[{"data":1,"prerenderedAt":2920},["ShallowReactive",2],{"/blog/top-10-gitlab-hacks":3,"navigation-en-us":2137,"banner-en-us":2563,"footer-en-us":2573,"blog-post-authors-en-us-Michael Friedrich":2816,"blog-related-posts-en-us-top-10-gitlab-hacks":2831,"blog-promotions-en-us":2856,"next-steps-en-us":2910},{"id":4,"title":5,"authors":6,"body":8,"category":2116,"date":2117,"description":2118,"extension":2119,"externalUrl":2120,"faq":2120,"featured":2121,"heroImage":2122,"meta":2123,"navigation":79,"path":2124,"seo":2125,"slug":2129,"stem":2130,"tags":2131,"template":2135,"updatedDate":2120,"__hash__":2136},"blogPosts/en-us/blog/top-10-gitlab-hacks.md","Top ten GitLab hacks for all stages of the DevOps Platform",[7],"Michael Friedrich",{"type":9,"value":10,"toc":2103},"minimark",[11,15,20,35,164,167,175,179,182,197,200,456,466,492,496,513,522,546,561,589,597,601,618,625,654,661,669,680,767,779,791,795,804,807,830,833,947,956,960,963,966,1004,1014,1032,1039,1046,1050,1075,1084,1097,1100,1135,1137,1202,1208,1388,1391,1398,1414,1422,1426,1441,1453,1460,1544,1551,1580,1586,1686,1689,1704,1847,1850,1857,1866,1873,1886,1890,1909,1916,1934,1938,1959,1966,1975,1978,2055,2062,2071,2078,2082,2085,2099],[12,13,14],"p",{},"It's been ten years since the first commit to GitLab, so we are sharing our ten favorite GitLab hacks to help you get the most out of our DevOps Platform. These are tips for all stages of the development lifecycle, so roll up your sleeves and let's get started.",[16,17,19],"h2",{"id":18},"manage-faster-with-quick-actions","Manage faster with quick actions",[12,21,22,23,29,30,34],{},"You might have adopted keyboard shortcuts for faster navigation and workflows already - if not, check out the GitLab documentation for ",[24,25,28],"a",{"href":26,"rel":27},"https://docs.gitlab.com/user/shortcuts/",[],"platform specific shortcuts",". The knowledge of pressing ",[31,32,33],"code",{},"r"," to land in the reply to comment in text form can be combined with other quick actions, including:",[36,37,42],"pre",{"className":38,"code":39,"language":40,"meta":41,"style":41},"language-shell shiki shiki-themes github-light","/assign_reviewer @ \u003Csearch username>\n\n/label ~ \u003Csearch label>\n/label ~enhancement ~workflow::indev\n\n/due Oct 8\n\n/rebase\n\n/approve\n\n/merge\n","shell","",[31,43,44,74,81,102,113,118,131,136,142,147,153,158],{"__ignoreMap":41},[45,46,49,53,57,61,64,67,71],"span",{"class":47,"line":48},"line",1,[45,50,52],{"class":51},"s7eDp","/assign_reviewer",[45,54,56],{"class":55},"sYBdl"," @",[45,58,60],{"class":59},"sD7c4"," \u003C",[45,62,63],{"class":55},"search",[45,65,66],{"class":55}," usernam",[45,68,70],{"class":69},"sgsFI","e",[45,72,73],{"class":59},">\n",[45,75,77],{"class":47,"line":76},2,[45,78,80],{"emptyLinePlaceholder":79},true,"\n",[45,82,84,87,90,92,94,97,100],{"class":47,"line":83},3,[45,85,86],{"class":51},"/label",[45,88,89],{"class":55}," ~",[45,91,60],{"class":59},[45,93,63],{"class":55},[45,95,96],{"class":55}," labe",[45,98,99],{"class":69},"l",[45,101,73],{"class":59},[45,103,105,107,110],{"class":47,"line":104},4,[45,106,86],{"class":51},[45,108,109],{"class":55}," ~enhancement",[45,111,112],{"class":55}," ~workflow::indev\n",[45,114,116],{"class":47,"line":115},5,[45,117,80],{"emptyLinePlaceholder":79},[45,119,121,124,127],{"class":47,"line":120},6,[45,122,123],{"class":51},"/due",[45,125,126],{"class":55}," Oct",[45,128,130],{"class":129},"sYu0t"," 8\n",[45,132,134],{"class":47,"line":133},7,[45,135,80],{"emptyLinePlaceholder":79},[45,137,139],{"class":47,"line":138},8,[45,140,141],{"class":51},"/rebase\n",[45,143,145],{"class":47,"line":144},9,[45,146,80],{"emptyLinePlaceholder":79},[45,148,150],{"class":47,"line":149},10,[45,151,152],{"class":51},"/approve\n",[45,154,156],{"class":47,"line":155},11,[45,157,80],{"emptyLinePlaceholder":79},[45,159,161],{"class":47,"line":160},12,[45,162,163],{"class":51},"/merge\n",[12,165,166],{},"Quick actions are also helpful if you have to manage many issues, merge requests and epics at the same time. There are specific actions which allow you to duplicate existing issues, as one example.",[12,168,169,170,174],{},"Take a deeper dive into ",[24,171,173],{"href":172},"/blog/improve-your-gitlab-productivity-with-these-10-tips/","Quick Actions",".",[16,176,178],{"id":177},"plan-instructions-with-templates","Plan instructions with templates",[12,180,181],{},"Don’t fall into the trap of back-and-forth with empty issue descriptions that leave out details your development teams need to reproduce the error in the best way possible.",[12,183,184,185,190,191,196],{},"GitLab provides the possibility to use so-called ",[24,186,189],{"href":187,"rel":188},"https://docs.gitlab.com/user/project/description_templates/",[],"description templates"," in issues and merge requests. Next to providing a structured template with headings, you can also add ",[24,192,195],{"href":193,"rel":194},"https://docs.gitlab.com/user/markdown/#task-lists",[],"task lists"," which can later be ticked off by the assignee. Basically everything is possible and is supported in GitLab-flavored markdown and HTML.",[12,198,199],{},"In addition to that, you can combine the static description templates with quick actions. This allows you to automatically set labels, assignees, define due dates, and more to level up your productivity with GitLab.",[36,201,205],{"className":202,"code":203,"language":204,"meta":41,"style":41},"language-xml shiki shiki-themes github-light","\u003C!--\nThis is a comment, it will not be rendered by the Markdown engine. You can use it to provide instructions how to fill in the template.\n-->\n\n### Summary\n\n\u003C!-- Summarize the bug encountered concisely. -->\n\n### Steps to reproduce\n\n\u003C!-- Describe how one can reproduce the issue - this is very important. -->\n\n### Output of checks\n\n\u003C!-- If you are reporting a bug on GitLab.com, write: This bug happens on GitLab.com -->\n\n#### Results of GitLab environment info\n\n\u003C!--  Input any relevant GitLab environment information if needed. -->\n\n\u003Cdetails>\n\u003Csummary>Expand for output related to app info\u003C/summary>\n\n\u003Cpre>\n\n(Paste the version details of your app here)\n\n\u003C/pre>\n\u003C/details>\n\n### Possible fixes\n\n\u003C!-- If you can, link to the line of code and suggest actions. →\n\n## Maintainer tasks\n\n- [ ] Problem reproduced\n- [ ] Weight added\n- [ ] Fix in test\n- [ ] Docs update needed\n\n/label ~\"type::bug\"\n","xml",[31,206,207,213,218,223,227,232,236,241,245,250,254,259,263,269,274,280,285,291,296,302,307,319,334,339,348,353,359,364,374,383,388,394,399,405,410,416,421,427,433,439,445,450],{"__ignoreMap":41},[45,208,209],{"class":47,"line":48},[45,210,212],{"class":211},"sAwPA","\u003C!--\n",[45,214,215],{"class":47,"line":76},[45,216,217],{"class":211},"This is a comment, it will not be rendered by the Markdown engine. You can use it to provide instructions how to fill in the template.\n",[45,219,220],{"class":47,"line":83},[45,221,222],{"class":211},"-->\n",[45,224,225],{"class":47,"line":104},[45,226,80],{"emptyLinePlaceholder":79},[45,228,229],{"class":47,"line":115},[45,230,231],{"class":69},"### Summary\n",[45,233,234],{"class":47,"line":120},[45,235,80],{"emptyLinePlaceholder":79},[45,237,238],{"class":47,"line":133},[45,239,240],{"class":211},"\u003C!-- Summarize the bug encountered concisely. -->\n",[45,242,243],{"class":47,"line":138},[45,244,80],{"emptyLinePlaceholder":79},[45,246,247],{"class":47,"line":144},[45,248,249],{"class":69},"### Steps to reproduce\n",[45,251,252],{"class":47,"line":149},[45,253,80],{"emptyLinePlaceholder":79},[45,255,256],{"class":47,"line":155},[45,257,258],{"class":211},"\u003C!-- Describe how one can reproduce the issue - this is very important. -->\n",[45,260,261],{"class":47,"line":160},[45,262,80],{"emptyLinePlaceholder":79},[45,264,266],{"class":47,"line":265},13,[45,267,268],{"class":69},"### Output of checks\n",[45,270,272],{"class":47,"line":271},14,[45,273,80],{"emptyLinePlaceholder":79},[45,275,277],{"class":47,"line":276},15,[45,278,279],{"class":211},"\u003C!-- If you are reporting a bug on GitLab.com, write: This bug happens on GitLab.com -->\n",[45,281,283],{"class":47,"line":282},16,[45,284,80],{"emptyLinePlaceholder":79},[45,286,288],{"class":47,"line":287},17,[45,289,290],{"class":69},"#### Results of GitLab environment info\n",[45,292,294],{"class":47,"line":293},18,[45,295,80],{"emptyLinePlaceholder":79},[45,297,299],{"class":47,"line":298},19,[45,300,301],{"class":211},"\u003C!--  Input any relevant GitLab environment information if needed. -->\n",[45,303,305],{"class":47,"line":304},20,[45,306,80],{"emptyLinePlaceholder":79},[45,308,310,313,317],{"class":47,"line":309},21,[45,311,312],{"class":69},"\u003C",[45,314,316],{"class":315},"shJU0","details",[45,318,73],{"class":69},[45,320,322,324,327,330,332],{"class":47,"line":321},22,[45,323,312],{"class":69},[45,325,326],{"class":315},"summary",[45,328,329],{"class":69},">Expand for output related to app info\u003C/",[45,331,326],{"class":315},[45,333,73],{"class":69},[45,335,337],{"class":47,"line":336},23,[45,338,80],{"emptyLinePlaceholder":79},[45,340,342,344,346],{"class":47,"line":341},24,[45,343,312],{"class":69},[45,345,36],{"class":315},[45,347,73],{"class":69},[45,349,351],{"class":47,"line":350},25,[45,352,80],{"emptyLinePlaceholder":79},[45,354,356],{"class":47,"line":355},26,[45,357,358],{"class":69},"(Paste the version details of your app here)\n",[45,360,362],{"class":47,"line":361},27,[45,363,80],{"emptyLinePlaceholder":79},[45,365,367,370,372],{"class":47,"line":366},28,[45,368,369],{"class":69},"\u003C/",[45,371,36],{"class":315},[45,373,73],{"class":69},[45,375,377,379,381],{"class":47,"line":376},29,[45,378,369],{"class":69},[45,380,316],{"class":315},[45,382,73],{"class":69},[45,384,386],{"class":47,"line":385},30,[45,387,80],{"emptyLinePlaceholder":79},[45,389,391],{"class":47,"line":390},31,[45,392,393],{"class":69},"### Possible fixes\n",[45,395,397],{"class":47,"line":396},32,[45,398,80],{"emptyLinePlaceholder":79},[45,400,402],{"class":47,"line":401},33,[45,403,404],{"class":211},"\u003C!-- If you can, link to the line of code and suggest actions. →\n",[45,406,408],{"class":47,"line":407},34,[45,409,80],{"emptyLinePlaceholder":79},[45,411,413],{"class":47,"line":412},35,[45,414,415],{"class":211},"## Maintainer tasks\n",[45,417,419],{"class":47,"line":418},36,[45,420,80],{"emptyLinePlaceholder":79},[45,422,424],{"class":47,"line":423},37,[45,425,426],{"class":211},"- [ ] Problem reproduced\n",[45,428,430],{"class":47,"line":429},38,[45,431,432],{"class":211},"- [ ] Weight added\n",[45,434,436],{"class":47,"line":435},39,[45,437,438],{"class":211},"- [ ] Fix in test\n",[45,440,442],{"class":47,"line":441},40,[45,443,444],{"class":211},"- [ ] Docs update needed\n",[45,446,448],{"class":47,"line":447},41,[45,449,80],{"emptyLinePlaceholder":79},[45,451,453],{"class":47,"line":452},42,[45,454,455],{"class":211},"/label ~\"type::bug\"\n",[12,457,458,459,462,463,174],{},"When you manage different types of templates, you can pass along the name of the template in the ",[31,460,461],{},"issuable_template"," parameter, for example ",[31,464,465],{},"https://gitlab.com/gitlab-org/gitlab/-/issues/new?issuable_template=Feature%20proposal%20%23%20lean",[12,467,468,469,474,475,474,480,485,486,491],{},"At GitLab, we use description and merge request templates in many ways: ",[24,470,473],{"href":471,"rel":472},"https://gitlab.com/gitlab-org/gitlab/-/tree/master/.gitlab/issue_templates",[],"GitLab the project",", ",[24,476,479],{"href":477,"rel":478},"https://gitlab.com/gitlab-com/marketing/corporate_marketing/corporate-marketing/-/tree/master/.gitlab/issue_templates",[],"GitLab Corporate Marketing team",[24,481,484],{"href":482,"rel":483},"https://gitlab.com/gitlab-com/people-group/people-operations/employment-templates/-/tree/master/.gitlab/issue_templates",[],"GitLab team member onboarding"," and ",[24,487,490],{"href":488,"rel":489},"https://gitlab.com/gitlab-com/Product/-/tree/main/.gitlab/issue_templates",[],"GitLab product team"," are just a few examples.",[16,493,495],{"id":494},"create-with-confidence","Create with confidence",[12,497,498,499,502,503,506,507,512],{},"When reading GitLab issues and merge requests, you may see the abbreviation ",[31,500,501],{},"MWPS"," which means ",[31,504,505],{},"Merge When Pipeline Succeeds",". This is an efficient way to merge the MRs when the pipeline passes all jobs and stages - you can even combine this workflow with ",[24,508,511],{"href":509,"rel":510},"https://docs.gitlab.com/user/project/issues/managing_issues/#closing-issues-automatically",[],"automatically closing issues"," with keywords from the MR.",[12,514,515,517,518,521],{},[31,516,505],{}," also works on the CLI with the ",[31,519,520],{},"git"," command and push options. That way you can create a merge request from a local Git branch, and set it to merge when the pipeline succeeds.",[36,523,525],{"className":38,"code":524,"language":40,"meta":41,"style":41},"# mwps BRANCHNAME\nalias mwps='git push -u origin -o merge_request.create -o merge_request.target=main -o merge_request.merge_when_pipeline_succeeds'\n",[31,526,527,532],{"__ignoreMap":41},[45,528,529],{"class":47,"line":48},[45,530,531],{"class":211},"# mwps BRANCHNAME\n",[45,533,534,537,540,543],{"class":47,"line":76},[45,535,536],{"class":59},"alias",[45,538,539],{"class":69}," mwps",[45,541,542],{"class":59},"=",[45,544,545],{"class":55},"'git push -u origin -o merge_request.create -o merge_request.target=main -o merge_request.merge_when_pipeline_succeeds'\n",[12,547,548,549,554,555,560],{},"Checkout ",[24,550,553],{"href":551,"rel":552},"https://gitlab.com/sytses/dotfiles/-/blob/745ef9725a859dd759059f6ce283e2a8132c9b00/git/aliases.zsh#L24",[],"this ZSH alias example"," in our CEO Sid Sijbrandij’s dotfiles repository. There are more push options available, and even more Git CLI tips in ",[24,556,559],{"href":557,"rel":558},"https://handbook.gitlab.com/handbook/tools-and-tips/#terminal",[],"our tools & tips handbook",". One last tip: Delete all local branches where the remote branch was deleted, for example after merging a MR.",[36,562,564],{"className":38,"code":563,"language":40,"meta":41,"style":41},"# Delete all remote tracking Git branches where the upstream branch has been deleted\nalias git_prune=\"git fetch --prune && git branch -vv | grep 'origin/.*: gone]' | awk '{print \\$1}' | xargs git branch -d\"\n",[31,565,566,571],{"__ignoreMap":41},[45,567,568],{"class":47,"line":48},[45,569,570],{"class":211},"# Delete all remote tracking Git branches where the upstream branch has been deleted\n",[45,572,573,575,578,580,583,586],{"class":47,"line":76},[45,574,536],{"class":59},[45,576,577],{"class":69}," git_prune",[45,579,542],{"class":59},[45,581,582],{"class":55},"\"git fetch --prune && git branch -vv | grep 'origin/.*: gone]' | awk '{print ",[45,584,585],{"class":129},"\\$",[45,587,588],{"class":55},"1}' | xargs git branch -d\"\n",[12,590,591,592,596],{},"You are not bound to your local CLI environment; take it to the cloud with ",[24,593,595],{"href":594},"/blog/teams-gitpod-integration-gitlab-speed-up-development/","Gitpod"," and either work in VS Code or the pod terminal.",[16,598,600],{"id":599},"verify-your-cicd-pipeline","Verify your CI/CD pipeline",[12,602,603,604,607,608,613,614,617],{},"Remember the old workflow of committing a change to ",[31,605,606],{},".gitlab-ci.yml"," just to see if it was valid, or if the job template really inherits all the attributes? This has gotten a whole lot easier with our new ",[24,609,612],{"href":610,"rel":611},"https://docs.gitlab.com/ci/pipeline_editor/",[],"pipeline editor",". Navigate into the ",[31,615,616],{},"CI/CD"," menu and start building CI/CD pipelines right away.",[12,619,620,621,624],{},"But the editor is more than just another YAML editor. You’ll get live linting, allowing you to know if there is a missing dash for array lists or a wrong keyword in use before you commit. You can also preview jobs and stages or asynchronous dependencies with ",[31,622,623],{},"needs"," to make your pipelines more efficient.",[12,626,627,628,631,632,636,637,485,642,647,648,653],{},"The pipeline editor also uses uses the ",[31,629,630],{},"/ci/lint"," API endpoint, and fetches the merged YAML configuration I described earlier in ",[24,633,635],{"href":634},"/blog/devops-workflows-json-format-jq-ci-cd-lint/","this blog post about jq and CI/CD linting",". That way you can quickly verify that job templates with ",[24,638,641],{"href":639,"rel":640},"https://docs.gitlab.com/ci/yaml/#extends",[],"extends",[24,643,646],{"href":644,"rel":645},"https://docs.gitlab.com/ci/yaml/yaml_optimization/#reference-tags",[],"!reference tags"," work in the way you designed them. It also allows you to unfold included files, and possible job overrides (for example changing the stage of an ",[24,649,652],{"href":650,"rel":651},"https://docs.gitlab.com/user/application_security/sast/#overriding-sast-jobs",[],"included SAST security template",").",[12,655,656,657,660],{},"Let’s try a quick example – create a new project and new file called ",[31,658,659],{},"server.c"," with the following content:",[36,662,667],{"className":663,"code":665,"language":666,"meta":41},[664],"language-text","#include \u003Cstdio.h>\n#include \u003Cstring.h>\n#include \u003Csys/mman.h>\n#include \u003Csys/stat.h>\n#include \u003Cunistd.h>\n\nint main(void) {\n    size_t pagesize = getpagesize();\n    char * region = mmap(\n        (void*) (pagesize * (1 \u003C\u003C 20)),\n        pagesize,\n        PROT_READ|PROT_WRITE|PROT_EXEC,\n        MAP_ANON|MAP_PRIVATE, 0, 0);\n\n    strcpy(region, \"Hello GitLab SAST!\");\n    printf(\"Contents of region: %s\\n\", region);\n\n    FILE *fp;\n    fp = fopen(\"devops.platform\", \"r\");\n    fprintf(fp, \"10 years of GitLab 🦊 🥳\");\n    fclose(fp);\n    chmod(\"devops.platform\", S_IRWXU|S_IRWXG|S_IRWXO);\n\n    return 0;\n}\n","text",[31,668,665],{"__ignoreMap":41},[12,670,671,672,675,676,679],{},"Open the CI/CD pipeline editor and add the following configuration, with an extra ",[31,673,674],{},"secure"," stage assigned to the ",[31,677,678],{},"semgrep-sast"," job for SAST and the C code.",[36,681,685],{"className":682,"code":683,"language":684,"meta":41,"style":41},"language-yaml shiki shiki-themes github-light","stages:\n    - build\n    - secure\n    - test\n    - deploy\n\ninclude:\n    - template: Security/SAST.gitlab-ci.yml\n\nsemgrep-sast:\n    stage: secure\n\n","yaml",[31,686,687,695,703,710,717,724,728,735,748,752,758],{"__ignoreMap":41},[45,688,689,692],{"class":47,"line":48},[45,690,691],{"class":315},"stages",[45,693,694],{"class":69},":\n",[45,696,697,700],{"class":47,"line":76},[45,698,699],{"class":69},"    - ",[45,701,702],{"class":55},"build\n",[45,704,705,707],{"class":47,"line":83},[45,706,699],{"class":69},[45,708,709],{"class":55},"secure\n",[45,711,712,714],{"class":47,"line":104},[45,713,699],{"class":69},[45,715,716],{"class":55},"test\n",[45,718,719,721],{"class":47,"line":115},[45,720,699],{"class":69},[45,722,723],{"class":55},"deploy\n",[45,725,726],{"class":47,"line":120},[45,727,80],{"emptyLinePlaceholder":79},[45,729,730,733],{"class":47,"line":133},[45,731,732],{"class":315},"include",[45,734,694],{"class":69},[45,736,737,739,742,745],{"class":47,"line":138},[45,738,699],{"class":69},[45,740,741],{"class":315},"template",[45,743,744],{"class":69},": ",[45,746,747],{"class":55},"Security/SAST.gitlab-ci.yml\n",[45,749,750],{"class":47,"line":144},[45,751,80],{"emptyLinePlaceholder":79},[45,753,754,756],{"class":47,"line":149},[45,755,678],{"class":315},[45,757,694],{"class":69},[45,759,760,763,765],{"class":47,"line":155},[45,761,762],{"class":315},"    stage",[45,764,744],{"class":69},[45,766,709],{"class":55},[12,768,769,770,773,774,174],{},"Inspect the ",[31,771,772],{},"Merged YAML tab"," to see the fully compiled CI/CD configuration. You can commit the changes and check the found vulnerabilities too as an async practice :). The examples are available in ",[24,775,778],{"href":776,"rel":777},"https://gitlab.com/gitlab-da/playground/sast-10y-example",[],"this project",[12,780,781,786,787,790],{},[782,783],"img",{"alt":784,"src":785},"CI/CD Pipeline editor - Merged YAML","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399229/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_pipeline_editor_view_merged_yaml.png","\nVerify the stage attribute for the job by opening the ",[31,788,789],{},"view merged YAML"," tab in the CI/CD pipeline editor.",[16,792,794],{"id":793},"package-your-applications","Package your applications",[12,796,797,798,803],{},"The ",[24,799,802],{"href":800,"rel":801},"https://docs.gitlab.com/user/packages/",[],"package registry"," possibilities are huge and there are more languages and package managers to come. Describing why Terraform, Helm, and containers (for infrastructure) and Maven, npm, NuGet, PyPI, Composer, Conan, Debian, Go and Ruby Gems (for applications) are so awesome would take too long, but it's clear there are plenty of choices.",[12,805,806],{},"One of my favourite workflows is to use existing CI/CD templates to publish container images in the GitLab container registry. This makes continuous delivery much more efficient, such as when deploying the application into your Kubernetes cluster or AWS instances.",[36,808,810],{"className":682,"code":809,"language":684,"meta":41,"style":41},"include:\n  - template: 'Docker.gitlab-ci.yml'\n\n",[31,811,812,818],{"__ignoreMap":41},[45,813,814,816],{"class":47,"line":48},[45,815,732],{"class":315},[45,817,694],{"class":69},[45,819,820,823,825,827],{"class":47,"line":76},[45,821,822],{"class":69},"  - ",[45,824,741],{"class":315},[45,826,744],{"class":69},[45,828,829],{"class":55},"'Docker.gitlab-ci.yml'\n",[12,831,832],{},"In addition to including the CI/CD template, you can also override the job attributes and define a specific stage and manual non-blocking rules.",[36,834,836],{"className":682,"code":835,"language":684,"meta":41,"style":41},"stages:\n  - build\n  - docker-build\n  - test\n\ninclude:\n  - template: 'Docker.gitlab-ci.yml'\n\n# Change Docker build to manual non-blocking\ndocker-build:\n  stage: docker-build\n  rules:\n    - if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH'\n      when: manual\n      allow_failure: true\n\n",[31,837,838,844,850,857,863,867,873,883,887,892,899,908,915,927,937],{"__ignoreMap":41},[45,839,840,842],{"class":47,"line":48},[45,841,691],{"class":315},[45,843,694],{"class":69},[45,845,846,848],{"class":47,"line":76},[45,847,822],{"class":69},[45,849,702],{"class":55},[45,851,852,854],{"class":47,"line":83},[45,853,822],{"class":69},[45,855,856],{"class":55},"docker-build\n",[45,858,859,861],{"class":47,"line":104},[45,860,822],{"class":69},[45,862,716],{"class":55},[45,864,865],{"class":47,"line":115},[45,866,80],{"emptyLinePlaceholder":79},[45,868,869,871],{"class":47,"line":120},[45,870,732],{"class":315},[45,872,694],{"class":69},[45,874,875,877,879,881],{"class":47,"line":133},[45,876,822],{"class":69},[45,878,741],{"class":315},[45,880,744],{"class":69},[45,882,829],{"class":55},[45,884,885],{"class":47,"line":138},[45,886,80],{"emptyLinePlaceholder":79},[45,888,889],{"class":47,"line":144},[45,890,891],{"class":211},"# Change Docker build to manual non-blocking\n",[45,893,894,897],{"class":47,"line":149},[45,895,896],{"class":315},"docker-build",[45,898,694],{"class":69},[45,900,901,904,906],{"class":47,"line":155},[45,902,903],{"class":315},"  stage",[45,905,744],{"class":69},[45,907,856],{"class":55},[45,909,910,913],{"class":47,"line":160},[45,911,912],{"class":315},"  rules",[45,914,694],{"class":69},[45,916,917,919,922,924],{"class":47,"line":265},[45,918,699],{"class":69},[45,920,921],{"class":315},"if",[45,923,744],{"class":69},[45,925,926],{"class":55},"'$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH'\n",[45,928,929,932,934],{"class":47,"line":271},[45,930,931],{"class":315},"      when",[45,933,744],{"class":69},[45,935,936],{"class":55},"manual\n",[45,938,939,942,944],{"class":47,"line":276},[45,940,941],{"class":315},"      allow_failure",[45,943,744],{"class":69},[45,945,946],{"class":129},"true\n",[12,948,949,950,955],{},"For celebrating #10YearsOfGitLab, we have created a ",[24,951,954],{"href":952,"rel":953},"https://gitlab.com/gitlab-da/cicd-tanuki-cpp",[],"C++ example"," with an Easter egg on time calculations. This project also uses a Docker builder image to showcase a more efficient pipeline. Our recommendation is to learn using the templates in a test repository, and then create a dedicated group/project for managing all required container images. You can think of builder images which include the compiler tool chain, or specific scripts to run end-to-end tests, etc.",[16,957,959],{"id":958},"secure-your-secrets","Secure your secrets",[12,961,962],{},"It is easy to leak a secret by making choices that uncomplicate a unit test by running it directly with the production database. The secret persists in git history, and someone with bad intentions gains access to private data, or finds ways to exploit your supply chain even further.",[12,964,965],{},"To help prevent that, include the CI/CD template for secret detection.",[36,967,969],{"className":682,"code":968,"language":684,"meta":41,"style":41},"stages:\n    - test\n\ninclude:\n  - template: Security/Secret-Detection.gitlab-ci.yml\n\n",[31,970,971,977,983,987,993],{"__ignoreMap":41},[45,972,973,975],{"class":47,"line":48},[45,974,691],{"class":315},[45,976,694],{"class":69},[45,978,979,981],{"class":47,"line":76},[45,980,699],{"class":69},[45,982,716],{"class":55},[45,984,985],{"class":47,"line":83},[45,986,80],{"emptyLinePlaceholder":79},[45,988,989,991],{"class":47,"line":104},[45,990,732],{"class":315},[45,992,694],{"class":69},[45,994,995,997,999,1001],{"class":47,"line":115},[45,996,822],{"class":69},[45,998,741],{"class":315},[45,1000,744],{"class":69},[45,1002,1003],{"class":55},"Security/Secret-Detection.gitlab-ci.yml\n",[12,1005,1006,1007,1010,1011,1013],{},"A known way to leak secrets is committing the ",[31,1008,1009],{},".env"," file which stores settings and secrets in the repository. Try the following snippet by adding a new file ",[31,1012,1009],{}," and create a merge request.",[36,1015,1017],{"className":38,"code":1016,"language":40,"meta":41,"style":41},"export AWS_KEY=\"AKIA1318109798ABCDEF\"\n",[31,1018,1019],{"__ignoreMap":41},[45,1020,1021,1024,1027,1029],{"class":47,"line":48},[45,1022,1023],{"class":59},"export",[45,1025,1026],{"class":69}," AWS_KEY",[45,1028,542],{"class":59},[45,1030,1031],{"class":55},"\"AKIA1318109798ABCDEF\"\n",[12,1033,1034,1035,174],{},"Inspect the reports JSON to see the raw reports structure. GitLab Ultimate provides an MR integration, a security dashboard overview, and more features to take immediate action. The example can be found in ",[24,1036,778],{"href":1037,"rel":1038},"https://gitlab.com/gitlab-da/playground/secret-scanning-10y-example",[],[12,1040,1041,1045],{},[782,1042],{"alt":1043,"src":1044},"Secrets Scanning in MR","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399230/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_secrets_scanning.png","\nMR detail view with detected AWS secret from security scanning",[16,1047,1049],{"id":1048},"release-and-continuously-deliver-cd","Release and continuously deliver (CD)",[12,1051,1052,1053,1058,1059,485,1064,1069,1070,174],{},"GitLab’s release stage provides many ",[24,1054,1057],{"href":1055,"rel":1056},"https://handbook.gitlab.com/handbook/product/categories/features/#release",[],"features",", including ",[24,1060,1063],{"href":1061,"rel":1062},"https://docs.gitlab.com/user/project/canary_deployments/",[],"canary deployments",[24,1065,1068],{"href":1066,"rel":1067},"https://docs.gitlab.com/user/project/pages/",[],"GitLab pages",". There are also infrastructure deployments with Terraform and cloud native (protected) ",[24,1071,1074],{"href":1072,"rel":1073},"https://docs.gitlab.com/ci/environments/",[],"environments",[12,1076,1077,1078,1083],{},"While working on a CI/CD pipeline efficiency workshop, I got enthusiastic about ",[24,1079,1082],{"href":1080,"rel":1081},"https://docs.gitlab.com/ci/pipelines/downstream_pipelines/#parent-child-pipelines",[],"parent-child pipelines"," allowing non-blocking child pipelines into production, with micro services in Kubernetes as one example.",[12,1085,1086,1087,485,1090,1093,1094,1096],{},"Let’s try it! Create a new project, and add 2 child pipeline configuration files: ",[31,1088,1089],{},"child-deploy-staging.yml",[31,1091,1092],{},"child-deploy-prod.yml",". The naming is important as the files will be referenced in the main ",[31,1095,606],{}," configuration file later. The jobs in the child pipelines will sleep for 60 seconds to simulate a deployment.",[12,1098,1099],{},"child-deploy-staging.yml:",[36,1101,1103],{"className":682,"code":1102,"language":684,"meta":41,"style":41},"deploy-staging:\n    stage: deploy\n    script:\n        - echo \"Deploying microservices to staging\" && sleep 60\n\n",[31,1104,1105,1112,1120,1127],{"__ignoreMap":41},[45,1106,1107,1110],{"class":47,"line":48},[45,1108,1109],{"class":315},"deploy-staging",[45,1111,694],{"class":69},[45,1113,1114,1116,1118],{"class":47,"line":76},[45,1115,762],{"class":315},[45,1117,744],{"class":69},[45,1119,723],{"class":55},[45,1121,1122,1125],{"class":47,"line":83},[45,1123,1124],{"class":315},"    script",[45,1126,694],{"class":69},[45,1128,1129,1132],{"class":47,"line":104},[45,1130,1131],{"class":69},"        - ",[45,1133,1134],{"class":55},"echo \"Deploying microservices to staging\" && sleep 60\n",[12,1136,1092],{},[36,1138,1140],{"className":682,"code":1139,"language":684,"meta":41,"style":41},"deploy-prod:\n    stage: deploy\n    script:\n        - echo \"Deploying microservices to prod\" && sleep 60\n\nmonitor-prod:\n    stage: deploy\n    script:\n        - echo \"Monitoring production SLOs\" && sleep 60\n\n",[31,1141,1142,1149,1157,1163,1170,1174,1181,1189,1195],{"__ignoreMap":41},[45,1143,1144,1147],{"class":47,"line":48},[45,1145,1146],{"class":315},"deploy-prod",[45,1148,694],{"class":69},[45,1150,1151,1153,1155],{"class":47,"line":76},[45,1152,762],{"class":315},[45,1154,744],{"class":69},[45,1156,723],{"class":55},[45,1158,1159,1161],{"class":47,"line":83},[45,1160,1124],{"class":315},[45,1162,694],{"class":69},[45,1164,1165,1167],{"class":47,"line":104},[45,1166,1131],{"class":69},[45,1168,1169],{"class":55},"echo \"Deploying microservices to prod\" && sleep 60\n",[45,1171,1172],{"class":47,"line":115},[45,1173,80],{"emptyLinePlaceholder":79},[45,1175,1176,1179],{"class":47,"line":120},[45,1177,1178],{"class":315},"monitor-prod",[45,1180,694],{"class":69},[45,1182,1183,1185,1187],{"class":47,"line":133},[45,1184,762],{"class":315},[45,1186,744],{"class":69},[45,1188,723],{"class":55},[45,1190,1191,1193],{"class":47,"line":138},[45,1192,1124],{"class":315},[45,1194,694],{"class":69},[45,1196,1197,1199],{"class":47,"line":144},[45,1198,1131],{"class":69},[45,1200,1201],{"class":55},"echo \"Monitoring production SLOs\" && sleep 60\n",[12,1203,1204,1205,1207],{},"Now edit the ",[31,1206,606],{}," configuration file and create a build-test-deploy stage workflow.",[36,1209,1211],{"className":682,"code":1210,"language":684,"meta":41,"style":41},"stages:\n  - build\n  - test\n  - deploy\n\nbuild:\n  stage: build\n  script: echo \"Build\"\n\ntest:\n  stage: test\n  script: echo \"Test\"\n\ndeploy-staging-trigger:\n  stage: deploy\n  trigger:\n    include: child-deploy-staging.yml\n  #rules:\n  #  - if: $CI_MERGE_REQUEST_ID\n\ndeploy-prod-trigger:\n  stage: deploy\n  trigger:\n    include: child-deploy-prod.yml\n    #strategy: depend\n  #rules:\n  #  - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH\n\n",[31,1212,1213,1219,1225,1231,1237,1241,1248,1256,1266,1270,1277,1285,1294,1298,1305,1313,1320,1330,1335,1340,1344,1351,1359,1365,1374,1379,1383],{"__ignoreMap":41},[45,1214,1215,1217],{"class":47,"line":48},[45,1216,691],{"class":315},[45,1218,694],{"class":69},[45,1220,1221,1223],{"class":47,"line":76},[45,1222,822],{"class":69},[45,1224,702],{"class":55},[45,1226,1227,1229],{"class":47,"line":83},[45,1228,822],{"class":69},[45,1230,716],{"class":55},[45,1232,1233,1235],{"class":47,"line":104},[45,1234,822],{"class":69},[45,1236,723],{"class":55},[45,1238,1239],{"class":47,"line":115},[45,1240,80],{"emptyLinePlaceholder":79},[45,1242,1243,1246],{"class":47,"line":120},[45,1244,1245],{"class":315},"build",[45,1247,694],{"class":69},[45,1249,1250,1252,1254],{"class":47,"line":133},[45,1251,903],{"class":315},[45,1253,744],{"class":69},[45,1255,702],{"class":55},[45,1257,1258,1261,1263],{"class":47,"line":138},[45,1259,1260],{"class":315},"  script",[45,1262,744],{"class":69},[45,1264,1265],{"class":55},"echo \"Build\"\n",[45,1267,1268],{"class":47,"line":144},[45,1269,80],{"emptyLinePlaceholder":79},[45,1271,1272,1275],{"class":47,"line":149},[45,1273,1274],{"class":315},"test",[45,1276,694],{"class":69},[45,1278,1279,1281,1283],{"class":47,"line":155},[45,1280,903],{"class":315},[45,1282,744],{"class":69},[45,1284,716],{"class":55},[45,1286,1287,1289,1291],{"class":47,"line":160},[45,1288,1260],{"class":315},[45,1290,744],{"class":69},[45,1292,1293],{"class":55},"echo \"Test\"\n",[45,1295,1296],{"class":47,"line":265},[45,1297,80],{"emptyLinePlaceholder":79},[45,1299,1300,1303],{"class":47,"line":271},[45,1301,1302],{"class":315},"deploy-staging-trigger",[45,1304,694],{"class":69},[45,1306,1307,1309,1311],{"class":47,"line":276},[45,1308,903],{"class":315},[45,1310,744],{"class":69},[45,1312,723],{"class":55},[45,1314,1315,1318],{"class":47,"line":282},[45,1316,1317],{"class":315},"  trigger",[45,1319,694],{"class":69},[45,1321,1322,1325,1327],{"class":47,"line":287},[45,1323,1324],{"class":315},"    include",[45,1326,744],{"class":69},[45,1328,1329],{"class":55},"child-deploy-staging.yml\n",[45,1331,1332],{"class":47,"line":293},[45,1333,1334],{"class":211},"  #rules:\n",[45,1336,1337],{"class":47,"line":298},[45,1338,1339],{"class":211},"  #  - if: $CI_MERGE_REQUEST_ID\n",[45,1341,1342],{"class":47,"line":304},[45,1343,80],{"emptyLinePlaceholder":79},[45,1345,1346,1349],{"class":47,"line":309},[45,1347,1348],{"class":315},"deploy-prod-trigger",[45,1350,694],{"class":69},[45,1352,1353,1355,1357],{"class":47,"line":321},[45,1354,903],{"class":315},[45,1356,744],{"class":69},[45,1358,723],{"class":55},[45,1360,1361,1363],{"class":47,"line":336},[45,1362,1317],{"class":315},[45,1364,694],{"class":69},[45,1366,1367,1369,1371],{"class":47,"line":341},[45,1368,1324],{"class":315},[45,1370,744],{"class":69},[45,1372,1373],{"class":55},"child-deploy-prod.yml\n",[45,1375,1376],{"class":47,"line":350},[45,1377,1378],{"class":211},"    #strategy: depend\n",[45,1380,1381],{"class":47,"line":355},[45,1382,1334],{"class":211},[45,1384,1385],{"class":47,"line":361},[45,1386,1387],{"class":211},"  #  - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH\n",[12,1389,1390],{},"Commit the changes and inspect the CI/CD pipelines.",[12,1392,1393,1397],{},[782,1394],{"alt":1395,"src":1396},"Parent-child Pipelines","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399229/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_parent_child_pipelines.png","\nView parent-child pipelines in GitLab",[12,1399,1400,1403,1404,1409,1410,174],{},[31,1401,1402],{},"strategy: depends"," allows you to make the child pipelines blocking again, and the parent child pipeline waits again. Try uncommenting this for the prod job, and verify that by inspecting the pipeline view. ",[24,1405,1408],{"href":1406,"rel":1407},"https://docs.gitlab.com/ci/yaml/#rules",[],"Rules"," allow refining the scope when jobs are being run, such as when staging child pipelines that should only be run in merge requests and the prod child pipeline only gets triggered when on the default main branch. The full example can be found in ",[24,1411,778],{"href":1412,"rel":1413},"https://gitlab.com/gitlab-da/playground/parent-child-pipeline-10y-example",[],[12,1415,1416,1417,1421],{},"Tip: You can use ",[24,1418,1420],{"href":1419},"/blog/introducing-resource-groups/","resource_groups"," to limit production deployments from running concurrent child pipelines.",[16,1423,1425],{"id":1424},"configure-your-infrastructure","Configure your infrastructure",[12,1427,1428,1429,1434,1435,1440],{},"Terraform allows you to describe, plan and apply the provisioning of infrastructure resources. The workflow requires a state file to be stored over steps, where the ",[24,1430,1433],{"href":1431,"rel":1432},"https://docs.gitlab.com/user/infrastructure/iac/terraform_state/",[],"managed state in GitLab"," as an HTTP backend is a great help, together with predefined container images and CI/CD templates to make ",[24,1436,1439],{"href":1437,"rel":1438},"https://docs.gitlab.com/user/infrastructure/iac/",[],"Infrastructure as code"," as smooth as possible.",[12,1442,1443,1444,744,1447,485,1450,174],{},"You can customize the template, or copy the CI/CD configuration into .gitlab-ci.yml and modify the steps by yourself. Let’s try a quick example with only an AWS account and an IAM user key pair. Configure them as CI/CD variables in ",[31,1445,1446],{},"Settings > CI/CD > Variables",[31,1448,1449],{},"AWS_ACCESS_KEY_ID",[31,1451,1452],{},"AWS_SECRET_ACCESS_KEY",[12,1454,1455,1456,1459],{},"Next, create the ",[31,1457,1458],{},"backend.tf"," file and specify the http backend and AWS module dependency.",[36,1461,1465],{"className":1462,"code":1463,"language":1464,"meta":41,"style":41},"language-terraform shiki shiki-themes github-light","terraform {\n  backend \"http\" {\n  }\n\n  required_providers {\n    aws = {\n      source = \"hashicorp/aws\"\n      version = \"~> 3.0\"\n    }\n  }\n}\n","terraform",[31,1466,1467,1474,1484,1489,1493,1500,1510,1520,1530,1535,1539],{"__ignoreMap":41},[45,1468,1469,1471],{"class":47,"line":48},[45,1470,1464],{"class":51},[45,1472,1473],{"class":69}," {\n",[45,1475,1476,1479,1482],{"class":47,"line":76},[45,1477,1478],{"class":51},"  backend",[45,1480,1481],{"class":129}," \"http\"",[45,1483,1473],{"class":69},[45,1485,1486],{"class":47,"line":83},[45,1487,1488],{"class":69},"  }\n",[45,1490,1491],{"class":47,"line":104},[45,1492,80],{"emptyLinePlaceholder":79},[45,1494,1495,1498],{"class":47,"line":115},[45,1496,1497],{"class":51},"  required_providers",[45,1499,1473],{"class":69},[45,1501,1502,1505,1508],{"class":47,"line":120},[45,1503,1504],{"class":69},"    aws",[45,1506,1507],{"class":59}," =",[45,1509,1473],{"class":69},[45,1511,1512,1515,1517],{"class":47,"line":133},[45,1513,1514],{"class":69},"      source ",[45,1516,542],{"class":59},[45,1518,1519],{"class":55}," \"hashicorp/aws\"\n",[45,1521,1522,1525,1527],{"class":47,"line":138},[45,1523,1524],{"class":69},"      version ",[45,1526,542],{"class":59},[45,1528,1529],{"class":55}," \"~> 3.0\"\n",[45,1531,1532],{"class":47,"line":144},[45,1533,1534],{"class":69},"    }\n",[45,1536,1537],{"class":47,"line":149},[45,1538,1488],{"class":69},[45,1540,1541],{"class":47,"line":155},[45,1542,1543],{"class":69},"}\n",[12,1545,1546,1547,1550],{},"Create ",[31,1548,1549],{},"provider.tf"," to specify the AWS region.",[36,1552,1554],{"className":1462,"code":1553,"language":1464,"meta":41,"style":41},"provider \"aws\" {\n  region = \"us-east-1\"\n}\n",[31,1555,1556,1566,1576],{"__ignoreMap":41},[45,1557,1558,1561,1564],{"class":47,"line":48},[45,1559,1560],{"class":51},"provider",[45,1562,1563],{"class":129}," \"aws\"",[45,1565,1473],{"class":69},[45,1567,1568,1571,1573],{"class":47,"line":76},[45,1569,1570],{"class":69},"  region",[45,1572,1507],{"class":59},[45,1574,1575],{"class":55}," \"us-east-1\"\n",[45,1577,1578],{"class":47,"line":83},[45,1579,1543],{"class":69},[12,1581,797,1582,1585],{},[31,1583,1584],{},"main.tf"," describes the S3 bucket resources.",[36,1587,1589],{"className":1462,"code":1588,"language":1464,"meta":41,"style":41},"resource \"aws_s3_bucket_public_access_block\" \"publicaccess\" {\n  bucket = aws_s3_bucket.demobucket.id\n  block_public_acls = false\n  block_public_policy = false\n}\n\nresource \"aws_s3_bucket\" \"demobucket\" {\n  bucket = \"terraformdemobucket\"\n  acl = \"private\"\n}\n",[31,1590,1591,1604,1624,1634,1643,1647,1651,1663,1672,1682],{"__ignoreMap":41},[45,1592,1593,1596,1599,1602],{"class":47,"line":48},[45,1594,1595],{"class":51},"resource",[45,1597,1598],{"class":129}," \"aws_s3_bucket_public_access_block\"",[45,1600,1601],{"class":129}," \"publicaccess\"",[45,1603,1473],{"class":69},[45,1605,1606,1609,1611,1614,1616,1619,1621],{"class":47,"line":76},[45,1607,1608],{"class":69},"  bucket",[45,1610,1507],{"class":59},[45,1612,1613],{"class":69}," aws_s3_bucket",[45,1615,174],{"class":59},[45,1617,1618],{"class":69},"demobucket",[45,1620,174],{"class":59},[45,1622,1623],{"class":69},"id\n",[45,1625,1626,1629,1631],{"class":47,"line":83},[45,1627,1628],{"class":69},"  block_public_acls",[45,1630,1507],{"class":59},[45,1632,1633],{"class":129}," false\n",[45,1635,1636,1639,1641],{"class":47,"line":104},[45,1637,1638],{"class":69},"  block_public_policy",[45,1640,1507],{"class":59},[45,1642,1633],{"class":129},[45,1644,1645],{"class":47,"line":115},[45,1646,1543],{"class":69},[45,1648,1649],{"class":47,"line":120},[45,1650,80],{"emptyLinePlaceholder":79},[45,1652,1653,1655,1658,1661],{"class":47,"line":133},[45,1654,1595],{"class":51},[45,1656,1657],{"class":129}," \"aws_s3_bucket\"",[45,1659,1660],{"class":129}," \"demobucket\"",[45,1662,1473],{"class":69},[45,1664,1665,1667,1669],{"class":47,"line":138},[45,1666,1608],{"class":69},[45,1668,1507],{"class":59},[45,1670,1671],{"class":55}," \"terraformdemobucket\"\n",[45,1673,1674,1677,1679],{"class":47,"line":144},[45,1675,1676],{"class":69},"  acl",[45,1678,1507],{"class":59},[45,1680,1681],{"class":55}," \"private\"\n",[45,1683,1684],{"class":47,"line":149},[45,1685,1543],{"class":69},[12,1687,1688],{},"Tip: You can verify the configuration locally on your CLI by commenting out the HTTP backend above.",[12,1690,1691,1692,485,1695,1698,1699,653],{},"For GitLab CI/CD, open the pipeline editor and use the following configuration: (Note that it is important to specify the ",[31,1693,1694],{},"TF_ROOT",[31,1696,1697],{},"TF_ADDRESS"," variables since you can ",[24,1700,1703],{"href":1701,"rel":1702},"https://docs.gitlab.com/user/infrastructure/iac/terraform_state/#configure-the-backend",[],"manage multiple Terraform state files",[36,1705,1707],{"className":682,"code":1706,"language":684,"meta":41,"style":41},"variables:\n  TF_ROOT: ${CI_PROJECT_DIR}\n  TF_ADDRESS: ${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/terraform/state/${CI_PROJECT_NAME}\n\ninclude:\n    - template: Terraform.latest.gitlab-ci.yml\n\nstages:\n  - init\n  - validate\n  - build\n  - deploy\n  - cleanup\n\ndestroy:\n    stage: cleanup\n    extends: .terraform:destroy\n    when: manual\n    allow_failure: true\n\n",[31,1708,1709,1716,1726,1736,1740,1746,1757,1761,1767,1774,1781,1787,1793,1800,1804,1811,1819,1829,1838],{"__ignoreMap":41},[45,1710,1711,1714],{"class":47,"line":48},[45,1712,1713],{"class":315},"variables",[45,1715,694],{"class":69},[45,1717,1718,1721,1723],{"class":47,"line":76},[45,1719,1720],{"class":315},"  TF_ROOT",[45,1722,744],{"class":69},[45,1724,1725],{"class":55},"${CI_PROJECT_DIR}\n",[45,1727,1728,1731,1733],{"class":47,"line":83},[45,1729,1730],{"class":315},"  TF_ADDRESS",[45,1732,744],{"class":69},[45,1734,1735],{"class":55},"${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/terraform/state/${CI_PROJECT_NAME}\n",[45,1737,1738],{"class":47,"line":104},[45,1739,80],{"emptyLinePlaceholder":79},[45,1741,1742,1744],{"class":47,"line":115},[45,1743,732],{"class":315},[45,1745,694],{"class":69},[45,1747,1748,1750,1752,1754],{"class":47,"line":120},[45,1749,699],{"class":69},[45,1751,741],{"class":315},[45,1753,744],{"class":69},[45,1755,1756],{"class":55},"Terraform.latest.gitlab-ci.yml\n",[45,1758,1759],{"class":47,"line":133},[45,1760,80],{"emptyLinePlaceholder":79},[45,1762,1763,1765],{"class":47,"line":138},[45,1764,691],{"class":315},[45,1766,694],{"class":69},[45,1768,1769,1771],{"class":47,"line":144},[45,1770,822],{"class":69},[45,1772,1773],{"class":55},"init\n",[45,1775,1776,1778],{"class":47,"line":149},[45,1777,822],{"class":69},[45,1779,1780],{"class":55},"validate\n",[45,1782,1783,1785],{"class":47,"line":155},[45,1784,822],{"class":69},[45,1786,702],{"class":55},[45,1788,1789,1791],{"class":47,"line":160},[45,1790,822],{"class":69},[45,1792,723],{"class":55},[45,1794,1795,1797],{"class":47,"line":265},[45,1796,822],{"class":69},[45,1798,1799],{"class":55},"cleanup\n",[45,1801,1802],{"class":47,"line":271},[45,1803,80],{"emptyLinePlaceholder":79},[45,1805,1806,1809],{"class":47,"line":276},[45,1807,1808],{"class":315},"destroy",[45,1810,694],{"class":69},[45,1812,1813,1815,1817],{"class":47,"line":282},[45,1814,762],{"class":315},[45,1816,744],{"class":69},[45,1818,1799],{"class":55},[45,1820,1821,1824,1826],{"class":47,"line":287},[45,1822,1823],{"class":315},"    extends",[45,1825,744],{"class":69},[45,1827,1828],{"class":55},".terraform:destroy\n",[45,1830,1831,1834,1836],{"class":47,"line":293},[45,1832,1833],{"class":315},"    when",[45,1835,744],{"class":69},[45,1837,936],{"class":55},[45,1839,1840,1843,1845],{"class":47,"line":298},[45,1841,1842],{"class":315},"    allow_failure",[45,1844,744],{"class":69},[45,1846,946],{"class":129},[12,1848,1849],{},"Commit the configuration and inspect the pipeline jobs.",[12,1851,1852,1856],{},[782,1853],{"alt":1854,"src":1855},"Terraform pipeline AWS S3 bucket","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399245/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_terraform_state_cicd_pipeline_aws_s3_bucket.png","\nAWS S3 bucket provisioned with Terraform in GitLab CI/CD",[12,1858,797,1859,1861,1862,174],{},[31,1860,1808],{}," job is not created in the template and therefore explicitly added as a manual job. It is recommended to review the opinionated Terraform CI/CD template and copy the jobs into your own configuration to allow for further modifications or style adjustments.  The full example is located in ",[24,1863,778],{"href":1864,"rel":1865},"https://gitlab.com/gitlab-da/playground/terraform-aws-state-10y-example",[],[12,1867,1868,1872],{},[782,1869],{"alt":1870,"src":1871},"GitLab managed Terraform states","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399231/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_terraform_state_cicd_overview.png","\nView the Terraform states in GitLab",[12,1874,1875,1876,1881,1882,174],{},"Hat tipping to our Package stage - you can manage and publish ",[24,1877,1880],{"href":1878,"rel":1879},"https://docs.gitlab.com/user/packages/terraform_module_registry/",[],"Terraform modules in the registry"," too, using all of the DevOps Platform advantages. And hot off the press, the ",[24,1883,1885],{"href":1884},"/blog/open-shift-ga/","GitLab Kubernetes Operator is generally available",[16,1887,1889],{"id":1888},"monitor-gitlab-and-dive-into-prometheus","Monitor GitLab and dive into Prometheus",[12,1891,1892,1893,1896,1897,1902,1903,1908],{},"Prometheus is a monitoring solution which collects metrics from ",[31,1894,1895],{},"/metrics"," HTTP endpoints made available by applications, as well as so-called exporters to serve services and host information in the specified metrics format. One example is CI/CD pipeline insights to analyse bottlenecks and ",[24,1898,1901],{"href":1899,"rel":1900},"https://docs.gitlab.com/ci/pipelines/pipeline_efficiency/",[],"make your pipelines more efficient",". The ",[24,1904,1907],{"href":1905,"rel":1906},"https://github.com/mvisonneau/gitlab-ci-pipelines-exporter/tree/main/examples/quickstart",[],"GitLab CI Pipeline Exporter project"," has a great quick start in under 5 minutes, bringing up demo setup with Docker-compose, Prometheus and Grafana. From there, it is not far into your production monitoring environment, and monitoring more of GitLab.",[12,1910,1911,1915],{},[782,1912],{"alt":1913,"src":1914},"GitLab CI Exporter","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399230/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_ci_pipeline_exporter_prometheus.png","\nExample dashboard for the GitLab CI Pipeline Exporter",[12,1917,1918,1919,1924,1925,1927,1928,1933],{},"The Prometheus Exporter uses the ",[24,1920,1923],{"href":1921,"rel":1922},"https://prometheus.io/docs/instrumenting/writing_exporters/",[],"Go client libraries",". They can be used to write your own exporter, or instrument your application code to expose ",[31,1926,1895],{},". When deployed, you can use Prometheus again to monitor the performance of your applications in Kubernetes, as one example. Find more monitoring ideas in my talk “",[24,1929,1932],{"href":1930,"rel":1931},"https://docs.google.com/presentation/d/1LPb-HPMgbc8_l98VjMEo5d0uYlnNnAtJSURngZPWDdE/edit",[],"From Monitoring to Observability: Left Shift your SLOs","”.",[16,1935,1937],{"id":1936},"protect","Protect",[12,1939,1940,1941,1946,1947,1952,1953,1958],{},"You can enable security features in GitLab by including the CI/CD templates one by one. A more easy way is to enable ",[24,1942,1945],{"href":1943,"rel":1944},"https://docs.gitlab.com/topics/autodevops/",[],"Auto DevOps"," and use the default best practices for ",[24,1948,1951],{"href":1949,"rel":1950},"https://docs.gitlab.com/user/application_security/#security-scanning-with-auto-devops",[],"security scans",". This includes ",[24,1954,1957],{"href":1955,"rel":1956},"https://docs.gitlab.com/topics/autodevops/stages/#auto-container-scanning",[],"container scanning"," ensuring that application deployments are not vulnerable on the container OS level.",[12,1960,1961,1962,1965],{},"Let’s try a quick example with a potentially vulnerable image, and the Docker template tip from the Package stage above. Create a new ",[31,1963,1964],{},"Dockerfile"," in a new project:",[36,1967,1969],{"className":682,"code":1968,"language":684,"meta":41,"style":41},"FROM debian:10.0\n",[31,1970,1971],{"__ignoreMap":41},[45,1972,1973],{"class":47,"line":48},[45,1974,1968],{"class":55},[12,1976,1977],{},"Open the pipeline editor and add the following CI/CD configuration:",[36,1979,1981],{"className":682,"code":1980,"language":684,"meta":41,"style":41},"# 1. Automatically build the Docker image\n# 2. Run container scanning. https://docs.gitlab.com/user/application_security/container_scanning/\n# 3. Inspect `Security & Compliance > Security Dashboard`\n\n# For demo purposes, scan the latest tagged image from 'main'\nvariables:\n    DOCKER_IMAGE: $CI_REGISTRY_IMAGE:latest\n\ninclude:\n    - template: Docker.gitlab-ci.yml\n    - template: Security/Container-Scanning.gitlab-ci.yml\n\n",[31,1982,1983,1988,1993,1998,2002,2007,2013,2023,2027,2033,2044],{"__ignoreMap":41},[45,1984,1985],{"class":47,"line":48},[45,1986,1987],{"class":211},"# 1. Automatically build the Docker image\n",[45,1989,1990],{"class":47,"line":76},[45,1991,1992],{"class":211},"# 2. Run container scanning. https://docs.gitlab.com/user/application_security/container_scanning/\n",[45,1994,1995],{"class":47,"line":83},[45,1996,1997],{"class":211},"# 3. Inspect `Security & Compliance > Security Dashboard`\n",[45,1999,2000],{"class":47,"line":104},[45,2001,80],{"emptyLinePlaceholder":79},[45,2003,2004],{"class":47,"line":115},[45,2005,2006],{"class":211},"# For demo purposes, scan the latest tagged image from 'main'\n",[45,2008,2009,2011],{"class":47,"line":120},[45,2010,1713],{"class":315},[45,2012,694],{"class":69},[45,2014,2015,2018,2020],{"class":47,"line":133},[45,2016,2017],{"class":315},"    DOCKER_IMAGE",[45,2019,744],{"class":69},[45,2021,2022],{"class":55},"$CI_REGISTRY_IMAGE:latest\n",[45,2024,2025],{"class":47,"line":138},[45,2026,80],{"emptyLinePlaceholder":79},[45,2028,2029,2031],{"class":47,"line":144},[45,2030,732],{"class":315},[45,2032,694],{"class":69},[45,2034,2035,2037,2039,2041],{"class":47,"line":149},[45,2036,699],{"class":69},[45,2038,741],{"class":315},[45,2040,744],{"class":69},[45,2042,2043],{"class":55},"Docker.gitlab-ci.yml\n",[45,2045,2046,2048,2050,2052],{"class":47,"line":155},[45,2047,699],{"class":69},[45,2049,741],{"class":315},[45,2051,744],{"class":69},[45,2053,2054],{"class":55},"Security/Container-Scanning.gitlab-ci.yml\n",[12,2056,2057,2058,174],{},"The full example is located in ",[24,2059,778],{"href":2060,"rel":2061},"https://gitlab.com/gitlab-da/playground/container-scanning-10y-example",[],[12,2063,2064,2065,2070],{},"Tip: Learn more about ",[24,2066,2069],{"href":2067,"rel":2068},"https://docs.gitlab.com/user/application_security/container_scanning/",[],"scanning container images in a deployed Kubernetes cluster"," to stay even more safe.",[12,2072,2073,2077],{},[782,2074],{"alt":2075,"src":2076},"Container Scanning Vulnerability Report","https://res.cloudinary.com/about-gitlab-com/image/upload/v1782399229/blog/Content%20Images/top-10-gitlab-hacks/gitlab_10y_container_scanning_vulnerability_report.png","\nView the container scanning vulnerability report",[16,2079,2081],{"id":2080},"whats-next","What’s next?",[12,2083,2084],{},"We have tried to find a great “hack” for each stage of the DevOps lifecycle. There are more hacks and hidden gems inside GitLab - share yours and be ready to explore more stages of the DevOps Platform.",[12,2086,2087,2088,2093,2094],{},"Cover image by ",[24,2089,2092],{"href":2090,"rel":2091},"https://unsplash.com/photos/diUGN5N5Rrs",[],"Alin Andersen"," on ",[24,2095,2098],{"href":2096,"rel":2097},"https://unsplash.com",[],"Unsplash",[2100,2101,2102],"style",{},"html pre.shiki code .s7eDp, html code.shiki .s7eDp{--shiki-default:#6F42C1}html pre.shiki code .sYBdl, html code.shiki .sYBdl{--shiki-default:#032F62}html pre.shiki code .sD7c4, html code.shiki .sD7c4{--shiki-default:#D73A49}html pre.shiki code .sgsFI, html code.shiki .sgsFI{--shiki-default:#24292E}html pre.shiki code .sYu0t, html code.shiki .sYu0t{--shiki-default:#005CC5}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html pre.shiki code .sAwPA, html code.shiki .sAwPA{--shiki-default:#6A737D}html pre.shiki code .shJU0, html code.shiki .shJU0{--shiki-default:#22863A}",{"title":41,"searchDepth":76,"depth":76,"links":2104},[2105,2106,2107,2108,2109,2110,2111,2112,2113,2114,2115],{"id":18,"depth":76,"text":19},{"id":177,"depth":76,"text":178},{"id":494,"depth":76,"text":495},{"id":599,"depth":76,"text":600},{"id":793,"depth":76,"text":794},{"id":958,"depth":76,"text":959},{"id":1048,"depth":76,"text":1049},{"id":1424,"depth":76,"text":1425},{"id":1888,"depth":76,"text":1889},{"id":1936,"depth":76,"text":1937},{"id":2080,"depth":76,"text":2081},"devsecops","2021-10-19","Get the most out of the GitLab DevOps Platform with our ten best tips for enhanced productivity.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749667482/Blog/Hero%20Images/cover-image-unsplash.jpg",{},"/en-us/blog/top-10-gitlab-hacks",{"title":5,"description":2118,"ogTitle":5,"ogDescription":2118,"noIndex":2121,"ogImage":2122,"ogUrl":2126,"ogSiteName":2127,"ogType":2128,"canonicalUrls":2126},"https://about.gitlab.com/blog/top-10-gitlab-hacks","https://about.gitlab.com","article","top-10-gitlab-hacks","en-us/blog/top-10-gitlab-hacks",[2132,2133,2134],"tutorial","DevOps","workflow","BlogPost","sbQ6Pp3GAdzzs2ay2M5qppwm0QczrI8IZohyaMvMbIc",{"logo":2138,"freeTrial":2143,"sales":2148,"login":2153,"items":2158,"search":2484,"minimal":2514,"duo":2533,"switchNav":2542,"pricingDeployment":2553},{"config":2139},{"href":2140,"dataGaName":2141,"dataGaLocation":2142},"/","gitlab logo","header",{"text":2144,"config":2145},"Get free trial",{"href":2146,"dataGaName":2147,"dataGaLocation":2142},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":2149,"config":2150},"Request a demo",{"href":2151,"dataGaName":2152,"dataGaLocation":2142},"/sales/?contact-topic=request-demo","sales",{"text":2154,"config":2155},"Sign in",{"href":2156,"dataGaName":2157,"dataGaLocation":2142},"https://gitlab.com/users/sign_in/","sign in",[2159,2188,2287,2292,2406,2462],{"text":2160,"config":2161,"menu":2163},"Platform",{"dataNavLevelOne":2162},"platform",{"type":2164,"columns":2165},"cards",[2166,2172,2180],{"title":2160,"description":2167,"link":2168},"The intelligent orchestration platform for DevSecOps",{"text":2169,"config":2170},"Explore our Platform",{"href":2171,"dataGaName":2162,"dataGaLocation":2142},"/platform/",{"title":2173,"description":2174,"link":2175},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":2176,"config":2177},"Meet GitLab Duo",{"href":2178,"dataGaName":2179,"dataGaLocation":2142},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":2181,"description":2182,"link":2183},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":2184,"config":2185},"Learn more",{"href":2186,"dataGaName":2187,"dataGaLocation":2142},"/why-gitlab/","why gitlab",{"text":2189,"left":79,"config":2190,"menu":2192},"Product",{"dataNavLevelOne":2191},"solutions",{"type":2193,"link":2194,"columns":2198,"feature":2266},"lists",{"text":2195,"config":2196},"View all Solutions",{"href":2197,"dataGaName":2191,"dataGaLocation":2142},"/solutions/",[2199,2222,2245],{"title":2200,"description":2201,"link":2202,"items":2207},"Automation","CI/CD and automation to accelerate deployment",{"config":2203},{"icon":2204,"href":2205,"dataGaName":2206,"dataGaLocation":2142},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[2208,2211,2214,2218],{"text":616,"config":2209},{"href":2210,"dataGaLocation":2142,"dataGaName":616},"/solutions/continuous-integration/",{"text":2173,"config":2212},{"href":2178,"dataGaLocation":2142,"dataGaName":2213},"gitlab duo agent platform - product menu",{"text":2215,"config":2216},"Source Code Management",{"href":2217,"dataGaLocation":2142,"dataGaName":2215},"/solutions/source-code-management/",{"text":2219,"config":2220},"Automated Software Delivery",{"href":2205,"dataGaLocation":2142,"dataGaName":2221},"Automated software delivery",{"title":2223,"description":2224,"link":2225,"items":2230},"Security","Deliver code faster without compromising security",{"config":2226},{"href":2227,"dataGaName":2228,"dataGaLocation":2142,"icon":2229},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[2231,2235,2240],{"text":2232,"config":2233},"Application Security Testing",{"href":2227,"dataGaName":2234,"dataGaLocation":2142},"Application security testing",{"text":2236,"config":2237},"Software Supply Chain Security",{"href":2238,"dataGaLocation":2142,"dataGaName":2239},"/solutions/supply-chain/","Software supply chain security",{"text":2241,"config":2242},"Software Compliance",{"href":2243,"dataGaName":2244,"dataGaLocation":2142},"/solutions/software-compliance/","software compliance",{"title":2246,"link":2247,"items":2252},"Measurement",{"config":2248},{"icon":2249,"href":2250,"dataGaName":2251,"dataGaLocation":2142},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[2253,2257,2261],{"text":2254,"config":2255},"Visibility & Measurement",{"href":2250,"dataGaLocation":2142,"dataGaName":2256},"Visibility and Measurement",{"text":2258,"config":2259},"Value Stream Management",{"href":2260,"dataGaLocation":2142,"dataGaName":2258},"/solutions/value-stream-management/",{"text":2262,"config":2263},"Analytics & Insights",{"href":2264,"dataGaLocation":2142,"dataGaName":2265},"/solutions/analytics-and-insights/","Analytics and insights",{"title":2267,"type":2193,"items":2268},"GitLab for",[2269,2275,2281],{"text":2270,"config":2271},"Enterprise",{"icon":2272,"href":2273,"dataGaLocation":2142,"dataGaName":2274},"Building","/enterprise/","enterprise",{"text":2276,"config":2277},"Small Business",{"icon":2278,"href":2279,"dataGaLocation":2142,"dataGaName":2280},"Work","/small-business/","small business",{"text":2282,"config":2283},"Public Sector",{"icon":2284,"href":2285,"dataGaLocation":2142,"dataGaName":2286},"Organization","/solutions/public-sector/","public sector",{"text":2288,"config":2289},"Pricing",{"href":2290,"dataGaName":2291,"dataGaLocation":2142,"dataNavLevelOne":2291},"/pricing/","pricing",{"text":2293,"config":2294,"menu":2296},"Resources",{"dataNavLevelOne":2295},"resources",{"type":2193,"link":2297,"columns":2301,"feature":2395},{"text":2298,"config":2299},"View all resources",{"href":2300,"dataGaName":2295,"dataGaLocation":2142},"/resources/",[2302,2335,2362],{"title":2303,"items":2304},"Getting started",[2305,2310,2315,2320,2325,2330],{"text":2306,"config":2307},"Install",{"href":2308,"dataGaName":2309,"dataGaLocation":2142},"/install/","install",{"text":2311,"config":2312},"Quick start guides",{"href":2313,"dataGaName":2314,"dataGaLocation":2142},"/get-started/","quick setup checklists",{"text":2316,"config":2317},"Learn",{"href":2318,"dataGaLocation":2142,"dataGaName":2319},"https://university.gitlab.com/","learn",{"text":2321,"config":2322},"Product documentation",{"href":2323,"dataGaName":2324,"dataGaLocation":2142},"https://docs.gitlab.com/","product documentation",{"text":2326,"config":2327},"Best practice videos",{"href":2328,"dataGaName":2329,"dataGaLocation":2142},"/getting-started-videos/","best practice videos",{"text":2331,"config":2332},"Integrations",{"href":2333,"dataGaName":2334,"dataGaLocation":2142},"/integrations/","integrations",{"title":2336,"items":2337},"Discover",[2338,2343,2348,2353,2357],{"text":2339,"config":2340},"Customer success stories",{"href":2341,"dataGaName":2342,"dataGaLocation":2142},"/customers/","customer success stories",{"text":2344,"config":2345},"Blog",{"href":2346,"dataGaName":2347,"dataGaLocation":2142},"/blog/","blog",{"text":2349,"config":2350},"Demo Hub",{"href":2351,"dataGaName":2352,"dataGaLocation":2142},"/demo-hub/","demo hub",{"text":2354,"config":2355},"The Source",{"href":2356,"dataGaName":2347,"dataGaLocation":2142},"/the-source/",{"text":2358,"config":2359},"Remote",{"href":2360,"dataGaName":2361,"dataGaLocation":2142},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":2363,"items":2364},"Connect",[2365,2370,2375,2380,2385,2390],{"text":2366,"config":2367},"GitLab Services",{"href":2368,"dataGaName":2369,"dataGaLocation":2142},"/services/","services",{"text":2371,"config":2372},"Contribute",{"href":2373,"dataGaName":2374,"dataGaLocation":2142},"https://contributors.gitlab.com","contribute",{"text":2376,"config":2377},"Community",{"href":2378,"dataGaName":2379,"dataGaLocation":2142},"/community/","community",{"text":2381,"config":2382},"Forum",{"href":2383,"dataGaName":2384,"dataGaLocation":2142},"https://forum.gitlab.com/","forum",{"text":2386,"config":2387},"Events",{"href":2388,"dataGaName":2389,"dataGaLocation":2142},"/events/","events",{"text":2391,"config":2392},"Partners",{"href":2393,"dataGaName":2394,"dataGaLocation":2142},"/partners/","partners",{"config":2396,"title":2399,"text":2400,"link":2401},{"background":2397,"textColor":2398},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":2402,"config":2403},"Read the latest",{"href":2404,"dataGaName":2405,"dataGaLocation":2142},"/whats-new/","whats new",{"text":2407,"config":2408,"menu":2410},"Company",{"dataNavLevelOne":2409},"company",{"type":2193,"columns":2411},[2412],{"items":2413},[2414,2419,2425,2427,2432,2437,2442,2447,2452,2457],{"text":2415,"config":2416},"About",{"href":2417,"dataGaName":2418,"dataGaLocation":2142},"/company/","about",{"text":2420,"config":2421,"footerGa":2424},"Jobs",{"href":2422,"dataGaName":2423,"dataGaLocation":2142},"/jobs/","jobs",{"dataGaName":2423},{"text":2386,"config":2426},{"href":2388,"dataGaName":2389,"dataGaLocation":2142},{"text":2428,"config":2429},"Leadership",{"href":2430,"dataGaName":2431,"dataGaLocation":2142},"/company/team/e-group/","leadership",{"text":2433,"config":2434},"Handbook",{"href":2435,"dataGaName":2436,"dataGaLocation":2142},"https://handbook.gitlab.com/","handbook",{"text":2438,"config":2439},"Investor relations",{"href":2440,"dataGaName":2441,"dataGaLocation":2142},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":2443,"config":2444},"Trust Center",{"href":2445,"dataGaName":2446,"dataGaLocation":2142},"/security/","trust center",{"text":2448,"config":2449},"AI Transparency Center",{"href":2450,"dataGaName":2451,"dataGaLocation":2142},"/ai-transparency-center/","ai transparency center",{"text":2453,"config":2454},"Newsletter",{"href":2455,"dataGaName":2456,"dataGaLocation":2142},"/company/contact/#contact-forms","newsletter",{"text":2458,"config":2459},"Press",{"href":2460,"dataGaName":2461,"dataGaLocation":2142},"/press/","press",{"text":2463,"config":2464,"menu":2465},"Contact us",{"dataNavLevelOne":2409},{"type":2193,"columns":2466},[2467],{"items":2468},[2469,2474,2479],{"text":2470,"config":2471},"Talk to sales",{"href":2472,"dataGaName":2473,"dataGaLocation":2142},"/sales/","talk to sales",{"text":2475,"config":2476},"Support portal",{"href":2477,"dataGaName":2478,"dataGaLocation":2142},"https://support.gitlab.com/hc/en-us","support portal",{"text":2480,"config":2481},"Customer portal",{"href":2482,"dataGaName":2483,"dataGaLocation":2142},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":2485,"login":2486,"suggestions":2492},"Close",{"text":2487,"link":2488},"To search repositories and projects, login to",{"text":2489,"config":2490},"gitlab.com",{"href":2156,"dataGaName":2491,"dataGaLocation":63},"search login",{"text":2493,"default":2494},"Suggestions",[2495,2497,2501,2503,2507,2511],{"text":2173,"config":2496},{"href":2178,"dataGaName":2173,"dataGaLocation":63},{"text":2498,"config":2499},"Code Suggestions (AI)",{"href":2500,"dataGaName":2498,"dataGaLocation":63},"/solutions/code-suggestions/",{"text":616,"config":2502},{"href":2210,"dataGaName":616,"dataGaLocation":63},{"text":2504,"config":2505},"GitLab on AWS",{"href":2506,"dataGaName":2504,"dataGaLocation":63},"/partners/technology-partners/aws/",{"text":2508,"config":2509},"GitLab on Google Cloud",{"href":2510,"dataGaName":2508,"dataGaLocation":63},"/partners/technology-partners/google-cloud-platform/",{"text":2512,"config":2513},"Why GitLab?",{"href":2186,"dataGaName":2512,"dataGaLocation":63},{"freeTrial":2515,"mobileIcon":2520,"desktopIcon":2525,"secondaryButton":2528},{"text":2516,"config":2517},"Start free trial",{"href":2518,"dataGaName":2147,"dataGaLocation":2519},"https://gitlab.com/-/trials/new/","nav",{"altText":2521,"config":2522},"Gitlab Icon",{"src":2523,"dataGaName":2524,"dataGaLocation":2519},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":2521,"config":2526},{"src":2527,"dataGaName":2524,"dataGaLocation":2519},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":2529,"config":2530},"Get Started",{"href":2531,"dataGaName":2532,"dataGaLocation":2519},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":2534,"mobileIcon":2538,"desktopIcon":2540},{"text":2535,"config":2536},"Learn more about GitLab Duo",{"href":2178,"dataGaName":2537,"dataGaLocation":2519},"gitlab duo",{"altText":2521,"config":2539},{"src":2523,"dataGaName":2524,"dataGaLocation":2519},{"altText":2521,"config":2541},{"src":2527,"dataGaName":2524,"dataGaLocation":2519},{"button":2543,"mobileIcon":2548,"desktopIcon":2550},{"text":2544,"config":2545},"/switch",{"href":2546,"dataGaName":2547,"dataGaLocation":2519},"#contact","switch",{"altText":2521,"config":2549},{"src":2523,"dataGaName":2524,"dataGaLocation":2519},{"altText":2521,"config":2551},{"src":2552,"dataGaName":2524,"dataGaLocation":2519},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":2554,"mobileIcon":2559,"desktopIcon":2561},{"text":2555,"config":2556},"Back to pricing",{"href":2290,"dataGaName":2557,"dataGaLocation":2519,"icon":2558},"back to pricing","GoBack",{"altText":2521,"config":2560},{"src":2523,"dataGaName":2524,"dataGaLocation":2519},{"altText":2521,"config":2562},{"src":2527,"dataGaName":2524,"dataGaLocation":2519},{"title":2564,"titleMobile":2565,"button":2566,"config":2571},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":2184,"config":2567},{"href":2568,"dataGaName":2569,"dataGaLocation":2570},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":2572,"disabled":2121},"release",{"data":2574},{"text":2575,"source":2576,"edit":2582,"contribute":2587,"config":2592,"items":2597,"minimal":2805},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":2577,"config":2578},"View page source",{"href":2579,"dataGaName":2580,"dataGaLocation":2581},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":2583,"config":2584},"Edit this page",{"href":2585,"dataGaName":2586,"dataGaLocation":2581},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":2588,"config":2589},"Please contribute",{"href":2590,"dataGaName":2591,"dataGaLocation":2581},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":2593,"facebook":2594,"youtube":2595,"linkedin":2596},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[2598,2645,2697,2741,2773],{"title":2288,"links":2599,"subMenu":2614},[2600,2604,2609],{"text":2601,"config":2602},"View plans",{"href":2290,"dataGaName":2603,"dataGaLocation":2581},"view plans",{"text":2605,"config":2606},"Why Premium?",{"href":2607,"dataGaName":2608,"dataGaLocation":2581},"/pricing/premium/","why premium",{"text":2610,"config":2611},"Why Ultimate?",{"href":2612,"dataGaName":2613,"dataGaLocation":2581},"/pricing/ultimate/","why ultimate",[2615],{"title":2616,"links":2617},"Contact Us",[2618,2621,2623,2625,2630,2635,2640],{"text":2619,"config":2620},"Contact sales",{"href":2472,"dataGaName":2152,"dataGaLocation":2581},{"text":2475,"config":2622},{"href":2477,"dataGaName":2478,"dataGaLocation":2581},{"text":2480,"config":2624},{"href":2482,"dataGaName":2483,"dataGaLocation":2581},{"text":2626,"config":2627},"Status",{"href":2628,"dataGaName":2629,"dataGaLocation":2581},"https://status.gitlab.com/","status",{"text":2631,"config":2632},"Terms of use",{"href":2633,"dataGaName":2634,"dataGaLocation":2581},"/terms/","terms of use",{"text":2636,"config":2637},"Privacy statement",{"href":2638,"dataGaName":2639,"dataGaLocation":2581},"/privacy/","privacy statement",{"text":2641,"config":2642},"Cookie preferences",{"dataGaName":2643,"dataGaLocation":2581,"id":2644,"isOneTrustButton":79},"cookie preferences","ot-sdk-btn",{"title":2189,"links":2646,"subMenu":2655},[2647,2651],{"text":2648,"config":2649},"DevSecOps platform",{"href":2171,"dataGaName":2650,"dataGaLocation":2581},"devsecops platform",{"text":2652,"config":2653},"AI-Assisted Development",{"href":2178,"dataGaName":2654,"dataGaLocation":2581},"ai-assisted development",[2656],{"title":2657,"links":2658},"Topics",[2659,2664,2669,2673,2678,2682,2687,2692],{"text":2660,"config":2661},"CICD",{"href":2662,"dataGaName":2663,"dataGaLocation":2581},"/topics/ci-cd/","cicd",{"text":2665,"config":2666},"GitOps",{"href":2667,"dataGaName":2668,"dataGaLocation":2581},"/topics/gitops/","gitops",{"text":2133,"config":2670},{"href":2671,"dataGaName":2672,"dataGaLocation":2581},"/topics/devops/","devops",{"text":2674,"config":2675},"Version Control",{"href":2676,"dataGaName":2677,"dataGaLocation":2581},"/topics/version-control/","version control",{"text":2679,"config":2680},"DevSecOps",{"href":2681,"dataGaName":2116,"dataGaLocation":2581},"/topics/devsecops/",{"text":2683,"config":2684},"Cloud Native",{"href":2685,"dataGaName":2686,"dataGaLocation":2581},"/topics/cloud-native/","cloud native",{"text":2688,"config":2689},"AI for Coding",{"href":2690,"dataGaName":2691,"dataGaLocation":2581},"/topics/devops/ai-for-coding/","ai for coding",{"text":2693,"config":2694},"Agentic AI",{"href":2695,"dataGaName":2696,"dataGaLocation":2581},"/topics/agentic-ai/","agentic ai",{"title":2698,"links":2699},"Solutions",[2700,2702,2704,2709,2713,2716,2720,2723,2725,2728,2731,2736],{"text":2232,"config":2701},{"href":2227,"dataGaName":2232,"dataGaLocation":2581},{"text":2221,"config":2703},{"href":2205,"dataGaName":2206,"dataGaLocation":2581},{"text":2705,"config":2706},"Agile development",{"href":2707,"dataGaName":2708,"dataGaLocation":2581},"/solutions/agile-delivery/","agile delivery",{"text":2710,"config":2711},"SCM",{"href":2217,"dataGaName":2712,"dataGaLocation":2581},"source code management",{"text":2660,"config":2714},{"href":2210,"dataGaName":2715,"dataGaLocation":2581},"continuous integration & delivery",{"text":2717,"config":2718},"Value stream management",{"href":2260,"dataGaName":2719,"dataGaLocation":2581},"value stream management",{"text":2665,"config":2721},{"href":2722,"dataGaName":2668,"dataGaLocation":2581},"/solutions/gitops/",{"text":2270,"config":2724},{"href":2273,"dataGaName":2274,"dataGaLocation":2581},{"text":2726,"config":2727},"Small business",{"href":2279,"dataGaName":2280,"dataGaLocation":2581},{"text":2729,"config":2730},"Public sector",{"href":2285,"dataGaName":2286,"dataGaLocation":2581},{"text":2732,"config":2733},"Education",{"href":2734,"dataGaName":2735,"dataGaLocation":2581},"/solutions/education/","education",{"text":2737,"config":2738},"Financial services",{"href":2739,"dataGaName":2740,"dataGaLocation":2581},"/solutions/finance/","financial services",{"title":2293,"links":2742},[2743,2745,2747,2749,2752,2754,2757,2759,2761,2763,2765,2767,2769,2771],{"text":2306,"config":2744},{"href":2308,"dataGaName":2309,"dataGaLocation":2581},{"text":2311,"config":2746},{"href":2313,"dataGaName":2314,"dataGaLocation":2581},{"text":2316,"config":2748},{"href":2318,"dataGaName":2319,"dataGaLocation":2581},{"text":2321,"config":2750},{"href":2323,"dataGaName":2751,"dataGaLocation":2581},"docs",{"text":2344,"config":2753},{"href":2346,"dataGaName":2347,"dataGaLocation":2581},{"text":2755,"config":2756},"What's new",{"href":2404,"dataGaName":2405,"dataGaLocation":2581},{"text":2339,"config":2758},{"href":2341,"dataGaName":2342,"dataGaLocation":2581},{"text":2358,"config":2760},{"href":2360,"dataGaName":2361,"dataGaLocation":2581},{"text":2366,"config":2762},{"href":2368,"dataGaName":2369,"dataGaLocation":2581},{"text":2371,"config":2764},{"href":2373,"dataGaName":2374,"dataGaLocation":2581},{"text":2376,"config":2766},{"href":2378,"dataGaName":2379,"dataGaLocation":2581},{"text":2381,"config":2768},{"href":2383,"dataGaName":2384,"dataGaLocation":2581},{"text":2386,"config":2770},{"href":2388,"dataGaName":2389,"dataGaLocation":2581},{"text":2391,"config":2772},{"href":2393,"dataGaName":2394,"dataGaLocation":2581},{"title":2407,"links":2774},[2775,2777,2779,2781,2783,2785,2789,2794,2796,2798,2800],{"text":2415,"config":2776},{"href":2417,"dataGaName":2409,"dataGaLocation":2581},{"text":2420,"config":2778},{"href":2422,"dataGaName":2423,"dataGaLocation":2581},{"text":2428,"config":2780},{"href":2430,"dataGaName":2431,"dataGaLocation":2581},{"text":2433,"config":2782},{"href":2435,"dataGaName":2436,"dataGaLocation":2581},{"text":2438,"config":2784},{"href":2440,"dataGaName":2441,"dataGaLocation":2581},{"text":2786,"config":2787},"Sustainability",{"href":2788,"dataGaName":2786,"dataGaLocation":2581},"/sustainability/",{"text":2790,"config":2791},"Diversity, inclusion and belonging (DIB)",{"href":2792,"dataGaName":2793,"dataGaLocation":2581},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":2443,"config":2795},{"href":2445,"dataGaName":2446,"dataGaLocation":2581},{"text":2453,"config":2797},{"href":2455,"dataGaName":2456,"dataGaLocation":2581},{"text":2458,"config":2799},{"href":2460,"dataGaName":2461,"dataGaLocation":2581},{"text":2801,"config":2802},"Modern Slavery Transparency Statement",{"href":2803,"dataGaName":2804,"dataGaLocation":2581},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":2806},[2807,2810,2813],{"text":2808,"config":2809},"Terms",{"href":2633,"dataGaName":2634,"dataGaLocation":2581},{"text":2811,"config":2812},"Cookies",{"dataGaName":2643,"dataGaLocation":2581,"id":2644,"isOneTrustButton":79},{"text":2814,"config":2815},"Privacy",{"href":2638,"dataGaName":2639,"dataGaLocation":2581},[2817],{"id":2818,"title":7,"body":2120,"config":2819,"content":2821,"description":2120,"extension":2825,"meta":2826,"navigation":79,"path":2827,"seo":2828,"stem":2829,"__hash__":2830},"blogAuthors/en-us/blog/authors/michael-friedrich.yml",{"template":2820},"BlogAuthor",{"name":7,"config":2822},{"headshot":2823,"ctfId":2824},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659879/Blog/Author%20Headshots/dnsmichi-headshot.jpg","dnsmichi","yml",{},"/en-us/blog/authors/michael-friedrich",{},"en-us/blog/authors/michael-friedrich","lJ-nfRIhdG49Arfrxdn1Vv4UppwD51BB13S3HwIswt4",[2832,2840,2848],{"title":2833,"description":2834,"heroImage":2835,"category":2116,"date":2836,"authors":2837,"slug":2839,"externalUrl":2120},"Consolidate your GitLab stack with Gitaly on Kubernetes","Discover how to install Gitaly on Kubernetes, which is now generally available.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756500636/wmey6kqzzuhirk88w2de.png","2026-05-07",[2838],"Olivier Campeau","gitaly-on-kubernetes-generally-available",{"title":2841,"description":2842,"heroImage":2843,"category":2116,"date":2844,"authors":2845,"slug":2847,"externalUrl":2120},"Teaching software development the easy way using GitLab","Learn how University of Washington lecturer Stephen G. Dame uses GitLab for Education to manage student assignments, distribute course materials, and provide inline code feedback at scale.\n","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659537/Blog/Hero%20Images/display-article-image-0679-1800x945-fy26.png","2026-04-29",[2846],"Rod Burns","teaching-software-development-the-easy-way-using-gitlab",{"title":2849,"description":2850,"heroImage":2851,"category":2116,"date":2852,"authors":2853,"slug":2855,"externalUrl":2120},"AI is reshaping DevSecOps: Attend GitLab Transcend to see what’s next","AI-generated code is 34% of development work. Discover how to balance productivity gains with quality, reliability, and security.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1767982271/e9ogyosmuummq7j65zqg.png","2026-01-08",[2854],"Manav Khurana","ai-is-reshaping-devsecops-attend-gitlab-transcend-to-see-whats-next",{"promotions":2857},[2858,2872,2884,2896],{"id":2859,"categories":2860,"header":2862,"text":2863,"button":2864,"image":2869},"ai-modernization",[2861],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":2865,"config":2866},"Get your AI maturity score",{"href":2867,"dataGaName":2868,"dataGaLocation":2347},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":2870},{"src":2871},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":2873,"categories":2874,"header":2876,"text":2863,"button":2877,"image":2881},"devops-modernization",[2875,2116],"product","Are you just managing tools or shipping innovation?",{"text":2878,"config":2879},"Get your DevOps maturity score",{"href":2880,"dataGaName":2868,"dataGaLocation":2347},"/assessments/devops-modernization-assessment/",{"config":2882},{"src":2883},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":2885,"categories":2886,"header":2888,"text":2863,"button":2889,"image":2893},"security-modernization",[2887],"security","Are you trading speed for security?",{"text":2890,"config":2891},"Get your security maturity score",{"href":2892,"dataGaName":2868,"dataGaLocation":2347},"/assessments/security-modernization-assessment/",{"config":2894},{"src":2895},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":2897,"paths":2898,"header":2901,"text":2902,"button":2903,"image":2908},"github-azure-migration",[2899,2900],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":2904,"config":2905},"See how GitLab compares to GitHub",{"href":2906,"dataGaName":2907,"dataGaLocation":2347},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":2909},{"src":2883},{"header":2911,"blurb":2912,"button":2913,"secondaryButton":2918},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":2914,"config":2915},"Get your free trial",{"href":2916,"dataGaName":2147,"dataGaLocation":2917},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":2619,"config":2919},{"href":2472,"dataGaName":2152,"dataGaLocation":2917},1786803775826]