[{"data":1,"prerenderedAt":919},["ShallowReactive",2],{"/blog/gitlab-and-testify-sec-witness-alliance":3,"navigation-en-us":133,"banner-en-us":561,"footer-en-us":571,"blog-post-authors-en-us-Nicole Schwartz":816,"blog-related-posts-en-us-gitlab-and-testify-sec-witness-alliance":830,"blog-promotions-en-us":856,"next-steps-en-us":909},{"id":4,"title":5,"authors":6,"body":8,"category":111,"date":112,"description":113,"extension":114,"externalUrl":115,"faq":115,"featured":116,"heroImage":117,"meta":118,"navigation":119,"path":120,"seo":121,"slug":125,"stem":126,"tags":127,"template":131,"updatedDate":115,"__hash__":132},"blogPosts/en-us/blog/gitlab-and-testify-sec-witness-alliance.md","How to enhance supply chain security with GitLab and TestifySec",[7],"Nicole Schwartz",{"type":9,"value":10,"toc":105},"minimark",[11,18,34,39,54,57,61,72,75,78,85,88,91,99,102],[12,13,14],"p",{},[15,16,17],"em",{},"This blog post and linked pages contain information related to upcoming products, features, and functionality. It is important to note that the information presented is for informational purposes only. Please do not rely on this information for purchasing or planning purposes. As with all projects, the items mentioned in this blog post and linked pages are subject to change or delay. The development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.",[12,19,20,21,27,28,33],{},"Today, GitLab is excited to announce that our partner ",[22,23,26],"a",{"href":24,"rel":25},"https://www.testifysec.com/",[],"TestifySec"," has integrated their ",[22,29,32],{"href":30,"rel":31},"https://github.com/testifysec/witness",[],"Witness"," open-source tool into GitLab allowing us to take another step along our Secure Software Supply Chain Direction.",[35,36,38],"h2",{"id":37},"secure-software-supply-chain","Secure software supply chain",[12,40,41,42,47,48,53],{},"An emerging concern in the software development space is being able to secure your software supply chain, an important element of which is documenting the entire supply chain and development progress by creating a chain of custody starting from code creation, build, test, package, and going through deployment. One important element of this chain of custody is commonly referred to as a Software Bill of Materials ",[22,43,46],{"href":44,"rel":45},"https://www.ntia.gov/SBOM",[],"SBOM",". There are also frameworks, such as ",[22,49,52],{"href":50,"rel":51},"https://slsa.dev/",[],"SLSA"," which collect additional elements about the process. Together these documents are becoming critical components to satisfying regulated industry requirements.",[12,55,56],{},"There are many opportunities as a DevOps Platform to rise to the challenge of creating transparency around software components or artifacts.",[35,58,60],{"id":59},"testifysec-witness","TestifySec Witness",[12,62,63,64,67,68,71],{},"Recent compromises and attacks on the software supply chain such as Solarburst and Log4shell highlight the need for a new way of securing CI systems and their artifacts. This is why ",[22,65,26],{"href":24,"rel":66},[]," created ",[22,69,32],{"href":30,"rel":70},[],".",[12,73,74],{},"CI systems are an incredible source of data.  Many CI systems such as GitLab, along with their cloud infrastructure, provide tokens with non-falseable data. Witness verifies and records this data, along with inputs and outputs from a CI process in a verifiable and standardized way.",[12,76,77],{},"In current generation CI systems we restrict the release of artifacts based on pass or failure of build steps. However, most organizations have no standardized way to leverage the metadata available during the CI process in order to inform policy decisions in production environments.",[12,79,80,81,84],{},"In next-generation CI systems, data collected during the CI process is not thrown away. Instead, we make this data available to security administrators for use at any policy enforcement point.  With ",[22,82,32],{"href":30,"rel":83},[],", you shift security left, while communicating risk right.",[12,86,87],{},"Once an artifact is built it becomes difficult to understand where it was built. Most major cloud providers provide some sort of identity mechanism to verify the instance identity. On AWS this is called the Instance metadata service. The data available in this API is verifiable and is a perfect data structure to make an Witness attestation.",[12,89,90],{},"Witness records AWS identity metadata and cryptographically links it to the build artifact and any other events in that CI process.",[12,92,93,94,71],{},"You can ",[22,95,98],{"href":96,"rel":97},"https://gitlab.com/testifysec/demos/witness-demo",[],"see the demo",[12,100,101],{},"GitLab and TestifySec will be enhancing our features around this as time goes on - keep an eye out for more!",[12,103,104],{},"Read more about GitLab's Secure Software Supply Chain Direction.",{"title":106,"searchDepth":107,"depth":107,"links":108},"",2,[109,110],{"id":37,"depth":107,"text":38},{"id":59,"depth":107,"text":60},"engineering","2022-03-16","New alliance partner TestifySec makes Witness available in GitLab","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749663397/Blog/Hero%20Images/logoforblogpost.jpg",{},true,"/en-us/blog/gitlab-and-testify-sec-witness-alliance",{"title":5,"description":113,"ogTitle":5,"ogDescription":113,"noIndex":116,"ogImage":117,"ogUrl":122,"ogSiteName":123,"ogType":124,"canonicalUrls":122},"https://about.gitlab.com/blog/gitlab-and-testify-sec-witness-alliance","https://about.gitlab.com","article","gitlab-and-testify-sec-witness-alliance","en-us/blog/gitlab-and-testify-sec-witness-alliance",[128,129,130],"security","collaboration","workflow","BlogPost","p3S8aIozXZ2D_HdyqB9bWrrqzp-bkCo1V6vnh-7Ge0s",{"logo":134,"freeTrial":139,"sales":144,"login":149,"items":154,"search":481,"minimal":512,"duo":531,"switchNav":540,"pricingDeployment":551},{"config":135},{"href":136,"dataGaName":137,"dataGaLocation":138},"/","gitlab logo","header",{"text":140,"config":141},"Get free trial",{"href":142,"dataGaName":143,"dataGaLocation":138},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":145,"config":146},"Request a demo",{"href":147,"dataGaName":148,"dataGaLocation":138},"/sales/?contact-topic=request-demo","sales",{"text":150,"config":151},"Sign in",{"href":152,"dataGaName":153,"dataGaLocation":138},"https://gitlab.com/users/sign_in/","sign in",[155,184,284,289,403,459],{"text":156,"config":157,"menu":159},"Platform",{"dataNavLevelOne":158},"platform",{"type":160,"columns":161},"cards",[162,168,176],{"title":156,"description":163,"link":164},"The intelligent orchestration platform for DevSecOps",{"text":165,"config":166},"Explore our Platform",{"href":167,"dataGaName":158,"dataGaLocation":138},"/platform/",{"title":169,"description":170,"link":171},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":172,"config":173},"Meet GitLab Duo",{"href":174,"dataGaName":175,"dataGaLocation":138},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":177,"description":178,"link":179},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":180,"config":181},"Learn more",{"href":182,"dataGaName":183,"dataGaLocation":138},"/why-gitlab/","why gitlab",{"text":185,"left":119,"config":186,"menu":188},"Product",{"dataNavLevelOne":187},"solutions",{"type":189,"link":190,"columns":194,"feature":263},"lists",{"text":191,"config":192},"View all Solutions",{"href":193,"dataGaName":187,"dataGaLocation":138},"/solutions/",[195,219,242],{"title":196,"description":197,"link":198,"items":203},"Automation","CI/CD and automation to accelerate deployment",{"config":199},{"icon":200,"href":201,"dataGaName":202,"dataGaLocation":138},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[204,208,211,215],{"text":205,"config":206},"CI/CD",{"href":207,"dataGaLocation":138,"dataGaName":205},"/solutions/continuous-integration/",{"text":169,"config":209},{"href":174,"dataGaLocation":138,"dataGaName":210},"gitlab duo agent platform - product menu",{"text":212,"config":213},"Source Code Management",{"href":214,"dataGaLocation":138,"dataGaName":212},"/solutions/source-code-management/",{"text":216,"config":217},"Automated Software Delivery",{"href":201,"dataGaLocation":138,"dataGaName":218},"Automated software delivery",{"title":220,"description":221,"link":222,"items":227},"Security","Deliver code faster without compromising security",{"config":223},{"href":224,"dataGaName":225,"dataGaLocation":138,"icon":226},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[228,232,237],{"text":229,"config":230},"Application Security Testing",{"href":224,"dataGaName":231,"dataGaLocation":138},"Application security testing",{"text":233,"config":234},"Software Supply Chain Security",{"href":235,"dataGaLocation":138,"dataGaName":236},"/solutions/supply-chain/","Software supply chain security",{"text":238,"config":239},"Software Compliance",{"href":240,"dataGaName":241,"dataGaLocation":138},"/solutions/software-compliance/","software compliance",{"title":243,"link":244,"items":249},"Measurement",{"config":245},{"icon":246,"href":247,"dataGaName":248,"dataGaLocation":138},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[250,254,258],{"text":251,"config":252},"Visibility & Measurement",{"href":247,"dataGaLocation":138,"dataGaName":253},"Visibility and Measurement",{"text":255,"config":256},"Value Stream Management",{"href":257,"dataGaLocation":138,"dataGaName":255},"/solutions/value-stream-management/",{"text":259,"config":260},"Analytics & Insights",{"href":261,"dataGaLocation":138,"dataGaName":262},"/solutions/analytics-and-insights/","Analytics and insights",{"title":264,"type":189,"items":265},"GitLab for",[266,272,278],{"text":267,"config":268},"Enterprise",{"icon":269,"href":270,"dataGaLocation":138,"dataGaName":271},"Building","/enterprise/","enterprise",{"text":273,"config":274},"Small Business",{"icon":275,"href":276,"dataGaLocation":138,"dataGaName":277},"Work","/small-business/","small business",{"text":279,"config":280},"Public Sector",{"icon":281,"href":282,"dataGaLocation":138,"dataGaName":283},"Organization","/solutions/public-sector/","public sector",{"text":285,"config":286},"Pricing",{"href":287,"dataGaName":288,"dataGaLocation":138,"dataNavLevelOne":288},"/pricing/","pricing",{"text":290,"config":291,"menu":293},"Resources",{"dataNavLevelOne":292},"resources",{"type":189,"link":294,"columns":298,"feature":392},{"text":295,"config":296},"View all resources",{"href":297,"dataGaName":292,"dataGaLocation":138},"/resources/",[299,332,359],{"title":300,"items":301},"Getting started",[302,307,312,317,322,327],{"text":303,"config":304},"Install",{"href":305,"dataGaName":306,"dataGaLocation":138},"/install/","install",{"text":308,"config":309},"Quick start guides",{"href":310,"dataGaName":311,"dataGaLocation":138},"/get-started/","quick setup checklists",{"text":313,"config":314},"Learn",{"href":315,"dataGaLocation":138,"dataGaName":316},"https://university.gitlab.com/","learn",{"text":318,"config":319},"Product documentation",{"href":320,"dataGaName":321,"dataGaLocation":138},"https://docs.gitlab.com/","product documentation",{"text":323,"config":324},"Best practice videos",{"href":325,"dataGaName":326,"dataGaLocation":138},"/getting-started-videos/","best practice videos",{"text":328,"config":329},"Integrations",{"href":330,"dataGaName":331,"dataGaLocation":138},"/integrations/","integrations",{"title":333,"items":334},"Discover",[335,340,345,350,354],{"text":336,"config":337},"Customer success stories",{"href":338,"dataGaName":339,"dataGaLocation":138},"/customers/","customer success stories",{"text":341,"config":342},"Blog",{"href":343,"dataGaName":344,"dataGaLocation":138},"/blog/","blog",{"text":346,"config":347},"Demo Hub",{"href":348,"dataGaName":349,"dataGaLocation":138},"/demo-hub/","demo hub",{"text":351,"config":352},"The Source",{"href":353,"dataGaName":344,"dataGaLocation":138},"/the-source/",{"text":355,"config":356},"Remote",{"href":357,"dataGaName":358,"dataGaLocation":138},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":360,"items":361},"Connect",[362,367,372,377,382,387],{"text":363,"config":364},"GitLab Services",{"href":365,"dataGaName":366,"dataGaLocation":138},"/services/","services",{"text":368,"config":369},"Contribute",{"href":370,"dataGaName":371,"dataGaLocation":138},"https://contributors.gitlab.com","contribute",{"text":373,"config":374},"Community",{"href":375,"dataGaName":376,"dataGaLocation":138},"/community/","community",{"text":378,"config":379},"Forum",{"href":380,"dataGaName":381,"dataGaLocation":138},"https://forum.gitlab.com/","forum",{"text":383,"config":384},"Events",{"href":385,"dataGaName":386,"dataGaLocation":138},"/events/","events",{"text":388,"config":389},"Partners",{"href":390,"dataGaName":391,"dataGaLocation":138},"/partners/","partners",{"config":393,"title":396,"text":397,"link":398},{"background":394,"textColor":395},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":399,"config":400},"Read the latest",{"href":401,"dataGaName":402,"dataGaLocation":138},"/whats-new/","whats new",{"text":404,"config":405,"menu":407},"Company",{"dataNavLevelOne":406},"company",{"type":189,"columns":408},[409],{"items":410},[411,416,422,424,429,434,439,444,449,454],{"text":412,"config":413},"About",{"href":414,"dataGaName":415,"dataGaLocation":138},"/company/","about",{"text":417,"config":418,"footerGa":421},"Jobs",{"href":419,"dataGaName":420,"dataGaLocation":138},"/jobs/","jobs",{"dataGaName":420},{"text":383,"config":423},{"href":385,"dataGaName":386,"dataGaLocation":138},{"text":425,"config":426},"Leadership",{"href":427,"dataGaName":428,"dataGaLocation":138},"/company/team/e-group/","leadership",{"text":430,"config":431},"Handbook",{"href":432,"dataGaName":433,"dataGaLocation":138},"https://handbook.gitlab.com/","handbook",{"text":435,"config":436},"Investor relations",{"href":437,"dataGaName":438,"dataGaLocation":138},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":440,"config":441},"Trust Center",{"href":442,"dataGaName":443,"dataGaLocation":138},"/security/","trust center",{"text":445,"config":446},"AI Transparency Center",{"href":447,"dataGaName":448,"dataGaLocation":138},"/ai-transparency-center/","ai transparency center",{"text":450,"config":451},"Newsletter",{"href":452,"dataGaName":453,"dataGaLocation":138},"/company/contact/#contact-forms","newsletter",{"text":455,"config":456},"Press",{"href":457,"dataGaName":458,"dataGaLocation":138},"/press/","press",{"text":460,"config":461,"menu":462},"Contact us",{"dataNavLevelOne":406},{"type":189,"columns":463},[464],{"items":465},[466,471,476],{"text":467,"config":468},"Talk to sales",{"href":469,"dataGaName":470,"dataGaLocation":138},"/sales/","talk to sales",{"text":472,"config":473},"Support portal",{"href":474,"dataGaName":475,"dataGaLocation":138},"https://support.gitlab.com/hc/en-us","support portal",{"text":477,"config":478},"Customer portal",{"href":479,"dataGaName":480,"dataGaLocation":138},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":482,"login":483,"suggestions":490},"Close",{"text":484,"link":485},"To search repositories and projects, login to",{"text":486,"config":487},"gitlab.com",{"href":152,"dataGaName":488,"dataGaLocation":489},"search login","search",{"text":491,"default":492},"Suggestions",[493,495,499,501,505,509],{"text":169,"config":494},{"href":174,"dataGaName":169,"dataGaLocation":489},{"text":496,"config":497},"Code Suggestions (AI)",{"href":498,"dataGaName":496,"dataGaLocation":489},"/solutions/code-suggestions/",{"text":205,"config":500},{"href":207,"dataGaName":205,"dataGaLocation":489},{"text":502,"config":503},"GitLab on AWS",{"href":504,"dataGaName":502,"dataGaLocation":489},"/partners/technology-partners/aws/",{"text":506,"config":507},"GitLab on Google Cloud",{"href":508,"dataGaName":506,"dataGaLocation":489},"/partners/technology-partners/google-cloud-platform/",{"text":510,"config":511},"Why GitLab?",{"href":182,"dataGaName":510,"dataGaLocation":489},{"freeTrial":513,"mobileIcon":518,"desktopIcon":523,"secondaryButton":526},{"text":514,"config":515},"Start free trial",{"href":516,"dataGaName":143,"dataGaLocation":517},"https://gitlab.com/-/trials/new/","nav",{"altText":519,"config":520},"Gitlab Icon",{"src":521,"dataGaName":522,"dataGaLocation":517},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":519,"config":524},{"src":525,"dataGaName":522,"dataGaLocation":517},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":527,"config":528},"Get Started",{"href":529,"dataGaName":530,"dataGaLocation":517},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":532,"mobileIcon":536,"desktopIcon":538},{"text":533,"config":534},"Learn more about GitLab Duo",{"href":174,"dataGaName":535,"dataGaLocation":517},"gitlab duo",{"altText":519,"config":537},{"src":521,"dataGaName":522,"dataGaLocation":517},{"altText":519,"config":539},{"src":525,"dataGaName":522,"dataGaLocation":517},{"button":541,"mobileIcon":546,"desktopIcon":548},{"text":542,"config":543},"/switch",{"href":544,"dataGaName":545,"dataGaLocation":517},"#contact","switch",{"altText":519,"config":547},{"src":521,"dataGaName":522,"dataGaLocation":517},{"altText":519,"config":549},{"src":550,"dataGaName":522,"dataGaLocation":517},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":552,"mobileIcon":557,"desktopIcon":559},{"text":553,"config":554},"Back to pricing",{"href":287,"dataGaName":555,"dataGaLocation":517,"icon":556},"back to pricing","GoBack",{"altText":519,"config":558},{"src":521,"dataGaName":522,"dataGaLocation":517},{"altText":519,"config":560},{"src":525,"dataGaName":522,"dataGaLocation":517},{"title":562,"titleMobile":563,"button":564,"config":569},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":180,"config":565},{"href":566,"dataGaName":567,"dataGaLocation":568},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":570,"disabled":116},"release",{"data":572},{"text":573,"source":574,"edit":580,"contribute":585,"config":590,"items":595,"minimal":805},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":575,"config":576},"View page source",{"href":577,"dataGaName":578,"dataGaLocation":579},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":581,"config":582},"Edit this page",{"href":583,"dataGaName":584,"dataGaLocation":579},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":586,"config":587},"Please contribute",{"href":588,"dataGaName":589,"dataGaLocation":579},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":591,"facebook":592,"youtube":593,"linkedin":594},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[596,643,697,741,773],{"title":285,"links":597,"subMenu":612},[598,602,607],{"text":599,"config":600},"View plans",{"href":287,"dataGaName":601,"dataGaLocation":579},"view plans",{"text":603,"config":604},"Why Premium?",{"href":605,"dataGaName":606,"dataGaLocation":579},"/pricing/premium/","why premium",{"text":608,"config":609},"Why Ultimate?",{"href":610,"dataGaName":611,"dataGaLocation":579},"/pricing/ultimate/","why ultimate",[613],{"title":614,"links":615},"Contact Us",[616,619,621,623,628,633,638],{"text":617,"config":618},"Contact sales",{"href":469,"dataGaName":148,"dataGaLocation":579},{"text":472,"config":620},{"href":474,"dataGaName":475,"dataGaLocation":579},{"text":477,"config":622},{"href":479,"dataGaName":480,"dataGaLocation":579},{"text":624,"config":625},"Status",{"href":626,"dataGaName":627,"dataGaLocation":579},"https://status.gitlab.com/","status",{"text":629,"config":630},"Terms of use",{"href":631,"dataGaName":632,"dataGaLocation":579},"/terms/","terms of use",{"text":634,"config":635},"Privacy statement",{"href":636,"dataGaName":637,"dataGaLocation":579},"/privacy/","privacy statement",{"text":639,"config":640},"Cookie preferences",{"dataGaName":641,"dataGaLocation":579,"id":642,"isOneTrustButton":119},"cookie preferences","ot-sdk-btn",{"title":185,"links":644,"subMenu":653},[645,649],{"text":646,"config":647},"DevSecOps platform",{"href":167,"dataGaName":648,"dataGaLocation":579},"devsecops platform",{"text":650,"config":651},"AI-Assisted Development",{"href":174,"dataGaName":652,"dataGaLocation":579},"ai-assisted development",[654],{"title":655,"links":656},"Topics",[657,662,667,672,677,682,687,692],{"text":658,"config":659},"CICD",{"href":660,"dataGaName":661,"dataGaLocation":579},"/topics/ci-cd/","cicd",{"text":663,"config":664},"GitOps",{"href":665,"dataGaName":666,"dataGaLocation":579},"/topics/gitops/","gitops",{"text":668,"config":669},"DevOps",{"href":670,"dataGaName":671,"dataGaLocation":579},"/topics/devops/","devops",{"text":673,"config":674},"Version Control",{"href":675,"dataGaName":676,"dataGaLocation":579},"/topics/version-control/","version control",{"text":678,"config":679},"DevSecOps",{"href":680,"dataGaName":681,"dataGaLocation":579},"/topics/devsecops/","devsecops",{"text":683,"config":684},"Cloud Native",{"href":685,"dataGaName":686,"dataGaLocation":579},"/topics/cloud-native/","cloud native",{"text":688,"config":689},"AI for Coding",{"href":690,"dataGaName":691,"dataGaLocation":579},"/topics/devops/ai-for-coding/","ai for coding",{"text":693,"config":694},"Agentic AI",{"href":695,"dataGaName":696,"dataGaLocation":579},"/topics/agentic-ai/","agentic ai",{"title":698,"links":699},"Solutions",[700,702,704,709,713,716,720,723,725,728,731,736],{"text":229,"config":701},{"href":224,"dataGaName":229,"dataGaLocation":579},{"text":218,"config":703},{"href":201,"dataGaName":202,"dataGaLocation":579},{"text":705,"config":706},"Agile development",{"href":707,"dataGaName":708,"dataGaLocation":579},"/solutions/agile-delivery/","agile delivery",{"text":710,"config":711},"SCM",{"href":214,"dataGaName":712,"dataGaLocation":579},"source code management",{"text":658,"config":714},{"href":207,"dataGaName":715,"dataGaLocation":579},"continuous integration & delivery",{"text":717,"config":718},"Value stream management",{"href":257,"dataGaName":719,"dataGaLocation":579},"value stream management",{"text":663,"config":721},{"href":722,"dataGaName":666,"dataGaLocation":579},"/solutions/gitops/",{"text":267,"config":724},{"href":270,"dataGaName":271,"dataGaLocation":579},{"text":726,"config":727},"Small business",{"href":276,"dataGaName":277,"dataGaLocation":579},{"text":729,"config":730},"Public sector",{"href":282,"dataGaName":283,"dataGaLocation":579},{"text":732,"config":733},"Education",{"href":734,"dataGaName":735,"dataGaLocation":579},"/solutions/education/","education",{"text":737,"config":738},"Financial services",{"href":739,"dataGaName":740,"dataGaLocation":579},"/solutions/finance/","financial services",{"title":290,"links":742},[743,745,747,749,752,754,757,759,761,763,765,767,769,771],{"text":303,"config":744},{"href":305,"dataGaName":306,"dataGaLocation":579},{"text":308,"config":746},{"href":310,"dataGaName":311,"dataGaLocation":579},{"text":313,"config":748},{"href":315,"dataGaName":316,"dataGaLocation":579},{"text":318,"config":750},{"href":320,"dataGaName":751,"dataGaLocation":579},"docs",{"text":341,"config":753},{"href":343,"dataGaName":344,"dataGaLocation":579},{"text":755,"config":756},"What's new",{"href":401,"dataGaName":402,"dataGaLocation":579},{"text":336,"config":758},{"href":338,"dataGaName":339,"dataGaLocation":579},{"text":355,"config":760},{"href":357,"dataGaName":358,"dataGaLocation":579},{"text":363,"config":762},{"href":365,"dataGaName":366,"dataGaLocation":579},{"text":368,"config":764},{"href":370,"dataGaName":371,"dataGaLocation":579},{"text":373,"config":766},{"href":375,"dataGaName":376,"dataGaLocation":579},{"text":378,"config":768},{"href":380,"dataGaName":381,"dataGaLocation":579},{"text":383,"config":770},{"href":385,"dataGaName":386,"dataGaLocation":579},{"text":388,"config":772},{"href":390,"dataGaName":391,"dataGaLocation":579},{"title":404,"links":774},[775,777,779,781,783,785,789,794,796,798,800],{"text":412,"config":776},{"href":414,"dataGaName":406,"dataGaLocation":579},{"text":417,"config":778},{"href":419,"dataGaName":420,"dataGaLocation":579},{"text":425,"config":780},{"href":427,"dataGaName":428,"dataGaLocation":579},{"text":430,"config":782},{"href":432,"dataGaName":433,"dataGaLocation":579},{"text":435,"config":784},{"href":437,"dataGaName":438,"dataGaLocation":579},{"text":786,"config":787},"Sustainability",{"href":788,"dataGaName":786,"dataGaLocation":579},"/sustainability/",{"text":790,"config":791},"Diversity, inclusion and belonging (DIB)",{"href":792,"dataGaName":793,"dataGaLocation":579},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":440,"config":795},{"href":442,"dataGaName":443,"dataGaLocation":579},{"text":450,"config":797},{"href":452,"dataGaName":453,"dataGaLocation":579},{"text":455,"config":799},{"href":457,"dataGaName":458,"dataGaLocation":579},{"text":801,"config":802},"Modern Slavery Transparency Statement",{"href":803,"dataGaName":804,"dataGaLocation":579},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":806},[807,810,813],{"text":808,"config":809},"Terms",{"href":631,"dataGaName":632,"dataGaLocation":579},{"text":811,"config":812},"Cookies",{"dataGaName":641,"dataGaLocation":579,"id":642,"isOneTrustButton":119},{"text":814,"config":815},"Privacy",{"href":636,"dataGaName":637,"dataGaLocation":579},[817],{"id":818,"title":7,"body":115,"config":819,"content":821,"description":115,"extension":824,"meta":825,"navigation":119,"path":826,"seo":827,"stem":828,"__hash__":829},"blogAuthors/en-us/blog/authors/nicole-schwartz.yml",{"template":820},"BlogAuthor",{"name":7,"config":822},{"headshot":106,"ctfId":823},"nicoleschwartz","yml",{},"/en-us/blog/authors/nicole-schwartz",{},"en-us/blog/authors/nicole-schwartz","rOmvp54iy-eNQvQZ0VxJuSNU4XtQJGjxQfEOTEA9qB0",[831,840,848],{"title":832,"description":833,"heroImage":834,"category":111,"date":835,"authors":836,"slug":839,"externalUrl":115},"Confidential AI for GitLab Self-Hosted","Give developers AI coding agents in GitLab Duo without source code leaving a hardware-encrypted boundary — no GPUs needed.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1773866173/vte9qh8rriznvyclhkes.png","2026-08-06",[837,838],"Mathias Ewald","Martin Paloncy, Edgeless Systems","confidential-ai-for-gitlab-self-hosted",{"title":841,"description":842,"heroImage":843,"category":111,"date":844,"authors":845,"slug":847,"externalUrl":115},"Green DevOps: Why carbon measurement belongs in your CI/CD pipeline","CI/CD pipelines have a hidden carbon cost. Here's why measuring it matters, and how you can get started with Eco CI and Carmen in GitLab.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1765809212/noh0mdfn9o94ry9ykura.png","2026-07-09",[846],"Lysanne Pinto","green-devops-carbon-measurement-cicd-pipeline",{"title":849,"description":850,"heroImage":851,"category":111,"date":852,"authors":853,"slug":855,"externalUrl":115},"How to build CI/CD observability at scale","This practical guide to GitLab pipeline analytics helps self-managed users gain operational insights using Prometheus and Grafana.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1774465167/n5hlvrsrheadeccyr1oz.png","2026-04-28",[854],"Paul Meresanu","how-to-build-ci-cd-observability-at-scale",{"promotions":857},[858,872,884,895],{"id":859,"categories":860,"header":862,"text":863,"button":864,"image":869},"ai-modernization",[861],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":865,"config":866},"Get your AI maturity score",{"href":867,"dataGaName":868,"dataGaLocation":344},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":870},{"src":871},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":873,"categories":874,"header":876,"text":863,"button":877,"image":881},"devops-modernization",[875,681],"product","Are you just managing tools or shipping innovation?",{"text":878,"config":879},"Get your DevOps maturity score",{"href":880,"dataGaName":868,"dataGaLocation":344},"/assessments/devops-modernization-assessment/",{"config":882},{"src":883},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":885,"categories":886,"header":887,"text":863,"button":888,"image":892},"security-modernization",[128],"Are you trading speed for security?",{"text":889,"config":890},"Get your security maturity score",{"href":891,"dataGaName":868,"dataGaLocation":344},"/assessments/security-modernization-assessment/",{"config":893},{"src":894},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":896,"paths":897,"header":900,"text":901,"button":902,"image":907},"github-azure-migration",[898,899],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":903,"config":904},"See how GitLab compares to GitHub",{"href":905,"dataGaName":906,"dataGaLocation":344},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":908},{"src":883},{"header":910,"blurb":911,"button":912,"secondaryButton":917},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":913,"config":914},"Get your free trial",{"href":915,"dataGaName":143,"dataGaLocation":916},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":617,"config":918},{"href":469,"dataGaName":148,"dataGaLocation":916},1786803747719]