":141},{"id":165,"depth":218,"text":166,"children":232},[233,234,235,236],{"id":172,"depth":223,"text":173},{"id":179,"depth":223,"text":180},{"id":190,"depth":223,"text":191},{"id":197,"depth":223,"text":198},"insights","2019-09-03","GitLab Secure is not just for your security team – it’s for developers too. Learn four ways to write secure code with GitLab.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749666895/Blog/Hero%20Images/developers-write-secure.jpg",{},true,"/en-us/blog/developers-write-secure-code-gitlab",{"title":5,"description":239,"ogTitle":5,"ogDescription":239,"noIndex":242,"ogImage":243,"ogUrl":248,"ogSiteName":249,"ogType":250,"canonicalUrls":248},"https://about.gitlab.com/blog/developers-write-secure-code-gitlab","https://about.gitlab.com","article","developers-write-secure-code-gitlab","en-us/blog/developers-write-secure-code-gitlab",[254,255,256,257,29],"security","DevOps","CI/CD","code review","BlogPost","VO8_pSHZFhK-0HiDPwuX0fjuIPVTy91Wg6fzsdeoELY",{"logo":261,"freeTrial":266,"sales":271,"login":276,"items":281,"search":607,"minimal":638,"duo":657,"switchNav":666,"pricingDeployment":677},{"config":262},{"href":263,"dataGaName":264,"dataGaLocation":265},"/","gitlab logo","header",{"text":267,"config":268},"Get free trial",{"href":269,"dataGaName":270,"dataGaLocation":265},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":272,"config":273},"Request a demo",{"href":274,"dataGaName":275,"dataGaLocation":265},"/sales/?contact-topic=request-demo","sales",{"text":277,"config":278},"Sign in",{"href":279,"dataGaName":280,"dataGaLocation":265},"https://gitlab.com/users/sign_in/","sign in",[282,311,410,415,529,585],{"text":283,"config":284,"menu":286},"Platform",{"dataNavLevelOne":285},"platform",{"type":287,"columns":288},"cards",[289,295,303],{"title":283,"description":290,"link":291},"The intelligent orchestration platform for DevSecOps",{"text":292,"config":293},"Explore our Platform",{"href":294,"dataGaName":285,"dataGaLocation":265},"/platform/",{"title":296,"description":297,"link":298},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":299,"config":300},"Meet GitLab Duo",{"href":301,"dataGaName":302,"dataGaLocation":265},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":304,"description":305,"link":306},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":307,"config":308},"Learn more",{"href":309,"dataGaName":310,"dataGaLocation":265},"/why-gitlab/","why gitlab",{"text":312,"left":245,"config":313,"menu":315},"Product",{"dataNavLevelOne":314},"solutions",{"type":316,"link":317,"columns":321,"feature":389},"lists",{"text":318,"config":319},"View all Solutions",{"href":320,"dataGaName":314,"dataGaLocation":265},"/solutions/",[322,345,368],{"title":323,"description":324,"link":325,"items":330},"Automation","CI/CD and automation to accelerate deployment",{"config":326},{"icon":327,"href":328,"dataGaName":329,"dataGaLocation":265},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[331,334,337,341],{"text":256,"config":332},{"href":333,"dataGaLocation":265,"dataGaName":256},"/solutions/continuous-integration/",{"text":296,"config":335},{"href":301,"dataGaLocation":265,"dataGaName":336},"gitlab duo agent platform - product menu",{"text":338,"config":339},"Source Code Management",{"href":340,"dataGaLocation":265,"dataGaName":338},"/solutions/source-code-management/",{"text":342,"config":343},"Automated Software Delivery",{"href":328,"dataGaLocation":265,"dataGaName":344},"Automated software delivery",{"title":346,"description":347,"link":348,"items":353},"Security","Deliver code faster without compromising security",{"config":349},{"href":350,"dataGaName":351,"dataGaLocation":265,"icon":352},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[354,358,363],{"text":355,"config":356},"Application Security Testing",{"href":350,"dataGaName":357,"dataGaLocation":265},"Application security testing",{"text":359,"config":360},"Software Supply Chain Security",{"href":361,"dataGaLocation":265,"dataGaName":362},"/solutions/supply-chain/","Software supply chain security",{"text":364,"config":365},"Software Compliance",{"href":366,"dataGaName":367,"dataGaLocation":265},"/solutions/software-compliance/","software compliance",{"title":369,"link":370,"items":375},"Measurement",{"config":371},{"icon":372,"href":373,"dataGaName":374,"dataGaLocation":265},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[376,380,384],{"text":377,"config":378},"Visibility & Measurement",{"href":373,"dataGaLocation":265,"dataGaName":379},"Visibility and Measurement",{"text":381,"config":382},"Value Stream Management",{"href":383,"dataGaLocation":265,"dataGaName":381},"/solutions/value-stream-management/",{"text":385,"config":386},"Analytics & Insights",{"href":387,"dataGaLocation":265,"dataGaName":388},"/solutions/analytics-and-insights/","Analytics and insights",{"title":390,"type":316,"items":391},"GitLab for",[392,398,404],{"text":393,"config":394},"Enterprise",{"icon":395,"href":396,"dataGaLocation":265,"dataGaName":397},"Building","/enterprise/","enterprise",{"text":399,"config":400},"Small Business",{"icon":401,"href":402,"dataGaLocation":265,"dataGaName":403},"Work","/small-business/","small business",{"text":405,"config":406},"Public Sector",{"icon":407,"href":408,"dataGaLocation":265,"dataGaName":409},"Organization","/solutions/public-sector/","public sector",{"text":411,"config":412},"Pricing",{"href":413,"dataGaName":414,"dataGaLocation":265,"dataNavLevelOne":414},"/pricing/","pricing",{"text":416,"config":417,"menu":419},"Resources",{"dataNavLevelOne":418},"resources",{"type":316,"link":420,"columns":424,"feature":518},{"text":421,"config":422},"View all resources",{"href":423,"dataGaName":418,"dataGaLocation":265},"/resources/",[425,458,485],{"title":426,"items":427},"Getting started",[428,433,438,443,448,453],{"text":429,"config":430},"Install",{"href":431,"dataGaName":432,"dataGaLocation":265},"/install/","install",{"text":434,"config":435},"Quick start guides",{"href":436,"dataGaName":437,"dataGaLocation":265},"/get-started/","quick setup checklists",{"text":439,"config":440},"Learn",{"href":441,"dataGaLocation":265,"dataGaName":442},"https://university.gitlab.com/","learn",{"text":444,"config":445},"Product documentation",{"href":446,"dataGaName":447,"dataGaLocation":265},"https://docs.gitlab.com/","product documentation",{"text":449,"config":450},"Best practice videos",{"href":451,"dataGaName":452,"dataGaLocation":265},"/getting-started-videos/","best practice videos",{"text":454,"config":455},"Integrations",{"href":456,"dataGaName":457,"dataGaLocation":265},"/integrations/","integrations",{"title":459,"items":460},"Discover",[461,466,471,476,480],{"text":462,"config":463},"Customer success stories",{"href":464,"dataGaName":465,"dataGaLocation":265},"/customers/","customer success stories",{"text":467,"config":468},"Blog",{"href":469,"dataGaName":470,"dataGaLocation":265},"/blog/","blog",{"text":472,"config":473},"Demo Hub",{"href":474,"dataGaName":475,"dataGaLocation":265},"/demo-hub/","demo hub",{"text":477,"config":478},"The Source",{"href":479,"dataGaName":470,"dataGaLocation":265},"/the-source/",{"text":481,"config":482},"Remote",{"href":483,"dataGaName":484,"dataGaLocation":265},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":486,"items":487},"Connect",[488,493,498,503,508,513],{"text":489,"config":490},"GitLab Services",{"href":491,"dataGaName":492,"dataGaLocation":265},"/services/","services",{"text":494,"config":495},"Contribute",{"href":496,"dataGaName":497,"dataGaLocation":265},"https://contributors.gitlab.com","contribute",{"text":499,"config":500},"Community",{"href":501,"dataGaName":502,"dataGaLocation":265},"/community/","community",{"text":504,"config":505},"Forum",{"href":506,"dataGaName":507,"dataGaLocation":265},"https://forum.gitlab.com/","forum",{"text":509,"config":510},"Events",{"href":511,"dataGaName":512,"dataGaLocation":265},"/events/","events",{"text":514,"config":515},"Partners",{"href":516,"dataGaName":517,"dataGaLocation":265},"/partners/","partners",{"config":519,"title":522,"text":523,"link":524},{"background":520,"textColor":521},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":525,"config":526},"Read the latest",{"href":527,"dataGaName":528,"dataGaLocation":265},"/whats-new/","whats new",{"text":530,"config":531,"menu":533},"Company",{"dataNavLevelOne":532},"company",{"type":316,"columns":534},[535],{"items":536},[537,542,548,550,555,560,565,570,575,580],{"text":538,"config":539},"About",{"href":540,"dataGaName":541,"dataGaLocation":265},"/company/","about",{"text":543,"config":544,"footerGa":547},"Jobs",{"href":545,"dataGaName":546,"dataGaLocation":265},"/jobs/","jobs",{"dataGaName":546},{"text":509,"config":549},{"href":511,"dataGaName":512,"dataGaLocation":265},{"text":551,"config":552},"Leadership",{"href":553,"dataGaName":554,"dataGaLocation":265},"/company/team/e-group/","leadership",{"text":556,"config":557},"Handbook",{"href":558,"dataGaName":559,"dataGaLocation":265},"https://handbook.gitlab.com/","handbook",{"text":561,"config":562},"Investor relations",{"href":563,"dataGaName":564,"dataGaLocation":265},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":566,"config":567},"Trust Center",{"href":568,"dataGaName":569,"dataGaLocation":265},"/security/","trust center",{"text":571,"config":572},"AI Transparency Center",{"href":573,"dataGaName":574,"dataGaLocation":265},"/ai-transparency-center/","ai transparency center",{"text":576,"config":577},"Newsletter",{"href":578,"dataGaName":579,"dataGaLocation":265},"/company/contact/#contact-forms","newsletter",{"text":581,"config":582},"Press",{"href":583,"dataGaName":584,"dataGaLocation":265},"/press/","press",{"text":586,"config":587,"menu":588},"Contact us",{"dataNavLevelOne":532},{"type":316,"columns":589},[590],{"items":591},[592,597,602],{"text":593,"config":594},"Talk to sales",{"href":595,"dataGaName":596,"dataGaLocation":265},"/sales/","talk to sales",{"text":598,"config":599},"Support portal",{"href":600,"dataGaName":601,"dataGaLocation":265},"https://support.gitlab.com/hc/en-us","support portal",{"text":603,"config":604},"Customer portal",{"href":605,"dataGaName":606,"dataGaLocation":265},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":608,"login":609,"suggestions":616},"Close",{"text":610,"link":611},"To search repositories and projects, login to",{"text":612,"config":613},"gitlab.com",{"href":279,"dataGaName":614,"dataGaLocation":615},"search login","search",{"text":617,"default":618},"Suggestions",[619,621,625,627,631,635],{"text":296,"config":620},{"href":301,"dataGaName":296,"dataGaLocation":615},{"text":622,"config":623},"Code Suggestions (AI)",{"href":624,"dataGaName":622,"dataGaLocation":615},"/solutions/code-suggestions/",{"text":256,"config":626},{"href":333,"dataGaName":256,"dataGaLocation":615},{"text":628,"config":629},"GitLab on AWS",{"href":630,"dataGaName":628,"dataGaLocation":615},"/partners/technology-partners/aws/",{"text":632,"config":633},"GitLab on Google Cloud",{"href":634,"dataGaName":632,"dataGaLocation":615},"/partners/technology-partners/google-cloud-platform/",{"text":636,"config":637},"Why GitLab?",{"href":309,"dataGaName":636,"dataGaLocation":615},{"freeTrial":639,"mobileIcon":644,"desktopIcon":649,"secondaryButton":652},{"text":640,"config":641},"Start free trial",{"href":642,"dataGaName":270,"dataGaLocation":643},"https://gitlab.com/-/trials/new/","nav",{"altText":645,"config":646},"Gitlab Icon",{"src":647,"dataGaName":648,"dataGaLocation":643},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":645,"config":650},{"src":651,"dataGaName":648,"dataGaLocation":643},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":653,"config":654},"Get Started",{"href":655,"dataGaName":656,"dataGaLocation":643},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":658,"mobileIcon":662,"desktopIcon":664},{"text":659,"config":660},"Learn more about GitLab Duo",{"href":301,"dataGaName":661,"dataGaLocation":643},"gitlab duo",{"altText":645,"config":663},{"src":647,"dataGaName":648,"dataGaLocation":643},{"altText":645,"config":665},{"src":651,"dataGaName":648,"dataGaLocation":643},{"button":667,"mobileIcon":672,"desktopIcon":674},{"text":668,"config":669},"/switch",{"href":670,"dataGaName":671,"dataGaLocation":643},"#contact","switch",{"altText":645,"config":673},{"src":647,"dataGaName":648,"dataGaLocation":643},{"altText":645,"config":675},{"src":676,"dataGaName":648,"dataGaLocation":643},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":678,"mobileIcon":683,"desktopIcon":685},{"text":679,"config":680},"Back to pricing",{"href":413,"dataGaName":681,"dataGaLocation":643,"icon":682},"back to pricing","GoBack",{"altText":645,"config":684},{"src":647,"dataGaName":648,"dataGaLocation":643},{"altText":645,"config":686},{"src":651,"dataGaName":648,"dataGaLocation":643},{"title":688,"titleMobile":689,"button":690,"config":695},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":307,"config":691},{"href":692,"dataGaName":693,"dataGaLocation":694},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":696,"disabled":242},"release",{"data":698},{"text":699,"source":700,"edit":706,"contribute":711,"config":716,"items":721,"minimal":929},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":701,"config":702},"View page source",{"href":703,"dataGaName":704,"dataGaLocation":705},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":707,"config":708},"Edit this page",{"href":709,"dataGaName":710,"dataGaLocation":705},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":712,"config":713},"Please contribute",{"href":714,"dataGaName":715,"dataGaLocation":705},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":717,"facebook":718,"youtube":719,"linkedin":720},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[722,769,821,865,897],{"title":411,"links":723,"subMenu":738},[724,728,733],{"text":725,"config":726},"View plans",{"href":413,"dataGaName":727,"dataGaLocation":705},"view plans",{"text":729,"config":730},"Why Premium?",{"href":731,"dataGaName":732,"dataGaLocation":705},"/pricing/premium/","why premium",{"text":734,"config":735},"Why Ultimate?",{"href":736,"dataGaName":737,"dataGaLocation":705},"/pricing/ultimate/","why ultimate",[739],{"title":740,"links":741},"Contact Us",[742,745,747,749,754,759,764],{"text":743,"config":744},"Contact sales",{"href":595,"dataGaName":275,"dataGaLocation":705},{"text":598,"config":746},{"href":600,"dataGaName":601,"dataGaLocation":705},{"text":603,"config":748},{"href":605,"dataGaName":606,"dataGaLocation":705},{"text":750,"config":751},"Status",{"href":752,"dataGaName":753,"dataGaLocation":705},"https://status.gitlab.com/","status",{"text":755,"config":756},"Terms of use",{"href":757,"dataGaName":758,"dataGaLocation":705},"/terms/","terms of use",{"text":760,"config":761},"Privacy statement",{"href":762,"dataGaName":763,"dataGaLocation":705},"/privacy/","privacy statement",{"text":765,"config":766},"Cookie preferences",{"dataGaName":767,"dataGaLocation":705,"id":768,"isOneTrustButton":245},"cookie preferences","ot-sdk-btn",{"title":312,"links":770,"subMenu":779},[771,775],{"text":772,"config":773},"DevSecOps platform",{"href":294,"dataGaName":774,"dataGaLocation":705},"devsecops platform",{"text":776,"config":777},"AI-Assisted Development",{"href":301,"dataGaName":778,"dataGaLocation":705},"ai-assisted development",[780],{"title":781,"links":782},"Topics",[783,787,792,796,801,806,811,816],{"text":784,"config":785},"CICD",{"href":73,"dataGaName":786,"dataGaLocation":705},"cicd",{"text":788,"config":789},"GitOps",{"href":790,"dataGaName":791,"dataGaLocation":705},"/topics/gitops/","gitops",{"text":255,"config":793},{"href":794,"dataGaName":795,"dataGaLocation":705},"/topics/devops/","devops",{"text":797,"config":798},"Version Control",{"href":799,"dataGaName":800,"dataGaLocation":705},"/topics/version-control/","version control",{"text":802,"config":803},"DevSecOps",{"href":804,"dataGaName":805,"dataGaLocation":705},"/topics/devsecops/","devsecops",{"text":807,"config":808},"Cloud Native",{"href":809,"dataGaName":810,"dataGaLocation":705},"/topics/cloud-native/","cloud native",{"text":812,"config":813},"AI for Coding",{"href":814,"dataGaName":815,"dataGaLocation":705},"/topics/devops/ai-for-coding/","ai for coding",{"text":817,"config":818},"Agentic AI",{"href":819,"dataGaName":820,"dataGaLocation":705},"/topics/agentic-ai/","agentic ai",{"title":822,"links":823},"Solutions",[824,826,828,833,837,840,844,847,849,852,855,860],{"text":355,"config":825},{"href":350,"dataGaName":355,"dataGaLocation":705},{"text":344,"config":827},{"href":328,"dataGaName":329,"dataGaLocation":705},{"text":829,"config":830},"Agile development",{"href":831,"dataGaName":832,"dataGaLocation":705},"/solutions/agile-delivery/","agile delivery",{"text":834,"config":835},"SCM",{"href":340,"dataGaName":836,"dataGaLocation":705},"source code management",{"text":784,"config":838},{"href":333,"dataGaName":839,"dataGaLocation":705},"continuous integration & delivery",{"text":841,"config":842},"Value stream management",{"href":383,"dataGaName":843,"dataGaLocation":705},"value stream management",{"text":788,"config":845},{"href":846,"dataGaName":791,"dataGaLocation":705},"/solutions/gitops/",{"text":393,"config":848},{"href":396,"dataGaName":397,"dataGaLocation":705},{"text":850,"config":851},"Small business",{"href":402,"dataGaName":403,"dataGaLocation":705},{"text":853,"config":854},"Public sector",{"href":408,"dataGaName":409,"dataGaLocation":705},{"text":856,"config":857},"Education",{"href":858,"dataGaName":859,"dataGaLocation":705},"/solutions/education/","education",{"text":861,"config":862},"Financial services",{"href":863,"dataGaName":864,"dataGaLocation":705},"/solutions/finance/","financial services",{"title":416,"links":866},[867,869,871,873,876,878,881,883,885,887,889,891,893,895],{"text":429,"config":868},{"href":431,"dataGaName":432,"dataGaLocation":705},{"text":434,"config":870},{"href":436,"dataGaName":437,"dataGaLocation":705},{"text":439,"config":872},{"href":441,"dataGaName":442,"dataGaLocation":705},{"text":444,"config":874},{"href":446,"dataGaName":875,"dataGaLocation":705},"docs",{"text":467,"config":877},{"href":469,"dataGaName":470,"dataGaLocation":705},{"text":879,"config":880},"What's new",{"href":527,"dataGaName":528,"dataGaLocation":705},{"text":462,"config":882},{"href":464,"dataGaName":465,"dataGaLocation":705},{"text":481,"config":884},{"href":483,"dataGaName":484,"dataGaLocation":705},{"text":489,"config":886},{"href":491,"dataGaName":492,"dataGaLocation":705},{"text":494,"config":888},{"href":496,"dataGaName":497,"dataGaLocation":705},{"text":499,"config":890},{"href":501,"dataGaName":502,"dataGaLocation":705},{"text":504,"config":892},{"href":506,"dataGaName":507,"dataGaLocation":705},{"text":509,"config":894},{"href":511,"dataGaName":512,"dataGaLocation":705},{"text":514,"config":896},{"href":516,"dataGaName":517,"dataGaLocation":705},{"title":530,"links":898},[899,901,903,905,907,909,913,918,920,922,924],{"text":538,"config":900},{"href":540,"dataGaName":532,"dataGaLocation":705},{"text":543,"config":902},{"href":545,"dataGaName":546,"dataGaLocation":705},{"text":551,"config":904},{"href":553,"dataGaName":554,"dataGaLocation":705},{"text":556,"config":906},{"href":558,"dataGaName":559,"dataGaLocation":705},{"text":561,"config":908},{"href":563,"dataGaName":564,"dataGaLocation":705},{"text":910,"config":911},"Sustainability",{"href":912,"dataGaName":910,"dataGaLocation":705},"/sustainability/",{"text":914,"config":915},"Diversity, inclusion and belonging (DIB)",{"href":916,"dataGaName":917,"dataGaLocation":705},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":566,"config":919},{"href":568,"dataGaName":569,"dataGaLocation":705},{"text":576,"config":921},{"href":578,"dataGaName":579,"dataGaLocation":705},{"text":581,"config":923},{"href":583,"dataGaName":584,"dataGaLocation":705},{"text":925,"config":926},"Modern Slavery Transparency Statement",{"href":927,"dataGaName":928,"dataGaLocation":705},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":930},[931,934,937],{"text":932,"config":933},"Terms",{"href":757,"dataGaName":758,"dataGaLocation":705},{"text":935,"config":936},"Cookies",{"dataGaName":767,"dataGaLocation":705,"id":768,"isOneTrustButton":245},{"text":938,"config":939},"Privacy",{"href":762,"dataGaName":763,"dataGaLocation":705},[941],{"id":942,"title":7,"body":241,"config":943,"content":945,"description":241,"extension":948,"meta":949,"navigation":245,"path":950,"seo":951,"stem":952,"__hash__":953},"blogAuthors/en-us/blog/authors/vanessa-wegner.yml",{"template":944},"BlogAuthor",{"name":7,"config":946},{"headshot":217,"ctfId":947},"vwegner","yml",{},"/en-us/blog/authors/vanessa-wegner",{},"en-us/blog/authors/vanessa-wegner","g7HCM0Grx5gV_2xQsDV9uteKV2uGLbv0_gKd-wvL26M",[955,963,971],{"title":956,"description":957,"heroImage":958,"category":237,"date":959,"authors":960,"slug":962,"externalUrl":241},"How we overhauled GitLab navigation","Users weren't getting what they needed from our navigation. Here are the steps we took to turn that experience around.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749682884/Blog/Hero%20Images/navigation.jpg","2023-08-15",[961],"Ashley Knobloch","navigation-research-blog-post",{"title":964,"description":965,"heroImage":966,"category":237,"date":967,"authors":968,"slug":970,"externalUrl":241},"Beautifying our UI: Giving GitLab build features a fresh look","Get an inside look at how we are improving the usability of GitLab build features with multiple visual design improvements.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749682807/Blog/Hero%20Images/beautify.jpg","2023-07-05",[969],"Veethika Mishra","beautifying-of-our-ui",{"title":972,"description":973,"heroImage":974,"category":237,"date":975,"authors":976,"slug":978,"externalUrl":241},"4 best practices leading orgs to release software faster","GitLab's 2023 Global DevSecOps Survey illuminates the strategies that organizations deploying more frequently have in common.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749663908/Blog/Hero%20Images/2023-devsecops-report-blog-banner2.png","2023-06-08",[977],"Kristina Weis","best-practices-leading-orgs-to-release-software-faster",{"promotions":980},[981,995,1007,1018],{"id":982,"categories":983,"header":985,"text":986,"button":987,"image":992},"ai-modernization",[984],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":988,"config":989},"Get your AI maturity score",{"href":990,"dataGaName":991,"dataGaLocation":470},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":993},{"src":994},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":996,"categories":997,"header":999,"text":986,"button":1000,"image":1004},"devops-modernization",[998,805],"product","Are you just managing tools or shipping innovation?",{"text":1001,"config":1002},"Get your DevOps maturity score",{"href":1003,"dataGaName":991,"dataGaLocation":470},"/assessments/devops-modernization-assessment/",{"config":1005},{"src":1006},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1008,"categories":1009,"header":1010,"text":986,"button":1011,"image":1015},"security-modernization",[254],"Are you trading speed for security?",{"text":1012,"config":1013},"Get your security maturity score",{"href":1014,"dataGaName":991,"dataGaLocation":470},"/assessments/security-modernization-assessment/",{"config":1016},{"src":1017},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1019,"paths":1020,"header":1023,"text":1024,"button":1025,"image":1030},"github-azure-migration",[1021,1022],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":1026,"config":1027},"See how GitLab compares to GitHub",{"href":1028,"dataGaName":1029,"dataGaLocation":470},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1031},{"src":1006},{"header":1033,"blurb":1034,"button":1035,"secondaryButton":1040},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":1036,"config":1037},"Get your free trial",{"href":1038,"dataGaName":270,"dataGaLocation":1039},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":743,"config":1041},{"href":595,"dataGaName":275,"dataGaLocation":1039},1786803758748]