[{"data":1,"prerenderedAt":975},["ShallowReactive",2],{"/blog/gitlab-supply-chain-security":3,"navigation-en-us":192,"banner-en-us":619,"footer-en-us":629,"blog-post-authors-en-us-Sam White":873,"blog-related-posts-en-us-gitlab-supply-chain-security":888,"blog-promotions-en-us":912,"next-steps-en-us":965},{"id":4,"title":5,"authors":6,"body":8,"category":170,"date":171,"description":172,"extension":173,"externalUrl":174,"faq":174,"featured":175,"heroImage":176,"meta":177,"navigation":178,"path":179,"seo":180,"slug":184,"stem":185,"tags":186,"template":190,"updatedDate":174,"__hash__":191},"blogPosts/en-us/blog/gitlab-supply-chain-security.md","Introducing GitLab’s supply chain security direction and landscape",[7],"Sam White",{"type":9,"value":10,"toc":161},"minimark",[11,18,28,31,34,37,40,56,61,70,73,106,113,118,132,141,145,148,151],[12,13,14],"p",{},[15,16,17],"em",{},"This blog post and linked pages contain information related to upcoming products, features, and functionality. It is important to note that the information presented is for informational purposes only. Please do not rely on this information for purchasing or planning purposes. As with all projects, the items mentioned in the blog post and linked pages are subject to change or delay. The development, release, and timing of products, features, or functionality remain at the sole discretion of GitLab, Inc.",[12,19,20,21,27],{},"We would like to introduce you to our software supply chain security ",[22,23,26],"a",{"href":24,"rel":25},"https://docs.gitlab.com/user/application_security/",[],"documentation"," and landscape.",[12,29,30],{},"An emerging concern in the software development space is being able to document the entire supply chain and development progress by creating a chain of custody starting from code creation, build, test, package, and going through deployment.",[12,32,33],{},"GitLab's software supply chain security (SSCS) vision includes everything needed to securely deliver and run software with a high degree of confidence that not only your software, but also its surrounding cloud-native infrastructure, has not been compromised.",[12,35,36],{},"In the long-term, our strategy is to become a complete provider for all aspects of SSCS. Providing all of these aspects within a single application not only supports GitLab's broader Single Application Strategy but also provides numerous tangible benefits for users.",[12,38,39],{},"Among other things, using a single application:",[41,42,43,47,50,53],"ol",{},[44,45,46],"li",{},"Minimizes the number of different tools that need to be hardened and monitored.",[44,48,49],{},"Reduces the number of potential points of security failure as data is transferred between various tools.",[44,51,52],{},"Enables seamless interoperability.",[44,54,55],{},"Simplifies visibility and traceability for audits.",[57,58,60],"h2",{"id":59},"gitlab-sscs-framework","GitLab SSCS Framework",[12,62,63,64,69],{},"GitLab has put together a framework describing the various aspects that are required to accomplish this based on feedback from customers and inspiration from common standards (such as ",[22,65,68],{"href":66,"rel":67},"https://slsa.dev/",[],"SLSA","), as well as thought leadership from industry analysts. Please note, however, that this framework is not necessarily representative of any other entity's opinion or perspective on the SSCS space.",[12,71,72],{},"We believe that there are five main aspects to consider when providing for a secure, end-to-end software supply chain.",[41,74,75,82,88,94,100],{},[44,76,77,81],{},[78,79,80],"strong",{},"Source"," - includes the controls needed to be confident that both internal and external source code is safe from vulnerabilities and has not been compromised in any way.",[44,83,84,87],{},[78,85,86],{},"Build"," - includes rigorous requirements for the security and isolation of build environments as well as the automatic generation of provenance.",[44,89,90,93],{},[78,91,92],{},"Consumption"," - includes the ability to validate authenticity and source of any executed binaries. Supports requirements for securing the underlying host infrastructure itself.",[44,95,96,99],{},[78,97,98],{},"Management Process"," - spans across all other aspects of SSCS and includes both the tools and processes necessary to provide for ongoing visibility into SSCS continuous compliance requirements.",[44,101,102,105],{},[78,103,104],{},"Tool Security"," - spans across all other aspects of SSCS and includes the adoption of best practices for managing the security of the underlying tools themselves.",[12,107,108,109,112],{},"You can learn more about the SSCS framework in our ",[22,110,26],{"href":24,"rel":111},[],".",[114,115,117],"h3",{"id":116},"gitlab-helps-keep-your-software-supply-chain-secure","GitLab helps keep your software supply chain secure",[12,119,120,121,125,126,131],{},"GitLab has ",[22,122,124],{"href":123},"/blog/gitlabs-newest-continuous-compliance-features-bolster-software/","numerous capabilities that support continuous compliance"," and a secure software supply chain. Our newly released ",[22,127,130],{"href":128,"rel":129},"https://page.gitlab.com/resources-ebook-software-supply-chain-security.html",[],"“Guide to Software Supply Chain Security”"," explains the urgency of protecting the supply chain now and also describes how this can be done while using GitLab.",[12,133,134,135,140],{},"GitLab is a platform that ",[22,136,139],{"href":137,"rel":138},"https://handbook.gitlab.com/handbook/product/categories/gitlab-the-product/#plays-well-with-others",[],"plays well with others"," and can work together with other best-in-class security tools to provide complete end-to-end chain of custody throughout the development and deployment process. GitLab's vision is to partner closely with leading technologies in this space to provide an integrated, turnkey experience for end users.",[114,142,144],{"id":143},"whats-next","What’s next",[12,146,147],{},"As a single DevOps platform, there are many opportunities to rise to the challenge of creating transparency around software components and artifacts. We welcome feedback on our current position and vision for the long-term direction of GitLab in SSCS.",[12,149,150],{},"Here are a few of our near-term projects:",[152,153,154],"ul",{},[44,155,156,157],{},"GitLab's [Runner Core](",[22,158,159],{"href":159,"rel":160},"https://docs.gitlab.com/runner/",[],{"title":162,"searchDepth":163,"depth":163,"links":164},"",2,[165],{"id":59,"depth":163,"text":60,"children":166},[167,169],{"id":116,"depth":168,"text":117},3,{"id":143,"depth":168,"text":144},"company","2022-02-15","Learn about software supply chain security at GitLab.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749667466/Blog/Hero%20Images/GitLab-Sec.png",{},true,"/en-us/blog/gitlab-supply-chain-security",{"title":5,"description":172,"ogTitle":5,"ogDescription":172,"noIndex":175,"ogImage":176,"ogUrl":181,"ogSiteName":182,"ogType":183,"canonicalUrls":181},"https://about.gitlab.com/blog/gitlab-supply-chain-security","https://about.gitlab.com","article","gitlab-supply-chain-security","en-us/blog/gitlab-supply-chain-security",[187,188,189],"security","DevOps","features","BlogPost","r4Rs01VNopk0_x0CNRfmEcGTGYKeZm3Tnqq7Mf7uhZE",{"logo":193,"freeTrial":198,"sales":203,"login":208,"items":213,"search":539,"minimal":570,"duo":589,"switchNav":598,"pricingDeployment":609},{"config":194},{"href":195,"dataGaName":196,"dataGaLocation":197},"/","gitlab logo","header",{"text":199,"config":200},"Get free trial",{"href":201,"dataGaName":202,"dataGaLocation":197},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":204,"config":205},"Request a demo",{"href":206,"dataGaName":207,"dataGaLocation":197},"/sales/?contact-topic=request-demo","sales",{"text":209,"config":210},"Sign in",{"href":211,"dataGaName":212,"dataGaLocation":197},"https://gitlab.com/users/sign_in/","sign in",[214,243,343,348,462,517],{"text":215,"config":216,"menu":218},"Platform",{"dataNavLevelOne":217},"platform",{"type":219,"columns":220},"cards",[221,227,235],{"title":215,"description":222,"link":223},"The intelligent orchestration platform for DevSecOps",{"text":224,"config":225},"Explore our Platform",{"href":226,"dataGaName":217,"dataGaLocation":197},"/platform/",{"title":228,"description":229,"link":230},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":231,"config":232},"Meet GitLab Duo",{"href":233,"dataGaName":234,"dataGaLocation":197},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":236,"description":237,"link":238},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":239,"config":240},"Learn more",{"href":241,"dataGaName":242,"dataGaLocation":197},"/why-gitlab/","why gitlab",{"text":244,"left":178,"config":245,"menu":247},"Product",{"dataNavLevelOne":246},"solutions",{"type":248,"link":249,"columns":253,"feature":322},"lists",{"text":250,"config":251},"View all Solutions",{"href":252,"dataGaName":246,"dataGaLocation":197},"/solutions/",[254,278,301],{"title":255,"description":256,"link":257,"items":262},"Automation","CI/CD and automation to accelerate deployment",{"config":258},{"icon":259,"href":260,"dataGaName":261,"dataGaLocation":197},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[263,267,270,274],{"text":264,"config":265},"CI/CD",{"href":266,"dataGaLocation":197,"dataGaName":264},"/solutions/continuous-integration/",{"text":228,"config":268},{"href":233,"dataGaLocation":197,"dataGaName":269},"gitlab duo agent platform - product menu",{"text":271,"config":272},"Source Code Management",{"href":273,"dataGaLocation":197,"dataGaName":271},"/solutions/source-code-management/",{"text":275,"config":276},"Automated Software Delivery",{"href":260,"dataGaLocation":197,"dataGaName":277},"Automated software delivery",{"title":279,"description":280,"link":281,"items":286},"Security","Deliver code faster without compromising security",{"config":282},{"href":283,"dataGaName":284,"dataGaLocation":197,"icon":285},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[287,291,296],{"text":288,"config":289},"Application Security Testing",{"href":283,"dataGaName":290,"dataGaLocation":197},"Application security testing",{"text":292,"config":293},"Software Supply Chain Security",{"href":294,"dataGaLocation":197,"dataGaName":295},"/solutions/supply-chain/","Software supply chain security",{"text":297,"config":298},"Software Compliance",{"href":299,"dataGaName":300,"dataGaLocation":197},"/solutions/software-compliance/","software compliance",{"title":302,"link":303,"items":308},"Measurement",{"config":304},{"icon":305,"href":306,"dataGaName":307,"dataGaLocation":197},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[309,313,317],{"text":310,"config":311},"Visibility & Measurement",{"href":306,"dataGaLocation":197,"dataGaName":312},"Visibility and Measurement",{"text":314,"config":315},"Value Stream Management",{"href":316,"dataGaLocation":197,"dataGaName":314},"/solutions/value-stream-management/",{"text":318,"config":319},"Analytics & Insights",{"href":320,"dataGaLocation":197,"dataGaName":321},"/solutions/analytics-and-insights/","Analytics and insights",{"title":323,"type":248,"items":324},"GitLab for",[325,331,337],{"text":326,"config":327},"Enterprise",{"icon":328,"href":329,"dataGaLocation":197,"dataGaName":330},"Building","/enterprise/","enterprise",{"text":332,"config":333},"Small Business",{"icon":334,"href":335,"dataGaLocation":197,"dataGaName":336},"Work","/small-business/","small business",{"text":338,"config":339},"Public Sector",{"icon":340,"href":341,"dataGaLocation":197,"dataGaName":342},"Organization","/solutions/public-sector/","public sector",{"text":344,"config":345},"Pricing",{"href":346,"dataGaName":347,"dataGaLocation":197,"dataNavLevelOne":347},"/pricing/","pricing",{"text":349,"config":350,"menu":352},"Resources",{"dataNavLevelOne":351},"resources",{"type":248,"link":353,"columns":357,"feature":451},{"text":354,"config":355},"View all resources",{"href":356,"dataGaName":351,"dataGaLocation":197},"/resources/",[358,391,418],{"title":359,"items":360},"Getting started",[361,366,371,376,381,386],{"text":362,"config":363},"Install",{"href":364,"dataGaName":365,"dataGaLocation":197},"/install/","install",{"text":367,"config":368},"Quick start guides",{"href":369,"dataGaName":370,"dataGaLocation":197},"/get-started/","quick setup checklists",{"text":372,"config":373},"Learn",{"href":374,"dataGaLocation":197,"dataGaName":375},"https://university.gitlab.com/","learn",{"text":377,"config":378},"Product documentation",{"href":379,"dataGaName":380,"dataGaLocation":197},"https://docs.gitlab.com/","product documentation",{"text":382,"config":383},"Best practice videos",{"href":384,"dataGaName":385,"dataGaLocation":197},"/getting-started-videos/","best practice videos",{"text":387,"config":388},"Integrations",{"href":389,"dataGaName":390,"dataGaLocation":197},"/integrations/","integrations",{"title":392,"items":393},"Discover",[394,399,404,409,413],{"text":395,"config":396},"Customer success stories",{"href":397,"dataGaName":398,"dataGaLocation":197},"/customers/","customer success stories",{"text":400,"config":401},"Blog",{"href":402,"dataGaName":403,"dataGaLocation":197},"/blog/","blog",{"text":405,"config":406},"Demo Hub",{"href":407,"dataGaName":408,"dataGaLocation":197},"/demo-hub/","demo hub",{"text":410,"config":411},"The Source",{"href":412,"dataGaName":403,"dataGaLocation":197},"/the-source/",{"text":414,"config":415},"Remote",{"href":416,"dataGaName":417,"dataGaLocation":197},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":419,"items":420},"Connect",[421,426,431,436,441,446],{"text":422,"config":423},"GitLab Services",{"href":424,"dataGaName":425,"dataGaLocation":197},"/services/","services",{"text":427,"config":428},"Contribute",{"href":429,"dataGaName":430,"dataGaLocation":197},"https://contributors.gitlab.com","contribute",{"text":432,"config":433},"Community",{"href":434,"dataGaName":435,"dataGaLocation":197},"/community/","community",{"text":437,"config":438},"Forum",{"href":439,"dataGaName":440,"dataGaLocation":197},"https://forum.gitlab.com/","forum",{"text":442,"config":443},"Events",{"href":444,"dataGaName":445,"dataGaLocation":197},"/events/","events",{"text":447,"config":448},"Partners",{"href":449,"dataGaName":450,"dataGaLocation":197},"/partners/","partners",{"config":452,"title":455,"text":456,"link":457},{"background":453,"textColor":454},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":458,"config":459},"Read the latest",{"href":460,"dataGaName":461,"dataGaLocation":197},"/whats-new/","whats new",{"text":463,"config":464,"menu":465},"Company",{"dataNavLevelOne":170},{"type":248,"columns":466},[467],{"items":468},[469,474,480,482,487,492,497,502,507,512],{"text":470,"config":471},"About",{"href":472,"dataGaName":473,"dataGaLocation":197},"/company/","about",{"text":475,"config":476,"footerGa":479},"Jobs",{"href":477,"dataGaName":478,"dataGaLocation":197},"/jobs/","jobs",{"dataGaName":478},{"text":442,"config":481},{"href":444,"dataGaName":445,"dataGaLocation":197},{"text":483,"config":484},"Leadership",{"href":485,"dataGaName":486,"dataGaLocation":197},"/company/team/e-group/","leadership",{"text":488,"config":489},"Handbook",{"href":490,"dataGaName":491,"dataGaLocation":197},"https://handbook.gitlab.com/","handbook",{"text":493,"config":494},"Investor relations",{"href":495,"dataGaName":496,"dataGaLocation":197},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":498,"config":499},"Trust Center",{"href":500,"dataGaName":501,"dataGaLocation":197},"/security/","trust center",{"text":503,"config":504},"AI Transparency Center",{"href":505,"dataGaName":506,"dataGaLocation":197},"/ai-transparency-center/","ai transparency center",{"text":508,"config":509},"Newsletter",{"href":510,"dataGaName":511,"dataGaLocation":197},"/company/contact/#contact-forms","newsletter",{"text":513,"config":514},"Press",{"href":515,"dataGaName":516,"dataGaLocation":197},"/press/","press",{"text":518,"config":519,"menu":520},"Contact us",{"dataNavLevelOne":170},{"type":248,"columns":521},[522],{"items":523},[524,529,534],{"text":525,"config":526},"Talk to sales",{"href":527,"dataGaName":528,"dataGaLocation":197},"/sales/","talk to sales",{"text":530,"config":531},"Support portal",{"href":532,"dataGaName":533,"dataGaLocation":197},"https://support.gitlab.com/hc/en-us","support portal",{"text":535,"config":536},"Customer portal",{"href":537,"dataGaName":538,"dataGaLocation":197},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":540,"login":541,"suggestions":548},"Close",{"text":542,"link":543},"To search repositories and projects, login to",{"text":544,"config":545},"gitlab.com",{"href":211,"dataGaName":546,"dataGaLocation":547},"search login","search",{"text":549,"default":550},"Suggestions",[551,553,557,559,563,567],{"text":228,"config":552},{"href":233,"dataGaName":228,"dataGaLocation":547},{"text":554,"config":555},"Code Suggestions (AI)",{"href":556,"dataGaName":554,"dataGaLocation":547},"/solutions/code-suggestions/",{"text":264,"config":558},{"href":266,"dataGaName":264,"dataGaLocation":547},{"text":560,"config":561},"GitLab on AWS",{"href":562,"dataGaName":560,"dataGaLocation":547},"/partners/technology-partners/aws/",{"text":564,"config":565},"GitLab on Google Cloud",{"href":566,"dataGaName":564,"dataGaLocation":547},"/partners/technology-partners/google-cloud-platform/",{"text":568,"config":569},"Why GitLab?",{"href":241,"dataGaName":568,"dataGaLocation":547},{"freeTrial":571,"mobileIcon":576,"desktopIcon":581,"secondaryButton":584},{"text":572,"config":573},"Start free trial",{"href":574,"dataGaName":202,"dataGaLocation":575},"https://gitlab.com/-/trials/new/","nav",{"altText":577,"config":578},"Gitlab Icon",{"src":579,"dataGaName":580,"dataGaLocation":575},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":577,"config":582},{"src":583,"dataGaName":580,"dataGaLocation":575},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":585,"config":586},"Get Started",{"href":587,"dataGaName":588,"dataGaLocation":575},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":590,"mobileIcon":594,"desktopIcon":596},{"text":591,"config":592},"Learn more about GitLab Duo",{"href":233,"dataGaName":593,"dataGaLocation":575},"gitlab duo",{"altText":577,"config":595},{"src":579,"dataGaName":580,"dataGaLocation":575},{"altText":577,"config":597},{"src":583,"dataGaName":580,"dataGaLocation":575},{"button":599,"mobileIcon":604,"desktopIcon":606},{"text":600,"config":601},"/switch",{"href":602,"dataGaName":603,"dataGaLocation":575},"#contact","switch",{"altText":577,"config":605},{"src":579,"dataGaName":580,"dataGaLocation":575},{"altText":577,"config":607},{"src":608,"dataGaName":580,"dataGaLocation":575},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":610,"mobileIcon":615,"desktopIcon":617},{"text":611,"config":612},"Back to pricing",{"href":346,"dataGaName":613,"dataGaLocation":575,"icon":614},"back to pricing","GoBack",{"altText":577,"config":616},{"src":579,"dataGaName":580,"dataGaLocation":575},{"altText":577,"config":618},{"src":583,"dataGaName":580,"dataGaLocation":575},{"title":620,"titleMobile":621,"button":622,"config":627},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":239,"config":623},{"href":624,"dataGaName":625,"dataGaLocation":626},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":628,"disabled":175},"release",{"data":630},{"text":631,"source":632,"edit":638,"contribute":643,"config":648,"items":653,"minimal":862},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":633,"config":634},"View page source",{"href":635,"dataGaName":636,"dataGaLocation":637},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":639,"config":640},"Edit this page",{"href":641,"dataGaName":642,"dataGaLocation":637},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":644,"config":645},"Please contribute",{"href":646,"dataGaName":647,"dataGaLocation":637},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":649,"facebook":650,"youtube":651,"linkedin":652},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[654,701,754,798,830],{"title":344,"links":655,"subMenu":670},[656,660,665],{"text":657,"config":658},"View plans",{"href":346,"dataGaName":659,"dataGaLocation":637},"view plans",{"text":661,"config":662},"Why Premium?",{"href":663,"dataGaName":664,"dataGaLocation":637},"/pricing/premium/","why premium",{"text":666,"config":667},"Why Ultimate?",{"href":668,"dataGaName":669,"dataGaLocation":637},"/pricing/ultimate/","why ultimate",[671],{"title":672,"links":673},"Contact Us",[674,677,679,681,686,691,696],{"text":675,"config":676},"Contact sales",{"href":527,"dataGaName":207,"dataGaLocation":637},{"text":530,"config":678},{"href":532,"dataGaName":533,"dataGaLocation":637},{"text":535,"config":680},{"href":537,"dataGaName":538,"dataGaLocation":637},{"text":682,"config":683},"Status",{"href":684,"dataGaName":685,"dataGaLocation":637},"https://status.gitlab.com/","status",{"text":687,"config":688},"Terms of use",{"href":689,"dataGaName":690,"dataGaLocation":637},"/terms/","terms of use",{"text":692,"config":693},"Privacy statement",{"href":694,"dataGaName":695,"dataGaLocation":637},"/privacy/","privacy statement",{"text":697,"config":698},"Cookie preferences",{"dataGaName":699,"dataGaLocation":637,"id":700,"isOneTrustButton":178},"cookie preferences","ot-sdk-btn",{"title":244,"links":702,"subMenu":711},[703,707],{"text":704,"config":705},"DevSecOps platform",{"href":226,"dataGaName":706,"dataGaLocation":637},"devsecops platform",{"text":708,"config":709},"AI-Assisted Development",{"href":233,"dataGaName":710,"dataGaLocation":637},"ai-assisted development",[712],{"title":713,"links":714},"Topics",[715,720,725,729,734,739,744,749],{"text":716,"config":717},"CICD",{"href":718,"dataGaName":719,"dataGaLocation":637},"/topics/ci-cd/","cicd",{"text":721,"config":722},"GitOps",{"href":723,"dataGaName":724,"dataGaLocation":637},"/topics/gitops/","gitops",{"text":188,"config":726},{"href":727,"dataGaName":728,"dataGaLocation":637},"/topics/devops/","devops",{"text":730,"config":731},"Version Control",{"href":732,"dataGaName":733,"dataGaLocation":637},"/topics/version-control/","version control",{"text":735,"config":736},"DevSecOps",{"href":737,"dataGaName":738,"dataGaLocation":637},"/topics/devsecops/","devsecops",{"text":740,"config":741},"Cloud Native",{"href":742,"dataGaName":743,"dataGaLocation":637},"/topics/cloud-native/","cloud native",{"text":745,"config":746},"AI for Coding",{"href":747,"dataGaName":748,"dataGaLocation":637},"/topics/devops/ai-for-coding/","ai for coding",{"text":750,"config":751},"Agentic AI",{"href":752,"dataGaName":753,"dataGaLocation":637},"/topics/agentic-ai/","agentic ai",{"title":755,"links":756},"Solutions",[757,759,761,766,770,773,777,780,782,785,788,793],{"text":288,"config":758},{"href":283,"dataGaName":288,"dataGaLocation":637},{"text":277,"config":760},{"href":260,"dataGaName":261,"dataGaLocation":637},{"text":762,"config":763},"Agile development",{"href":764,"dataGaName":765,"dataGaLocation":637},"/solutions/agile-delivery/","agile delivery",{"text":767,"config":768},"SCM",{"href":273,"dataGaName":769,"dataGaLocation":637},"source code management",{"text":716,"config":771},{"href":266,"dataGaName":772,"dataGaLocation":637},"continuous integration & delivery",{"text":774,"config":775},"Value stream management",{"href":316,"dataGaName":776,"dataGaLocation":637},"value stream management",{"text":721,"config":778},{"href":779,"dataGaName":724,"dataGaLocation":637},"/solutions/gitops/",{"text":326,"config":781},{"href":329,"dataGaName":330,"dataGaLocation":637},{"text":783,"config":784},"Small business",{"href":335,"dataGaName":336,"dataGaLocation":637},{"text":786,"config":787},"Public sector",{"href":341,"dataGaName":342,"dataGaLocation":637},{"text":789,"config":790},"Education",{"href":791,"dataGaName":792,"dataGaLocation":637},"/solutions/education/","education",{"text":794,"config":795},"Financial services",{"href":796,"dataGaName":797,"dataGaLocation":637},"/solutions/finance/","financial services",{"title":349,"links":799},[800,802,804,806,809,811,814,816,818,820,822,824,826,828],{"text":362,"config":801},{"href":364,"dataGaName":365,"dataGaLocation":637},{"text":367,"config":803},{"href":369,"dataGaName":370,"dataGaLocation":637},{"text":372,"config":805},{"href":374,"dataGaName":375,"dataGaLocation":637},{"text":377,"config":807},{"href":379,"dataGaName":808,"dataGaLocation":637},"docs",{"text":400,"config":810},{"href":402,"dataGaName":403,"dataGaLocation":637},{"text":812,"config":813},"What's new",{"href":460,"dataGaName":461,"dataGaLocation":637},{"text":395,"config":815},{"href":397,"dataGaName":398,"dataGaLocation":637},{"text":414,"config":817},{"href":416,"dataGaName":417,"dataGaLocation":637},{"text":422,"config":819},{"href":424,"dataGaName":425,"dataGaLocation":637},{"text":427,"config":821},{"href":429,"dataGaName":430,"dataGaLocation":637},{"text":432,"config":823},{"href":434,"dataGaName":435,"dataGaLocation":637},{"text":437,"config":825},{"href":439,"dataGaName":440,"dataGaLocation":637},{"text":442,"config":827},{"href":444,"dataGaName":445,"dataGaLocation":637},{"text":447,"config":829},{"href":449,"dataGaName":450,"dataGaLocation":637},{"title":463,"links":831},[832,834,836,838,840,842,846,851,853,855,857],{"text":470,"config":833},{"href":472,"dataGaName":170,"dataGaLocation":637},{"text":475,"config":835},{"href":477,"dataGaName":478,"dataGaLocation":637},{"text":483,"config":837},{"href":485,"dataGaName":486,"dataGaLocation":637},{"text":488,"config":839},{"href":490,"dataGaName":491,"dataGaLocation":637},{"text":493,"config":841},{"href":495,"dataGaName":496,"dataGaLocation":637},{"text":843,"config":844},"Sustainability",{"href":845,"dataGaName":843,"dataGaLocation":637},"/sustainability/",{"text":847,"config":848},"Diversity, inclusion and belonging (DIB)",{"href":849,"dataGaName":850,"dataGaLocation":637},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":498,"config":852},{"href":500,"dataGaName":501,"dataGaLocation":637},{"text":508,"config":854},{"href":510,"dataGaName":511,"dataGaLocation":637},{"text":513,"config":856},{"href":515,"dataGaName":516,"dataGaLocation":637},{"text":858,"config":859},"Modern Slavery Transparency Statement",{"href":860,"dataGaName":861,"dataGaLocation":637},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":863},[864,867,870],{"text":865,"config":866},"Terms",{"href":689,"dataGaName":690,"dataGaLocation":637},{"text":868,"config":869},"Cookies",{"dataGaName":699,"dataGaLocation":637,"id":700,"isOneTrustButton":178},{"text":871,"config":872},"Privacy",{"href":694,"dataGaName":695,"dataGaLocation":637},[874],{"id":875,"title":7,"body":174,"config":876,"content":878,"description":174,"extension":882,"meta":883,"navigation":178,"path":884,"seo":885,"stem":886,"__hash__":887},"blogAuthors/en-us/blog/authors/sam-white.yml",{"template":877},"BlogAuthor",{"name":7,"config":879},{"headshot":880,"ctfId":881},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749682227/Blog/Author%20Headshots/sam.png","samwhite","yml",{},"/en-us/blog/authors/sam-white",{},"en-us/blog/authors/sam-white","X8bIdQl4OkmvGusN-6F5_nA4SjFr7Q1_o191tEXti8g",[889,897,904],{"title":890,"description":891,"heroImage":892,"category":170,"date":893,"authors":894,"slug":896,"externalUrl":174},"Why GitLab signed the Open Weights and American AI Leadership letter","GitLab supports customer choice, data privacy, and AI model neutrality, empowering teams to run secure, cost-effective, local solutions.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1785333264/ww4mlighwlvvzgnmbe6w.png","2026-07-29",[895],"Bill Staples","open-weight-model-letter",{"title":898,"description":899,"heroImage":900,"category":170,"date":901,"authors":902,"slug":903,"externalUrl":174},"GitLab Act 2","A letter to our customers and our investors.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1776362275/ozbwn9tk0dditpnfddlz.png","2026-05-11",[895],"gitlab-act-2",{"title":905,"description":906,"heroImage":907,"category":170,"date":908,"authors":909,"slug":911,"externalUrl":174},"GitLab named a 2026 Omdia Universe Leader","Omdia's 2026 report on AI-assisted software development ranked 19 vendors. Here is what GitLab's top scores mean for engineering teams.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1774465167/n5hlvrsrheadeccyr1oz.png","2026-04-13",[910],"Rebecca Carter","gitlab-named-a-2026-omdia-universe-leader",{"promotions":913},[914,928,940,951],{"id":915,"categories":916,"header":918,"text":919,"button":920,"image":925},"ai-modernization",[917],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":921,"config":922},"Get your AI maturity score",{"href":923,"dataGaName":924,"dataGaLocation":403},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":926},{"src":927},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":929,"categories":930,"header":932,"text":919,"button":933,"image":937},"devops-modernization",[931,738],"product","Are you just managing tools or shipping innovation?",{"text":934,"config":935},"Get your DevOps maturity score",{"href":936,"dataGaName":924,"dataGaLocation":403},"/assessments/devops-modernization-assessment/",{"config":938},{"src":939},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":941,"categories":942,"header":943,"text":919,"button":944,"image":948},"security-modernization",[187],"Are you trading speed for security?",{"text":945,"config":946},"Get your security maturity score",{"href":947,"dataGaName":924,"dataGaLocation":403},"/assessments/security-modernization-assessment/",{"config":949},{"src":950},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":952,"paths":953,"header":956,"text":957,"button":958,"image":963},"github-azure-migration",[954,955],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":959,"config":960},"See how GitLab compares to GitHub",{"href":961,"dataGaName":962,"dataGaLocation":403},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":964},{"src":939},{"header":966,"blurb":967,"button":968,"secondaryButton":973},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":969,"config":970},"Get your free trial",{"href":971,"dataGaName":202,"dataGaLocation":972},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":675,"config":974},{"href":527,"dataGaName":207,"dataGaLocation":972},1786803750802]