[{"data":1,"prerenderedAt":1174},["ShallowReactive",2],{"/blog/happy-birthday-secure-by-design":3,"navigation-en-us":391,"banner-en-us":818,"footer-en-us":828,"blog-post-authors-en-us-Joel Krooswyk":1071,"blog-related-posts-en-us-happy-birthday-secure-by-design":1086,"blog-promotions-en-us":1111,"next-steps-en-us":1164},{"id":4,"title":5,"authors":6,"body":8,"category":368,"date":369,"description":370,"extension":371,"externalUrl":372,"faq":372,"featured":373,"heroImage":374,"meta":375,"navigation":373,"path":376,"seo":377,"slug":382,"stem":383,"tags":384,"template":389,"updatedDate":372,"__hash__":390},"blogPosts/en-us/blog/happy-birthday-secure-by-design.md","Happy birthday, Secure by Design!",[7],"Joel Krooswyk",{"type":9,"value":10,"toc":349},"minimark",[11,22,25,38,43,46,116,120,123,128,136,139,143,170,174,177,212,216,229,233,236,240,249,252,273,277,286,306,310,331,335,338],[12,13,14,15,21],"p",{},"When the Cybersecurity and Infrastructure Security Agency (CISA) first published its ",[16,17,20],"a",{"href":18,"rel":19},"https://www.cisa.gov/securebydesign",[],"Secure by Design"," software protection initiative on April 13, 2023, the industry paid close attention. The initiative urges all software manufacturers to take the steps necessary to ensure that the products they ship are, in fact, secure by design. At GitLab, we quickly assessed our alignment with the initiative and over the past year have continued to innovate in accordance with CISA's guidelines.",[12,23,24],{},"CISA's Secure by Design introduced three software security principles:",[26,27,28,32,35],"ol",{},[29,30,31],"li",{},"Take ownership of customer security outcomes.",[29,33,34],{},"Embrace radical transparency and accountability.",[29,36,37],{},"Build organizational structure and leadership to achieve these goals.",[39,40,42],"h2",{"id":41},"a-year-of-government-guidance","A year of government guidance",[12,44,45],{},"The U.S. government has produced significant guidance throughout the past year that reflects the Secure by Design theme. Here are just a few highlights:",[47,48,49,58,67,75,84,93,101],"ul",{},[29,50,51,52,57],{},"August 2023: ONCD in partnership with several other agencies kicked off the ",[16,53,56],{"href":54,"rel":55},"https://www.whitehouse.gov/oncd/briefing-room/2023/08/10/fact-sheet-office-of-the-national-cyber-director-requests-public-comment-on-open-source-software-security-and-memory-safe-programming-languages/",[],"OS3i Initiative"," to prioritize focus areas related to open source software security.",[29,59,60,61,66],{},"August 2023: NIST produced ",[16,62,65],{"href":63,"rel":64},"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-204D.pdf",[],"SP 800-204D ","to provide practical software supply chain security strategies for DevSecOps CI/CD pipelines.",[29,68,69,70,74],{},"October 2023: CISA released a second iteration of the ",[16,71,20],{"href":72,"rel":73},"https://www.cisa.gov/sites/default/files/2023-10/SecureByDesign_1025_508c.pdf",[]," document.",[29,76,77,78,83],{},"October 2023: The ",[16,79,82],{"href":80,"rel":81},"https://www.whitehouse.gov/briefing-room/statements-releases/2023/10/30/fact-sheet-president-biden-issues-executive-order-on-safe-secure-and-trustworthy-artificial-intelligence/",[],"AI Executive Order"," was issued by the Biden Administration. Since then, AI engagement guidelines have been produced by most government agencies.",[29,85,86,87,92],{},"December 2023: CISA produced ",[16,88,91],{"href":89,"rel":90},"https://www.cisa.gov/sites/default/files/2023-12/The-Case-for-Memory-Safe-Roadmaps-508c.pdf",[],"Memory Safe Roadmap guidance",".",[29,94,95,96,92],{},"February 2024: NIST released the ",[16,97,100],{"href":98,"rel":99},"https://www.nist.gov/news-events/news/2024/02/nist-releases-version-20-landmark-cybersecurity-framework",[],"CyberSecurity Framework 2.0",[29,102,103,104,109,110,115],{},"March 2024: CISA and OMB published the ",[16,105,108],{"href":106,"rel":107},"https://www.cisa.gov/secure-software-attestation-form",[],"Secure Software Development Attestation Form"," and opened a ",[16,111,114],{"href":112,"rel":113},"https://www.cisa.gov/news-events/news/cisa-publishes-repository-software-attestation-and-artifacts",[],"repository"," for collection of the attestations.",[39,117,119],{"id":118},"how-gitlab-has-evolved-with-the-secure-by-design-initiative","How GitLab has evolved with the Secure by Design initiative",[12,121,122],{},"GitLab has also continued to grow in alignment with the Secure by Design initiative over the past year. Here are some examples.",[124,125,127],"h3",{"id":126},"gitlab-signed-the-secure-by-design-pledge","GitLab signed the Secure by Design Pledge",[12,129,130,131,92],{},"GitLab is proud to have signed the CISA ",[16,132,135],{"href":133,"rel":134},"https://www.cisa.gov/securebydesign/pledge",[],"Secure by Design Pledge",[12,137,138],{},"\"The Secure by Design concepts are well-aligned with GitLab's core values. As the most comprehensive AI-powered DevSecOps platform, GitLab offers its unwavering support towards CISA’s efforts to instill a Secure by Design mindset in software manufacturers. GitLab is proud to make the Secure by Design Pledge, and we firmly believe these efforts will help us enable everyone to innovate and succeed on a safe, secure, and trusted DevSecOps platform,\" said GitLab Chief Information Security Officer Josh Lemos.",[124,140,142],{"id":141},"secure-by-default-practices","\"Secure by default\" practices",[12,144,145,146,151,152,157,158,163,164,169],{},"Configuring and securing installations and users can be a challenge. GitLab developed granular user access with ",[16,147,150],{"href":148,"rel":149},"https://docs.gitlab.com/user/custom_roles/",[],"custom user roles"," and ",[16,153,156],{"href":154,"rel":155},"https://docs.gitlab.com/user/custom_roles/abilities/",[],"customizable permissions",". Management of tokens, ",[16,159,162],{"href":160,"rel":161},"https://docs.gitlab.com/user/profile/service_accounts/",[],"API service accounts",", and ",[16,165,168],{"href":166,"rel":167},"https://docs.gitlab.com/administration/credentials_inventory/",[],"credentials"," have been in focus with continuous improvements and more rigorous authentication security capabilities throughout the year.",[124,171,173],{"id":172},"secure-software-development-practices","Secure software development practices",[12,175,176],{},"With every release, GitLab has incrementally enhanced scanning accuracy, coverage, and capabilities across our entire suite of security analyzers.",[47,178,179,188,196,204],{},[29,180,181,182,187],{},"Some ",[16,183,186],{"href":184,"rel":185},"https://docs.gitlab.com/user/application_security/#gitlab-workflow-extension-for-vs-code",[],"scan results are presented in developer context"," (like the IDE) simplify workflows and shift security further left.",[29,189,190,195],{},[16,191,194],{"href":192,"rel":193},"https://docs.gitlab.com/ci/pipelines/",[],"CI/CD pipeline"," capabilities, which have been expanded and simplified, ensure better functionality while also bolstering security and compliance with enforcement and policies.",[29,197,198,203],{},[16,199,202],{"href":200,"rel":201},"https://docs.gitlab.com/user/application_security/vulnerabilities/",[],"Vulnerability management"," provides better views at scale, improved filtering, and more options to take action against vulnerability findings.",[29,205,206,211],{},[16,207,210],{"href":208,"rel":209},"https://docs.gitlab.com/ci/yaml/signing_examples/",[],"Artifact attestations"," provide a trustworthy authentication of each software artifact.",[124,213,215],{"id":214},"secure-business-practices","Secure business practices",[12,217,218,219,163,224,92],{},"Each GitLab release demonstrated increased focus on compliance. Enhanced auditing and event streaming provide accountability across the entire SDLC. Compliance teams are now better equipped to proactively align to requirements, thanks to increased policy management, workflow automation, visibility via ",[16,220,223],{"href":221,"rel":222},"https://docs.gitlab.com/user/compliance/compliance_center/",[],"compliance reporting",[16,225,228],{"href":226,"rel":227},"https://docs.gitlab.com/user/compliance/compliance_center/#export-compliance-standards-adherence-report-for-projects-in-a-group",[],"exportability of data",[39,230,232],{"id":231},"gitlabs-secure-by-design-features","GitLab's Secure by Design features",[12,234,235],{},"Here are some of the features and capabilities that align with Secure by Design.",[124,237,239],{"id":238},"sboms","SBOMs",[12,241,242,243,248],{},"GitLab’s dynamic ",[16,244,247],{"href":245,"rel":246},"https://about.gitlab.com/blog/the-ultimate-guide-to-sboms/",[],"software bill of materials"," focus improved SBOM generation while adding third-party SBOM intake capabilities. This also led to the ability to combine SBOMs, as well as to provide full attestation for standardized SBOM artifacts. Enhancements such as cross-project dependency visibility as well as dependency graphs enabled a better view of SBOM risk at scale. Continuous vulnerability scanning for SBOMs was also added during the past year, providing continuous insights for emergent risks for projects that are not under continuous development – no CI/CD pipeline required.",[124,250,202],{"id":251},"vulnerability-management",[12,253,254,255,260,261,266,267,272],{},"Notable improvements can be seen in vulnerability management as GitLab product updates increased visibility to vulnerabilities at scale, added flexibility to ",[16,256,259],{"href":257,"rel":258},"https://docs.gitlab.com/user/application_security/vulnerability_report/#group-vulnerabilities",[],"filtering",", and added ",[16,262,265],{"href":263,"rel":264},"https://docs.gitlab.com/user/application_security/vulnerabilities/#vulnerability-dismissal-reasons",[],"remediation detail"," options. With ",[16,268,271],{"href":269,"rel":270},"https://about.gitlab.com/gitlab-duo-agent-platform/",[],"GitLab Duo",", our AI-powered suite of features, AI-assisted vulnerability remediation is taking a dramatic step forward.",[124,274,276],{"id":275},"ai-powered-workflows","AI-powered workflows",[12,278,279,280,285],{},"Speaking of AI, we deployed many ",[16,281,284],{"href":282,"rel":283},"https://about.gitlab.com/gitlab-duo-agent-platform/#features",[],"GitLab Duo features"," during the past year that can help expedite Secure by Design execution, including:",[26,287,288,291,294,297,300,303],{},[29,289,290],{},"Code Suggestions - Use natural language processing to generate new code.",[29,292,293],{},"Code Explanation - Discover what that uncommented code does in order to  properly maintain code bases and provide contextually aware product updates.",[29,295,296],{},"Code Refactoring - Refactor legacy code bases into new libraries, functions, or memory-safe languages.",[29,298,299],{},"Vulnerability Explanation - Understand the impact of a vulnerability and why it is creating risk to enable more accurate and thorough remediation.",[29,301,302],{},"Vulnerability Resolution - Automatically resolve vulnerabilities to save significant amounts of time.",[29,304,305],{},"Root Cause Analysis - Determine the root cause for a pipeline failure and failed CI/CD build.",[124,307,309],{"id":308},"radical-transparency","Radical transparency",[12,311,312,313,318,319,324,325,330],{},"GitLab continues to embrace its Transparency value by creating the ",[16,314,317],{"href":315,"rel":316},"https://trust.gitlab.com/",[],"GitLab Trust Center"," and the ",[16,320,323],{"href":321,"rel":322},"https://about.gitlab.com/ai-transparency-center/",[],"GitLab AI Transparency Center",". These public-facing pages provide radical transparency to GitLab's values, ethics, feature details, and compliance statements – including a ",[16,326,329],{"href":327,"rel":328},"https://csrc.nist.gov/projects/ssdf",[],"NIST Secure Software Development Framework"," self-attestation letter.",[39,332,334],{"id":333},"whats-next","What's next?",[12,336,337],{},"As Secure by Design enters its second year, we look forward to additional guidance and initiatives from CISA and other government agencies that will provide users around the world with more securely developed software.",[339,340,341],"blockquote",{},[12,342,343,344,92],{},"Want to test-drive GitLab's security features? ",[16,345,348],{"href":346,"rel":347},"https://about.gitlab.com/free-trial/devsecops/",[],"Try GitLab Ultimate for free",{"title":350,"searchDepth":351,"depth":351,"links":352},"",2,[353,354,361,367],{"id":41,"depth":351,"text":42},{"id":118,"depth":351,"text":119,"children":355},[356,358,359,360],{"id":126,"depth":357,"text":127},3,{"id":141,"depth":357,"text":142},{"id":172,"depth":357,"text":173},{"id":214,"depth":357,"text":215},{"id":231,"depth":351,"text":232,"children":362},[363,364,365,366],{"id":238,"depth":357,"text":239},{"id":251,"depth":357,"text":202},{"id":275,"depth":357,"text":276},{"id":308,"depth":357,"text":309},{"id":333,"depth":351,"text":334},"security","2024-04-30","The U.S. government's initiative to ensure greater security in software products turns one. Find out what GitLab has done to align with this critical effort.","md",null,true,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749664530/Blog/Hero%20Images/AdobeStock_282096522.jpg",{},"/en-us/blog/happy-birthday-secure-by-design",{"title":5,"description":370,"ogTitle":5,"ogDescription":370,"noIndex":378,"ogImage":374,"ogUrl":379,"ogSiteName":380,"ogType":381,"canonicalUrls":379},false,"https://about.gitlab.com/blog/happy-birthday-secure-by-design","https://about.gitlab.com","article","happy-birthday-secure-by-design","en-us/blog/happy-birthday-secure-by-design",[368,385,386,387,388],"DevSecOps platform","DevSecOps","zero trust","public sector","BlogPost","OpNUSX--haBajFvwQay0Fap_jQWhuJFRLztfd4yaFG0",{"logo":392,"freeTrial":397,"sales":402,"login":407,"items":412,"search":738,"minimal":769,"duo":788,"switchNav":797,"pricingDeployment":808},{"config":393},{"href":394,"dataGaName":395,"dataGaLocation":396},"/","gitlab logo","header",{"text":398,"config":399},"Get free trial",{"href":400,"dataGaName":401,"dataGaLocation":396},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":403,"config":404},"Request a demo",{"href":405,"dataGaName":406,"dataGaLocation":396},"/sales/?contact-topic=request-demo","sales",{"text":408,"config":409},"Sign in",{"href":410,"dataGaName":411,"dataGaLocation":396},"https://gitlab.com/users/sign_in/","sign in",[413,442,541,546,660,716],{"text":414,"config":415,"menu":417},"Platform",{"dataNavLevelOne":416},"platform",{"type":418,"columns":419},"cards",[420,426,434],{"title":414,"description":421,"link":422},"The intelligent orchestration platform for DevSecOps",{"text":423,"config":424},"Explore our Platform",{"href":425,"dataGaName":416,"dataGaLocation":396},"/platform/",{"title":427,"description":428,"link":429},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":430,"config":431},"Meet GitLab Duo",{"href":432,"dataGaName":433,"dataGaLocation":396},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":435,"description":436,"link":437},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":438,"config":439},"Learn more",{"href":440,"dataGaName":441,"dataGaLocation":396},"/why-gitlab/","why gitlab",{"text":443,"left":373,"config":444,"menu":446},"Product",{"dataNavLevelOne":445},"solutions",{"type":447,"link":448,"columns":452,"feature":521},"lists",{"text":449,"config":450},"View all Solutions",{"href":451,"dataGaName":445,"dataGaLocation":396},"/solutions/",[453,477,500],{"title":454,"description":455,"link":456,"items":461},"Automation","CI/CD and automation to accelerate deployment",{"config":457},{"icon":458,"href":459,"dataGaName":460,"dataGaLocation":396},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[462,466,469,473],{"text":463,"config":464},"CI/CD",{"href":465,"dataGaLocation":396,"dataGaName":463},"/solutions/continuous-integration/",{"text":427,"config":467},{"href":432,"dataGaLocation":396,"dataGaName":468},"gitlab duo agent platform - product menu",{"text":470,"config":471},"Source Code Management",{"href":472,"dataGaLocation":396,"dataGaName":470},"/solutions/source-code-management/",{"text":474,"config":475},"Automated Software Delivery",{"href":459,"dataGaLocation":396,"dataGaName":476},"Automated software delivery",{"title":478,"description":479,"link":480,"items":485},"Security","Deliver code faster without compromising security",{"config":481},{"href":482,"dataGaName":483,"dataGaLocation":396,"icon":484},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[486,490,495],{"text":487,"config":488},"Application Security Testing",{"href":482,"dataGaName":489,"dataGaLocation":396},"Application security testing",{"text":491,"config":492},"Software Supply Chain Security",{"href":493,"dataGaLocation":396,"dataGaName":494},"/solutions/supply-chain/","Software supply chain security",{"text":496,"config":497},"Software Compliance",{"href":498,"dataGaName":499,"dataGaLocation":396},"/solutions/software-compliance/","software compliance",{"title":501,"link":502,"items":507},"Measurement",{"config":503},{"icon":504,"href":505,"dataGaName":506,"dataGaLocation":396},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[508,512,516],{"text":509,"config":510},"Visibility & Measurement",{"href":505,"dataGaLocation":396,"dataGaName":511},"Visibility and Measurement",{"text":513,"config":514},"Value Stream Management",{"href":515,"dataGaLocation":396,"dataGaName":513},"/solutions/value-stream-management/",{"text":517,"config":518},"Analytics & Insights",{"href":519,"dataGaLocation":396,"dataGaName":520},"/solutions/analytics-and-insights/","Analytics and insights",{"title":522,"type":447,"items":523},"GitLab for",[524,530,536],{"text":525,"config":526},"Enterprise",{"icon":527,"href":528,"dataGaLocation":396,"dataGaName":529},"Building","/enterprise/","enterprise",{"text":531,"config":532},"Small Business",{"icon":533,"href":534,"dataGaLocation":396,"dataGaName":535},"Work","/small-business/","small business",{"text":537,"config":538},"Public Sector",{"icon":539,"href":540,"dataGaLocation":396,"dataGaName":388},"Organization","/solutions/public-sector/",{"text":542,"config":543},"Pricing",{"href":544,"dataGaName":545,"dataGaLocation":396,"dataNavLevelOne":545},"/pricing/","pricing",{"text":547,"config":548,"menu":550},"Resources",{"dataNavLevelOne":549},"resources",{"type":447,"link":551,"columns":555,"feature":649},{"text":552,"config":553},"View all resources",{"href":554,"dataGaName":549,"dataGaLocation":396},"/resources/",[556,589,616],{"title":557,"items":558},"Getting started",[559,564,569,574,579,584],{"text":560,"config":561},"Install",{"href":562,"dataGaName":563,"dataGaLocation":396},"/install/","install",{"text":565,"config":566},"Quick start guides",{"href":567,"dataGaName":568,"dataGaLocation":396},"/get-started/","quick setup checklists",{"text":570,"config":571},"Learn",{"href":572,"dataGaLocation":396,"dataGaName":573},"https://university.gitlab.com/","learn",{"text":575,"config":576},"Product documentation",{"href":577,"dataGaName":578,"dataGaLocation":396},"https://docs.gitlab.com/","product documentation",{"text":580,"config":581},"Best practice videos",{"href":582,"dataGaName":583,"dataGaLocation":396},"/getting-started-videos/","best practice videos",{"text":585,"config":586},"Integrations",{"href":587,"dataGaName":588,"dataGaLocation":396},"/integrations/","integrations",{"title":590,"items":591},"Discover",[592,597,602,607,611],{"text":593,"config":594},"Customer success stories",{"href":595,"dataGaName":596,"dataGaLocation":396},"/customers/","customer success stories",{"text":598,"config":599},"Blog",{"href":600,"dataGaName":601,"dataGaLocation":396},"/blog/","blog",{"text":603,"config":604},"Demo Hub",{"href":605,"dataGaName":606,"dataGaLocation":396},"/demo-hub/","demo hub",{"text":608,"config":609},"The Source",{"href":610,"dataGaName":601,"dataGaLocation":396},"/the-source/",{"text":612,"config":613},"Remote",{"href":614,"dataGaName":615,"dataGaLocation":396},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":617,"items":618},"Connect",[619,624,629,634,639,644],{"text":620,"config":621},"GitLab Services",{"href":622,"dataGaName":623,"dataGaLocation":396},"/services/","services",{"text":625,"config":626},"Contribute",{"href":627,"dataGaName":628,"dataGaLocation":396},"https://contributors.gitlab.com","contribute",{"text":630,"config":631},"Community",{"href":632,"dataGaName":633,"dataGaLocation":396},"/community/","community",{"text":635,"config":636},"Forum",{"href":637,"dataGaName":638,"dataGaLocation":396},"https://forum.gitlab.com/","forum",{"text":640,"config":641},"Events",{"href":642,"dataGaName":643,"dataGaLocation":396},"/events/","events",{"text":645,"config":646},"Partners",{"href":647,"dataGaName":648,"dataGaLocation":396},"/partners/","partners",{"config":650,"title":653,"text":654,"link":655},{"background":651,"textColor":652},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":656,"config":657},"Read the latest",{"href":658,"dataGaName":659,"dataGaLocation":396},"/whats-new/","whats new",{"text":661,"config":662,"menu":664},"Company",{"dataNavLevelOne":663},"company",{"type":447,"columns":665},[666],{"items":667},[668,673,679,681,686,691,696,701,706,711],{"text":669,"config":670},"About",{"href":671,"dataGaName":672,"dataGaLocation":396},"/company/","about",{"text":674,"config":675,"footerGa":678},"Jobs",{"href":676,"dataGaName":677,"dataGaLocation":396},"/jobs/","jobs",{"dataGaName":677},{"text":640,"config":680},{"href":642,"dataGaName":643,"dataGaLocation":396},{"text":682,"config":683},"Leadership",{"href":684,"dataGaName":685,"dataGaLocation":396},"/company/team/e-group/","leadership",{"text":687,"config":688},"Handbook",{"href":689,"dataGaName":690,"dataGaLocation":396},"https://handbook.gitlab.com/","handbook",{"text":692,"config":693},"Investor relations",{"href":694,"dataGaName":695,"dataGaLocation":396},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":697,"config":698},"Trust Center",{"href":699,"dataGaName":700,"dataGaLocation":396},"/security/","trust center",{"text":702,"config":703},"AI Transparency Center",{"href":704,"dataGaName":705,"dataGaLocation":396},"/ai-transparency-center/","ai transparency center",{"text":707,"config":708},"Newsletter",{"href":709,"dataGaName":710,"dataGaLocation":396},"/company/contact/#contact-forms","newsletter",{"text":712,"config":713},"Press",{"href":714,"dataGaName":715,"dataGaLocation":396},"/press/","press",{"text":717,"config":718,"menu":719},"Contact us",{"dataNavLevelOne":663},{"type":447,"columns":720},[721],{"items":722},[723,728,733],{"text":724,"config":725},"Talk to sales",{"href":726,"dataGaName":727,"dataGaLocation":396},"/sales/","talk to sales",{"text":729,"config":730},"Support portal",{"href":731,"dataGaName":732,"dataGaLocation":396},"https://support.gitlab.com/hc/en-us","support portal",{"text":734,"config":735},"Customer portal",{"href":736,"dataGaName":737,"dataGaLocation":396},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":739,"login":740,"suggestions":747},"Close",{"text":741,"link":742},"To search repositories and projects, login to",{"text":743,"config":744},"gitlab.com",{"href":410,"dataGaName":745,"dataGaLocation":746},"search login","search",{"text":748,"default":749},"Suggestions",[750,752,756,758,762,766],{"text":427,"config":751},{"href":432,"dataGaName":427,"dataGaLocation":746},{"text":753,"config":754},"Code Suggestions (AI)",{"href":755,"dataGaName":753,"dataGaLocation":746},"/solutions/code-suggestions/",{"text":463,"config":757},{"href":465,"dataGaName":463,"dataGaLocation":746},{"text":759,"config":760},"GitLab on AWS",{"href":761,"dataGaName":759,"dataGaLocation":746},"/partners/technology-partners/aws/",{"text":763,"config":764},"GitLab on Google Cloud",{"href":765,"dataGaName":763,"dataGaLocation":746},"/partners/technology-partners/google-cloud-platform/",{"text":767,"config":768},"Why GitLab?",{"href":440,"dataGaName":767,"dataGaLocation":746},{"freeTrial":770,"mobileIcon":775,"desktopIcon":780,"secondaryButton":783},{"text":771,"config":772},"Start free trial",{"href":773,"dataGaName":401,"dataGaLocation":774},"https://gitlab.com/-/trials/new/","nav",{"altText":776,"config":777},"Gitlab Icon",{"src":778,"dataGaName":779,"dataGaLocation":774},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":776,"config":781},{"src":782,"dataGaName":779,"dataGaLocation":774},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":784,"config":785},"Get Started",{"href":786,"dataGaName":787,"dataGaLocation":774},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":789,"mobileIcon":793,"desktopIcon":795},{"text":790,"config":791},"Learn more about GitLab Duo",{"href":432,"dataGaName":792,"dataGaLocation":774},"gitlab duo",{"altText":776,"config":794},{"src":778,"dataGaName":779,"dataGaLocation":774},{"altText":776,"config":796},{"src":782,"dataGaName":779,"dataGaLocation":774},{"button":798,"mobileIcon":803,"desktopIcon":805},{"text":799,"config":800},"/switch",{"href":801,"dataGaName":802,"dataGaLocation":774},"#contact","switch",{"altText":776,"config":804},{"src":778,"dataGaName":779,"dataGaLocation":774},{"altText":776,"config":806},{"src":807,"dataGaName":779,"dataGaLocation":774},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":809,"mobileIcon":814,"desktopIcon":816},{"text":810,"config":811},"Back to pricing",{"href":544,"dataGaName":812,"dataGaLocation":774,"icon":813},"back to pricing","GoBack",{"altText":776,"config":815},{"src":778,"dataGaName":779,"dataGaLocation":774},{"altText":776,"config":817},{"src":782,"dataGaName":779,"dataGaLocation":774},{"title":819,"titleMobile":820,"button":821,"config":826},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":438,"config":822},{"href":823,"dataGaName":824,"dataGaLocation":825},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":827,"disabled":378},"release",{"data":829},{"text":830,"source":831,"edit":837,"contribute":842,"config":847,"items":852,"minimal":1060},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":832,"config":833},"View page source",{"href":834,"dataGaName":835,"dataGaLocation":836},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":838,"config":839},"Edit this page",{"href":840,"dataGaName":841,"dataGaLocation":836},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":843,"config":844},"Please contribute",{"href":845,"dataGaName":846,"dataGaLocation":836},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":848,"facebook":849,"youtube":850,"linkedin":851},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[853,900,952,996,1028],{"title":542,"links":854,"subMenu":869},[855,859,864],{"text":856,"config":857},"View plans",{"href":544,"dataGaName":858,"dataGaLocation":836},"view plans",{"text":860,"config":861},"Why Premium?",{"href":862,"dataGaName":863,"dataGaLocation":836},"/pricing/premium/","why premium",{"text":865,"config":866},"Why Ultimate?",{"href":867,"dataGaName":868,"dataGaLocation":836},"/pricing/ultimate/","why ultimate",[870],{"title":871,"links":872},"Contact Us",[873,876,878,880,885,890,895],{"text":874,"config":875},"Contact sales",{"href":726,"dataGaName":406,"dataGaLocation":836},{"text":729,"config":877},{"href":731,"dataGaName":732,"dataGaLocation":836},{"text":734,"config":879},{"href":736,"dataGaName":737,"dataGaLocation":836},{"text":881,"config":882},"Status",{"href":883,"dataGaName":884,"dataGaLocation":836},"https://status.gitlab.com/","status",{"text":886,"config":887},"Terms of use",{"href":888,"dataGaName":889,"dataGaLocation":836},"/terms/","terms of use",{"text":891,"config":892},"Privacy statement",{"href":893,"dataGaName":894,"dataGaLocation":836},"/privacy/","privacy statement",{"text":896,"config":897},"Cookie preferences",{"dataGaName":898,"dataGaLocation":836,"id":899,"isOneTrustButton":373},"cookie preferences","ot-sdk-btn",{"title":443,"links":901,"subMenu":909},[902,905],{"text":385,"config":903},{"href":425,"dataGaName":904,"dataGaLocation":836},"devsecops platform",{"text":906,"config":907},"AI-Assisted Development",{"href":432,"dataGaName":908,"dataGaLocation":836},"ai-assisted development",[910],{"title":911,"links":912},"Topics",[913,918,923,928,933,937,942,947],{"text":914,"config":915},"CICD",{"href":916,"dataGaName":917,"dataGaLocation":836},"/topics/ci-cd/","cicd",{"text":919,"config":920},"GitOps",{"href":921,"dataGaName":922,"dataGaLocation":836},"/topics/gitops/","gitops",{"text":924,"config":925},"DevOps",{"href":926,"dataGaName":927,"dataGaLocation":836},"/topics/devops/","devops",{"text":929,"config":930},"Version Control",{"href":931,"dataGaName":932,"dataGaLocation":836},"/topics/version-control/","version control",{"text":386,"config":934},{"href":935,"dataGaName":936,"dataGaLocation":836},"/topics/devsecops/","devsecops",{"text":938,"config":939},"Cloud Native",{"href":940,"dataGaName":941,"dataGaLocation":836},"/topics/cloud-native/","cloud native",{"text":943,"config":944},"AI for Coding",{"href":945,"dataGaName":946,"dataGaLocation":836},"/topics/devops/ai-for-coding/","ai for coding",{"text":948,"config":949},"Agentic AI",{"href":950,"dataGaName":951,"dataGaLocation":836},"/topics/agentic-ai/","agentic ai",{"title":953,"links":954},"Solutions",[955,957,959,964,968,971,975,978,980,983,986,991],{"text":487,"config":956},{"href":482,"dataGaName":487,"dataGaLocation":836},{"text":476,"config":958},{"href":459,"dataGaName":460,"dataGaLocation":836},{"text":960,"config":961},"Agile development",{"href":962,"dataGaName":963,"dataGaLocation":836},"/solutions/agile-delivery/","agile delivery",{"text":965,"config":966},"SCM",{"href":472,"dataGaName":967,"dataGaLocation":836},"source code management",{"text":914,"config":969},{"href":465,"dataGaName":970,"dataGaLocation":836},"continuous integration & delivery",{"text":972,"config":973},"Value stream management",{"href":515,"dataGaName":974,"dataGaLocation":836},"value stream management",{"text":919,"config":976},{"href":977,"dataGaName":922,"dataGaLocation":836},"/solutions/gitops/",{"text":525,"config":979},{"href":528,"dataGaName":529,"dataGaLocation":836},{"text":981,"config":982},"Small business",{"href":534,"dataGaName":535,"dataGaLocation":836},{"text":984,"config":985},"Public sector",{"href":540,"dataGaName":388,"dataGaLocation":836},{"text":987,"config":988},"Education",{"href":989,"dataGaName":990,"dataGaLocation":836},"/solutions/education/","education",{"text":992,"config":993},"Financial services",{"href":994,"dataGaName":995,"dataGaLocation":836},"/solutions/finance/","financial services",{"title":547,"links":997},[998,1000,1002,1004,1007,1009,1012,1014,1016,1018,1020,1022,1024,1026],{"text":560,"config":999},{"href":562,"dataGaName":563,"dataGaLocation":836},{"text":565,"config":1001},{"href":567,"dataGaName":568,"dataGaLocation":836},{"text":570,"config":1003},{"href":572,"dataGaName":573,"dataGaLocation":836},{"text":575,"config":1005},{"href":577,"dataGaName":1006,"dataGaLocation":836},"docs",{"text":598,"config":1008},{"href":600,"dataGaName":601,"dataGaLocation":836},{"text":1010,"config":1011},"What's new",{"href":658,"dataGaName":659,"dataGaLocation":836},{"text":593,"config":1013},{"href":595,"dataGaName":596,"dataGaLocation":836},{"text":612,"config":1015},{"href":614,"dataGaName":615,"dataGaLocation":836},{"text":620,"config":1017},{"href":622,"dataGaName":623,"dataGaLocation":836},{"text":625,"config":1019},{"href":627,"dataGaName":628,"dataGaLocation":836},{"text":630,"config":1021},{"href":632,"dataGaName":633,"dataGaLocation":836},{"text":635,"config":1023},{"href":637,"dataGaName":638,"dataGaLocation":836},{"text":640,"config":1025},{"href":642,"dataGaName":643,"dataGaLocation":836},{"text":645,"config":1027},{"href":647,"dataGaName":648,"dataGaLocation":836},{"title":661,"links":1029},[1030,1032,1034,1036,1038,1040,1044,1049,1051,1053,1055],{"text":669,"config":1031},{"href":671,"dataGaName":663,"dataGaLocation":836},{"text":674,"config":1033},{"href":676,"dataGaName":677,"dataGaLocation":836},{"text":682,"config":1035},{"href":684,"dataGaName":685,"dataGaLocation":836},{"text":687,"config":1037},{"href":689,"dataGaName":690,"dataGaLocation":836},{"text":692,"config":1039},{"href":694,"dataGaName":695,"dataGaLocation":836},{"text":1041,"config":1042},"Sustainability",{"href":1043,"dataGaName":1041,"dataGaLocation":836},"/sustainability/",{"text":1045,"config":1046},"Diversity, inclusion and belonging (DIB)",{"href":1047,"dataGaName":1048,"dataGaLocation":836},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":697,"config":1050},{"href":699,"dataGaName":700,"dataGaLocation":836},{"text":707,"config":1052},{"href":709,"dataGaName":710,"dataGaLocation":836},{"text":712,"config":1054},{"href":714,"dataGaName":715,"dataGaLocation":836},{"text":1056,"config":1057},"Modern Slavery Transparency Statement",{"href":1058,"dataGaName":1059,"dataGaLocation":836},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1061},[1062,1065,1068],{"text":1063,"config":1064},"Terms",{"href":888,"dataGaName":889,"dataGaLocation":836},{"text":1066,"config":1067},"Cookies",{"dataGaName":898,"dataGaLocation":836,"id":899,"isOneTrustButton":373},{"text":1069,"config":1070},"Privacy",{"href":893,"dataGaName":894,"dataGaLocation":836},[1072],{"id":1073,"title":7,"body":372,"config":1074,"content":1076,"description":372,"extension":1080,"meta":1081,"navigation":373,"path":1082,"seo":1083,"stem":1084,"__hash__":1085},"blogAuthors/en-us/blog/authors/joel-krooswyk.yml",{"template":1075},"BlogAuthor",{"name":7,"config":1077},{"headshot":1078,"ctfId":1079},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749669392/Blog/Author%20Headshots/jkrooswyk-headshot.jpg","jkrooswyk","yml",{},"/en-us/blog/authors/joel-krooswyk",{},"en-us/blog/authors/joel-krooswyk","Vmt-OcBuIzNaY03V97x_r44OqM7iwUNmcaE4pqTlZAg",[1087,1095,1103],{"title":1088,"description":1089,"heroImage":1090,"category":368,"date":1091,"authors":1092,"slug":1094,"externalUrl":372},"How GitLab tracks vulnerabilities through refactors and reformatting","Learn how GitLab's improved Scope+Offset fingerprinting keeps vulnerability tracking stable across comments, blank lines, and reformatting.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[1093],"Julian Thome","improved-scope-offset-fingerprinting",{"title":1096,"description":1097,"heroImage":1090,"category":368,"date":1098,"authors":1099,"slug":1102,"externalUrl":372},"GitLab Secrets Manager adds ESO, Terraform, API support","Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.","2026-08-06",[1100,1101],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1104,"description":1105,"heroImage":1106,"category":368,"date":1107,"authors":1108,"slug":1110,"externalUrl":372},"Secure every commit to production with Claude and GitLab","Claude Security catches vulnerabilities inside a coding session. GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle. ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[1109],"Alisa Ho","claude-security-and-gitlab",{"promotions":1112},[1113,1127,1139,1150],{"id":1114,"categories":1115,"header":1117,"text":1118,"button":1119,"image":1124},"ai-modernization",[1116],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":1120,"config":1121},"Get your AI maturity score",{"href":1122,"dataGaName":1123,"dataGaLocation":601},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":1125},{"src":1126},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1128,"categories":1129,"header":1131,"text":1118,"button":1132,"image":1136},"devops-modernization",[1130,936],"product","Are you just managing tools or shipping innovation?",{"text":1133,"config":1134},"Get your DevOps maturity score",{"href":1135,"dataGaName":1123,"dataGaLocation":601},"/assessments/devops-modernization-assessment/",{"config":1137},{"src":1138},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1140,"categories":1141,"header":1142,"text":1118,"button":1143,"image":1147},"security-modernization",[368],"Are you trading speed for security?",{"text":1144,"config":1145},"Get your security maturity score",{"href":1146,"dataGaName":1123,"dataGaLocation":601},"/assessments/security-modernization-assessment/",{"config":1148},{"src":1149},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1151,"paths":1152,"header":1155,"text":1156,"button":1157,"image":1162},"github-azure-migration",[1153,1154],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":1158,"config":1159},"See how GitLab compares to GitHub",{"href":1160,"dataGaName":1161,"dataGaLocation":601},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1163},{"src":1138},{"header":1165,"blurb":1166,"button":1167,"secondaryButton":1172},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":1168,"config":1169},"Get your free trial",{"href":1170,"dataGaName":401,"dataGaLocation":1171},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":874,"config":1173},{"href":726,"dataGaName":406,"dataGaLocation":1171},1786803761682]