[{"data":1,"prerenderedAt":919},["ShallowReactive",2],{"/blog/introducing-gitlab-advanced-vulnerability-tracking":3,"navigation-en-us":137,"banner-en-us":564,"footer-en-us":574,"blog-post-authors-en-us-Julian Thome":818,"blog-related-posts-en-us-introducing-gitlab-advanced-vulnerability-tracking":832,"blog-promotions-en-us":856,"next-steps-en-us":909},{"id":4,"title":5,"authors":6,"body":8,"category":115,"date":116,"description":117,"extension":118,"externalUrl":119,"faq":119,"featured":120,"heroImage":121,"meta":122,"navigation":123,"path":124,"seo":125,"slug":129,"stem":130,"tags":131,"template":135,"updatedDate":119,"__hash__":136},"blogPosts/en-us/blog/introducing-gitlab-advanced-vulnerability-tracking.md","Introducing GitLab Advanced Vulnerability Tracking",[7],"Julian Thome",{"type":9,"value":10,"toc":111},"minimark",[11,15,31,40,50,59,65,73,88],[12,13,14],"p",{},"DevSecOps streamlines software development by allowing teams to ship features quickly and providing short feedback cycles for customers. These short feedback cycles can be used to monitor the impact of a feature from the time it is shipped and to inform developers and product managers about the success or failure of a given deployment.",[12,16,17,18,24,25,30],{},"GitLab, as an agnostic DevSecOps platform, can act as an integration point for different ",[19,20,23],"a",{"href":21,"rel":22},"https://about.gitlab.com/topics/ci-cd/",[],"CI/CD"," tools that often contribute to user-facing functionality. For example, the ",[19,26,29],{"href":27,"rel":28},"https://docs.gitlab.com/user/application_security/vulnerability_report/",[],"vulnerability report",", which displays all detected vulnerabilities, is visible as a single functionality, but the data in the report may come from a number of different tools in various pipelines.",[12,32,33,34,39],{},"In a heterogeneous Static Application Security Testing (",[19,35,38],{"href":36,"rel":37},"https://docs.gitlab.com/user/application_security/sast/",[],"SAST",") setup we find two potential sources of vulnerability deduplication:",[41,42,43,47],"ol",{},[44,45,46],"li",{},"Code volatility refers to the reintroduction of vulnerabilities in a constantly changing code base.",[44,48,49],{},"Double reporting refers to duplication introduced by multiple tools that are reporting the same vulnerability.",[12,51,52,53,58],{},"GitLab addresses these two sources of duplication by means of the ",[19,54,57],{"href":55,"rel":56},"https://docs.gitlab.com/user/application_security/sast/#advanced-vulnerability-tracking",[],"Advanced Vulnerability Tracking"," feature, which identifies and deduplicates vulnerabilities in a constantly changing code base.",[12,60,61,64],{},[19,62,57],{"href":55,"rel":63},[]," leverages contextual information provided by generated syntax-trees to scope vulnerabilities and generates location fingerprints for vulnerabilities that are less fragile across code changes in comparison to other tracking methods.",[12,66,67,68,72],{},"In a recent study, we demonstrated that our vulnerability tracking approach was 30% more effective than traditional, line-based vulnerability tracking where ",[69,70,71],"code",{},"\u003Cfile, line number>"," are used to fingerprint vulnerabilities. This means that advanced vulnerability tracking reduces the manual effort of auditing vulnerabilities by 30%. In addition, our study suggested that the positive effect of our vulnerability tracking method increases over time.",[12,74,75,76,81,82,87],{},"The preprint of our study \"",[19,77,80],{"href":78,"rel":79},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1781054360/ddalqemesepnforop58c.pdf",[],"A scalable, effective and simple Vulnerability Tracking approach for heterogeneous SAST setups based on Scope+Offset","\" will be presented at the ",[19,83,86],{"href":84,"rel":85},"https://conf.researchr.org/home/icse-2025",[],"47th International Conference on Software Engineering (Software Engineering in Practice Track) 2025",".",[12,89,90],{},[91,92,93,98,99,104,105,110],"em",{},[19,94,97],{"href":95,"rel":96},"https://gitlab.com/theoretick",[],"Lucas Charles",", ",[19,100,103],{"href":101,"rel":102},"https://gitlab.com/jleasure",[],"Jason Leasure",", and ",[19,106,109],{"href":107,"rel":108},"https://gitlab.com/hyan3",[],"Hua Yan"," contributed to this article and study.",{"title":112,"searchDepth":113,"depth":113,"links":114},"",2,[],"security","2025-01-21","Learn how this security feature improves the efficiency of vulnerability management by reducing futile auditing time (includes data from a new study).","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749664844/Blog/Hero%20Images/AdobeStock_941867776.jpg",{},true,"/en-us/blog/introducing-gitlab-advanced-vulnerability-tracking",{"title":5,"description":117,"ogTitle":5,"ogDescription":117,"noIndex":120,"ogImage":121,"ogUrl":126,"ogSiteName":127,"ogType":128,"canonicalUrls":126},"https://about.gitlab.com/blog/introducing-gitlab-advanced-vulnerability-tracking","https://about.gitlab.com","article","introducing-gitlab-advanced-vulnerability-tracking","en-us/blog/introducing-gitlab-advanced-vulnerability-tracking",[115,132,133,134],"security research","features","DevSecOps platform","BlogPost","im_CGmkS7zapK6uqW-5daQ07UgSiRlTcX6MPap3kfDc",{"logo":138,"freeTrial":143,"sales":148,"login":153,"items":158,"search":484,"minimal":515,"duo":534,"switchNav":543,"pricingDeployment":554},{"config":139},{"href":140,"dataGaName":141,"dataGaLocation":142},"/","gitlab logo","header",{"text":144,"config":145},"Get free trial",{"href":146,"dataGaName":147,"dataGaLocation":142},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":149,"config":150},"Request a demo",{"href":151,"dataGaName":152,"dataGaLocation":142},"/sales/?contact-topic=request-demo","sales",{"text":154,"config":155},"Sign in",{"href":156,"dataGaName":157,"dataGaLocation":142},"https://gitlab.com/users/sign_in/","sign in",[159,188,287,292,406,462],{"text":160,"config":161,"menu":163},"Platform",{"dataNavLevelOne":162},"platform",{"type":164,"columns":165},"cards",[166,172,180],{"title":160,"description":167,"link":168},"The intelligent orchestration platform for DevSecOps",{"text":169,"config":170},"Explore our Platform",{"href":171,"dataGaName":162,"dataGaLocation":142},"/platform/",{"title":173,"description":174,"link":175},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":176,"config":177},"Meet GitLab Duo",{"href":178,"dataGaName":179,"dataGaLocation":142},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":181,"description":182,"link":183},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":184,"config":185},"Learn more",{"href":186,"dataGaName":187,"dataGaLocation":142},"/why-gitlab/","why gitlab",{"text":189,"left":123,"config":190,"menu":192},"Product",{"dataNavLevelOne":191},"solutions",{"type":193,"link":194,"columns":198,"feature":266},"lists",{"text":195,"config":196},"View all Solutions",{"href":197,"dataGaName":191,"dataGaLocation":142},"/solutions/",[199,222,245],{"title":200,"description":201,"link":202,"items":207},"Automation","CI/CD and automation to accelerate deployment",{"config":203},{"icon":204,"href":205,"dataGaName":206,"dataGaLocation":142},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[208,211,214,218],{"text":23,"config":209},{"href":210,"dataGaLocation":142,"dataGaName":23},"/solutions/continuous-integration/",{"text":173,"config":212},{"href":178,"dataGaLocation":142,"dataGaName":213},"gitlab duo agent platform - product menu",{"text":215,"config":216},"Source Code Management",{"href":217,"dataGaLocation":142,"dataGaName":215},"/solutions/source-code-management/",{"text":219,"config":220},"Automated Software Delivery",{"href":205,"dataGaLocation":142,"dataGaName":221},"Automated software delivery",{"title":223,"description":224,"link":225,"items":230},"Security","Deliver code faster without compromising security",{"config":226},{"href":227,"dataGaName":228,"dataGaLocation":142,"icon":229},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[231,235,240],{"text":232,"config":233},"Application Security Testing",{"href":227,"dataGaName":234,"dataGaLocation":142},"Application security testing",{"text":236,"config":237},"Software Supply Chain Security",{"href":238,"dataGaLocation":142,"dataGaName":239},"/solutions/supply-chain/","Software supply chain security",{"text":241,"config":242},"Software Compliance",{"href":243,"dataGaName":244,"dataGaLocation":142},"/solutions/software-compliance/","software compliance",{"title":246,"link":247,"items":252},"Measurement",{"config":248},{"icon":249,"href":250,"dataGaName":251,"dataGaLocation":142},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[253,257,261],{"text":254,"config":255},"Visibility & Measurement",{"href":250,"dataGaLocation":142,"dataGaName":256},"Visibility and Measurement",{"text":258,"config":259},"Value Stream Management",{"href":260,"dataGaLocation":142,"dataGaName":258},"/solutions/value-stream-management/",{"text":262,"config":263},"Analytics & Insights",{"href":264,"dataGaLocation":142,"dataGaName":265},"/solutions/analytics-and-insights/","Analytics and insights",{"title":267,"type":193,"items":268},"GitLab for",[269,275,281],{"text":270,"config":271},"Enterprise",{"icon":272,"href":273,"dataGaLocation":142,"dataGaName":274},"Building","/enterprise/","enterprise",{"text":276,"config":277},"Small Business",{"icon":278,"href":279,"dataGaLocation":142,"dataGaName":280},"Work","/small-business/","small business",{"text":282,"config":283},"Public Sector",{"icon":284,"href":285,"dataGaLocation":142,"dataGaName":286},"Organization","/solutions/public-sector/","public sector",{"text":288,"config":289},"Pricing",{"href":290,"dataGaName":291,"dataGaLocation":142,"dataNavLevelOne":291},"/pricing/","pricing",{"text":293,"config":294,"menu":296},"Resources",{"dataNavLevelOne":295},"resources",{"type":193,"link":297,"columns":301,"feature":395},{"text":298,"config":299},"View all resources",{"href":300,"dataGaName":295,"dataGaLocation":142},"/resources/",[302,335,362],{"title":303,"items":304},"Getting started",[305,310,315,320,325,330],{"text":306,"config":307},"Install",{"href":308,"dataGaName":309,"dataGaLocation":142},"/install/","install",{"text":311,"config":312},"Quick start guides",{"href":313,"dataGaName":314,"dataGaLocation":142},"/get-started/","quick setup checklists",{"text":316,"config":317},"Learn",{"href":318,"dataGaLocation":142,"dataGaName":319},"https://university.gitlab.com/","learn",{"text":321,"config":322},"Product documentation",{"href":323,"dataGaName":324,"dataGaLocation":142},"https://docs.gitlab.com/","product documentation",{"text":326,"config":327},"Best practice videos",{"href":328,"dataGaName":329,"dataGaLocation":142},"/getting-started-videos/","best practice videos",{"text":331,"config":332},"Integrations",{"href":333,"dataGaName":334,"dataGaLocation":142},"/integrations/","integrations",{"title":336,"items":337},"Discover",[338,343,348,353,357],{"text":339,"config":340},"Customer success stories",{"href":341,"dataGaName":342,"dataGaLocation":142},"/customers/","customer success stories",{"text":344,"config":345},"Blog",{"href":346,"dataGaName":347,"dataGaLocation":142},"/blog/","blog",{"text":349,"config":350},"Demo Hub",{"href":351,"dataGaName":352,"dataGaLocation":142},"/demo-hub/","demo hub",{"text":354,"config":355},"The Source",{"href":356,"dataGaName":347,"dataGaLocation":142},"/the-source/",{"text":358,"config":359},"Remote",{"href":360,"dataGaName":361,"dataGaLocation":142},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":363,"items":364},"Connect",[365,370,375,380,385,390],{"text":366,"config":367},"GitLab Services",{"href":368,"dataGaName":369,"dataGaLocation":142},"/services/","services",{"text":371,"config":372},"Contribute",{"href":373,"dataGaName":374,"dataGaLocation":142},"https://contributors.gitlab.com","contribute",{"text":376,"config":377},"Community",{"href":378,"dataGaName":379,"dataGaLocation":142},"/community/","community",{"text":381,"config":382},"Forum",{"href":383,"dataGaName":384,"dataGaLocation":142},"https://forum.gitlab.com/","forum",{"text":386,"config":387},"Events",{"href":388,"dataGaName":389,"dataGaLocation":142},"/events/","events",{"text":391,"config":392},"Partners",{"href":393,"dataGaName":394,"dataGaLocation":142},"/partners/","partners",{"config":396,"title":399,"text":400,"link":401},{"background":397,"textColor":398},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":402,"config":403},"Read the latest",{"href":404,"dataGaName":405,"dataGaLocation":142},"/whats-new/","whats new",{"text":407,"config":408,"menu":410},"Company",{"dataNavLevelOne":409},"company",{"type":193,"columns":411},[412],{"items":413},[414,419,425,427,432,437,442,447,452,457],{"text":415,"config":416},"About",{"href":417,"dataGaName":418,"dataGaLocation":142},"/company/","about",{"text":420,"config":421,"footerGa":424},"Jobs",{"href":422,"dataGaName":423,"dataGaLocation":142},"/jobs/","jobs",{"dataGaName":423},{"text":386,"config":426},{"href":388,"dataGaName":389,"dataGaLocation":142},{"text":428,"config":429},"Leadership",{"href":430,"dataGaName":431,"dataGaLocation":142},"/company/team/e-group/","leadership",{"text":433,"config":434},"Handbook",{"href":435,"dataGaName":436,"dataGaLocation":142},"https://handbook.gitlab.com/","handbook",{"text":438,"config":439},"Investor relations",{"href":440,"dataGaName":441,"dataGaLocation":142},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":443,"config":444},"Trust Center",{"href":445,"dataGaName":446,"dataGaLocation":142},"/security/","trust center",{"text":448,"config":449},"AI Transparency Center",{"href":450,"dataGaName":451,"dataGaLocation":142},"/ai-transparency-center/","ai transparency center",{"text":453,"config":454},"Newsletter",{"href":455,"dataGaName":456,"dataGaLocation":142},"/company/contact/#contact-forms","newsletter",{"text":458,"config":459},"Press",{"href":460,"dataGaName":461,"dataGaLocation":142},"/press/","press",{"text":463,"config":464,"menu":465},"Contact us",{"dataNavLevelOne":409},{"type":193,"columns":466},[467],{"items":468},[469,474,479],{"text":470,"config":471},"Talk to sales",{"href":472,"dataGaName":473,"dataGaLocation":142},"/sales/","talk to sales",{"text":475,"config":476},"Support portal",{"href":477,"dataGaName":478,"dataGaLocation":142},"https://support.gitlab.com/hc/en-us","support portal",{"text":480,"config":481},"Customer portal",{"href":482,"dataGaName":483,"dataGaLocation":142},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":485,"login":486,"suggestions":493},"Close",{"text":487,"link":488},"To search repositories and projects, login to",{"text":489,"config":490},"gitlab.com",{"href":156,"dataGaName":491,"dataGaLocation":492},"search login","search",{"text":494,"default":495},"Suggestions",[496,498,502,504,508,512],{"text":173,"config":497},{"href":178,"dataGaName":173,"dataGaLocation":492},{"text":499,"config":500},"Code Suggestions (AI)",{"href":501,"dataGaName":499,"dataGaLocation":492},"/solutions/code-suggestions/",{"text":23,"config":503},{"href":210,"dataGaName":23,"dataGaLocation":492},{"text":505,"config":506},"GitLab on AWS",{"href":507,"dataGaName":505,"dataGaLocation":492},"/partners/technology-partners/aws/",{"text":509,"config":510},"GitLab on Google Cloud",{"href":511,"dataGaName":509,"dataGaLocation":492},"/partners/technology-partners/google-cloud-platform/",{"text":513,"config":514},"Why GitLab?",{"href":186,"dataGaName":513,"dataGaLocation":492},{"freeTrial":516,"mobileIcon":521,"desktopIcon":526,"secondaryButton":529},{"text":517,"config":518},"Start free trial",{"href":519,"dataGaName":147,"dataGaLocation":520},"https://gitlab.com/-/trials/new/","nav",{"altText":522,"config":523},"Gitlab Icon",{"src":524,"dataGaName":525,"dataGaLocation":520},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":522,"config":527},{"src":528,"dataGaName":525,"dataGaLocation":520},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":530,"config":531},"Get Started",{"href":532,"dataGaName":533,"dataGaLocation":520},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":535,"mobileIcon":539,"desktopIcon":541},{"text":536,"config":537},"Learn more about GitLab Duo",{"href":178,"dataGaName":538,"dataGaLocation":520},"gitlab duo",{"altText":522,"config":540},{"src":524,"dataGaName":525,"dataGaLocation":520},{"altText":522,"config":542},{"src":528,"dataGaName":525,"dataGaLocation":520},{"button":544,"mobileIcon":549,"desktopIcon":551},{"text":545,"config":546},"/switch",{"href":547,"dataGaName":548,"dataGaLocation":520},"#contact","switch",{"altText":522,"config":550},{"src":524,"dataGaName":525,"dataGaLocation":520},{"altText":522,"config":552},{"src":553,"dataGaName":525,"dataGaLocation":520},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":555,"mobileIcon":560,"desktopIcon":562},{"text":556,"config":557},"Back to pricing",{"href":290,"dataGaName":558,"dataGaLocation":520,"icon":559},"back to pricing","GoBack",{"altText":522,"config":561},{"src":524,"dataGaName":525,"dataGaLocation":520},{"altText":522,"config":563},{"src":528,"dataGaName":525,"dataGaLocation":520},{"title":565,"titleMobile":566,"button":567,"config":572},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":184,"config":568},{"href":569,"dataGaName":570,"dataGaLocation":571},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":573,"disabled":120},"release",{"data":575},{"text":576,"source":577,"edit":583,"contribute":588,"config":593,"items":598,"minimal":807},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":578,"config":579},"View page source",{"href":580,"dataGaName":581,"dataGaLocation":582},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":584,"config":585},"Edit this page",{"href":586,"dataGaName":587,"dataGaLocation":582},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":589,"config":590},"Please contribute",{"href":591,"dataGaName":592,"dataGaLocation":582},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":594,"facebook":595,"youtube":596,"linkedin":597},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[599,646,699,743,775],{"title":288,"links":600,"subMenu":615},[601,605,610],{"text":602,"config":603},"View plans",{"href":290,"dataGaName":604,"dataGaLocation":582},"view plans",{"text":606,"config":607},"Why Premium?",{"href":608,"dataGaName":609,"dataGaLocation":582},"/pricing/premium/","why premium",{"text":611,"config":612},"Why Ultimate?",{"href":613,"dataGaName":614,"dataGaLocation":582},"/pricing/ultimate/","why ultimate",[616],{"title":617,"links":618},"Contact Us",[619,622,624,626,631,636,641],{"text":620,"config":621},"Contact sales",{"href":472,"dataGaName":152,"dataGaLocation":582},{"text":475,"config":623},{"href":477,"dataGaName":478,"dataGaLocation":582},{"text":480,"config":625},{"href":482,"dataGaName":483,"dataGaLocation":582},{"text":627,"config":628},"Status",{"href":629,"dataGaName":630,"dataGaLocation":582},"https://status.gitlab.com/","status",{"text":632,"config":633},"Terms of use",{"href":634,"dataGaName":635,"dataGaLocation":582},"/terms/","terms of use",{"text":637,"config":638},"Privacy statement",{"href":639,"dataGaName":640,"dataGaLocation":582},"/privacy/","privacy statement",{"text":642,"config":643},"Cookie preferences",{"dataGaName":644,"dataGaLocation":582,"id":645,"isOneTrustButton":123},"cookie preferences","ot-sdk-btn",{"title":189,"links":647,"subMenu":655},[648,651],{"text":134,"config":649},{"href":171,"dataGaName":650,"dataGaLocation":582},"devsecops platform",{"text":652,"config":653},"AI-Assisted Development",{"href":178,"dataGaName":654,"dataGaLocation":582},"ai-assisted development",[656],{"title":657,"links":658},"Topics",[659,664,669,674,679,684,689,694],{"text":660,"config":661},"CICD",{"href":662,"dataGaName":663,"dataGaLocation":582},"/topics/ci-cd/","cicd",{"text":665,"config":666},"GitOps",{"href":667,"dataGaName":668,"dataGaLocation":582},"/topics/gitops/","gitops",{"text":670,"config":671},"DevOps",{"href":672,"dataGaName":673,"dataGaLocation":582},"/topics/devops/","devops",{"text":675,"config":676},"Version Control",{"href":677,"dataGaName":678,"dataGaLocation":582},"/topics/version-control/","version control",{"text":680,"config":681},"DevSecOps",{"href":682,"dataGaName":683,"dataGaLocation":582},"/topics/devsecops/","devsecops",{"text":685,"config":686},"Cloud Native",{"href":687,"dataGaName":688,"dataGaLocation":582},"/topics/cloud-native/","cloud native",{"text":690,"config":691},"AI for Coding",{"href":692,"dataGaName":693,"dataGaLocation":582},"/topics/devops/ai-for-coding/","ai for coding",{"text":695,"config":696},"Agentic AI",{"href":697,"dataGaName":698,"dataGaLocation":582},"/topics/agentic-ai/","agentic ai",{"title":700,"links":701},"Solutions",[702,704,706,711,715,718,722,725,727,730,733,738],{"text":232,"config":703},{"href":227,"dataGaName":232,"dataGaLocation":582},{"text":221,"config":705},{"href":205,"dataGaName":206,"dataGaLocation":582},{"text":707,"config":708},"Agile development",{"href":709,"dataGaName":710,"dataGaLocation":582},"/solutions/agile-delivery/","agile delivery",{"text":712,"config":713},"SCM",{"href":217,"dataGaName":714,"dataGaLocation":582},"source code management",{"text":660,"config":716},{"href":210,"dataGaName":717,"dataGaLocation":582},"continuous integration & delivery",{"text":719,"config":720},"Value stream management",{"href":260,"dataGaName":721,"dataGaLocation":582},"value stream management",{"text":665,"config":723},{"href":724,"dataGaName":668,"dataGaLocation":582},"/solutions/gitops/",{"text":270,"config":726},{"href":273,"dataGaName":274,"dataGaLocation":582},{"text":728,"config":729},"Small business",{"href":279,"dataGaName":280,"dataGaLocation":582},{"text":731,"config":732},"Public sector",{"href":285,"dataGaName":286,"dataGaLocation":582},{"text":734,"config":735},"Education",{"href":736,"dataGaName":737,"dataGaLocation":582},"/solutions/education/","education",{"text":739,"config":740},"Financial services",{"href":741,"dataGaName":742,"dataGaLocation":582},"/solutions/finance/","financial services",{"title":293,"links":744},[745,747,749,751,754,756,759,761,763,765,767,769,771,773],{"text":306,"config":746},{"href":308,"dataGaName":309,"dataGaLocation":582},{"text":311,"config":748},{"href":313,"dataGaName":314,"dataGaLocation":582},{"text":316,"config":750},{"href":318,"dataGaName":319,"dataGaLocation":582},{"text":321,"config":752},{"href":323,"dataGaName":753,"dataGaLocation":582},"docs",{"text":344,"config":755},{"href":346,"dataGaName":347,"dataGaLocation":582},{"text":757,"config":758},"What's new",{"href":404,"dataGaName":405,"dataGaLocation":582},{"text":339,"config":760},{"href":341,"dataGaName":342,"dataGaLocation":582},{"text":358,"config":762},{"href":360,"dataGaName":361,"dataGaLocation":582},{"text":366,"config":764},{"href":368,"dataGaName":369,"dataGaLocation":582},{"text":371,"config":766},{"href":373,"dataGaName":374,"dataGaLocation":582},{"text":376,"config":768},{"href":378,"dataGaName":379,"dataGaLocation":582},{"text":381,"config":770},{"href":383,"dataGaName":384,"dataGaLocation":582},{"text":386,"config":772},{"href":388,"dataGaName":389,"dataGaLocation":582},{"text":391,"config":774},{"href":393,"dataGaName":394,"dataGaLocation":582},{"title":407,"links":776},[777,779,781,783,785,787,791,796,798,800,802],{"text":415,"config":778},{"href":417,"dataGaName":409,"dataGaLocation":582},{"text":420,"config":780},{"href":422,"dataGaName":423,"dataGaLocation":582},{"text":428,"config":782},{"href":430,"dataGaName":431,"dataGaLocation":582},{"text":433,"config":784},{"href":435,"dataGaName":436,"dataGaLocation":582},{"text":438,"config":786},{"href":440,"dataGaName":441,"dataGaLocation":582},{"text":788,"config":789},"Sustainability",{"href":790,"dataGaName":788,"dataGaLocation":582},"/sustainability/",{"text":792,"config":793},"Diversity, inclusion and belonging (DIB)",{"href":794,"dataGaName":795,"dataGaLocation":582},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":443,"config":797},{"href":445,"dataGaName":446,"dataGaLocation":582},{"text":453,"config":799},{"href":455,"dataGaName":456,"dataGaLocation":582},{"text":458,"config":801},{"href":460,"dataGaName":461,"dataGaLocation":582},{"text":803,"config":804},"Modern Slavery Transparency Statement",{"href":805,"dataGaName":806,"dataGaLocation":582},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":808},[809,812,815],{"text":810,"config":811},"Terms",{"href":634,"dataGaName":635,"dataGaLocation":582},{"text":813,"config":814},"Cookies",{"dataGaName":644,"dataGaLocation":582,"id":645,"isOneTrustButton":123},{"text":816,"config":817},"Privacy",{"href":639,"dataGaName":640,"dataGaLocation":582},[819],{"id":820,"title":7,"body":119,"config":821,"content":823,"description":119,"extension":826,"meta":827,"navigation":123,"path":828,"seo":829,"stem":830,"__hash__":831},"blogAuthors/en-us/blog/authors/julian-thome.yml",{"template":822},"BlogAuthor",{"name":7,"config":824},{"headshot":112,"ctfId":825},"jthome","yml",{},"/en-us/blog/authors/julian-thome",{},"en-us/blog/authors/julian-thome","60j2yTW0PuY7q83cXf4NkfzrKTRE2sUlVv5TXE6o1xM",[833,840,848],{"title":834,"description":835,"heroImage":836,"category":115,"date":837,"authors":838,"slug":839,"externalUrl":119},"How GitLab tracks vulnerabilities through refactors and reformatting","Learn how GitLab's improved Scope+Offset fingerprinting keeps vulnerability tracking stable across comments, blank lines, and reformatting.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[7],"improved-scope-offset-fingerprinting",{"title":841,"description":842,"heroImage":836,"category":115,"date":843,"authors":844,"slug":847,"externalUrl":119},"GitLab Secrets Manager adds ESO, Terraform, API support","Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.","2026-08-06",[845,846],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":849,"description":850,"heroImage":851,"category":115,"date":852,"authors":853,"slug":855,"externalUrl":119},"Secure every commit to production with Claude and GitLab","Claude Security catches vulnerabilities inside a coding session. GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle. ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[854],"Alisa Ho","claude-security-and-gitlab",{"promotions":857},[858,872,884,895],{"id":859,"categories":860,"header":862,"text":863,"button":864,"image":869},"ai-modernization",[861],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":865,"config":866},"Get your AI maturity score",{"href":867,"dataGaName":868,"dataGaLocation":347},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":870},{"src":871},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":873,"categories":874,"header":876,"text":863,"button":877,"image":881},"devops-modernization",[875,683],"product","Are you just managing tools or shipping innovation?",{"text":878,"config":879},"Get your DevOps maturity score",{"href":880,"dataGaName":868,"dataGaLocation":347},"/assessments/devops-modernization-assessment/",{"config":882},{"src":883},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":885,"categories":886,"header":887,"text":863,"button":888,"image":892},"security-modernization",[115],"Are you trading speed for security?",{"text":889,"config":890},"Get your security maturity score",{"href":891,"dataGaName":868,"dataGaLocation":347},"/assessments/security-modernization-assessment/",{"config":893},{"src":894},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":896,"paths":897,"header":900,"text":901,"button":902,"image":907},"github-azure-migration",[898,899],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":903,"config":904},"See how GitLab compares to GitHub",{"href":905,"dataGaName":906,"dataGaLocation":347},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":908},{"src":883},{"header":910,"blurb":911,"button":912,"secondaryButton":917},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":913,"config":914},"Get your free trial",{"href":915,"dataGaName":147,"dataGaLocation":916},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":620,"config":918},{"href":472,"dataGaName":152,"dataGaLocation":916},1786803750502]