[{"data":1,"prerenderedAt":1633},["ShallowReactive",2],{"/de-de/blog/comprehensive-guide-to-gitlab-dast":3,"navigation-de-de":850,"banner-de-de":1281,"footer-de-de":1290,"blog-post-authors-de-de-Fernando Diaz":1531,"blog-related-posts-de-de-comprehensive-guide-to-gitlab-dast":1546,"blog-promotions-de-de":1570,"next-steps-de-de":1623},{"id":4,"title":5,"authors":6,"body":8,"category":834,"date":835,"description":836,"extension":837,"externalUrl":838,"faq":838,"featured":253,"heroImage":839,"meta":840,"navigation":253,"path":841,"seo":842,"slug":843,"stem":844,"tags":845,"template":848,"updatedDate":838,"__hash__":849},"blogPosts/de-de/blog/comprehensive-guide-to-gitlab-dast.md","Systematische Anwendungssicherheit mit GitLab DAST: Compliance-Framework für deutsche Unternehmen",[7],"Fernando Diaz",{"type":9,"value":10,"toc":814},"minimark",[11,15,25,30,33,38,41,76,97,123,127,130,150,154,157,177,180,184,187,218,222,237,306,309,323,329,504,508,511,517,531,537,551,557,561,567,651,654,665,669,672,676,693,697,714,718,721,724,738,741,745,748,751,755,758,768,783,787,790,793,796,810],[12,13,14],"p",{},"Moderne Unternehmen nutzen webbasierte Plattformen für Kundeninteraktionen, Finanztransaktionen und Geschäftsprozesse. Die digitale Transformation erweitert die Angriffsfläche dramatisch - Webanwendungen werden zu Hauptzielen für Cyberkriminelle.",[12,16,17,18,24],{},"Static Code Analysis erkennt nur Schwachstellen im Quellcode. Runtime-Sicherheitsprobleme bleiben verborgen, wenn Anwendungen mit realen Umgebungen, Drittanbieter-Services und Benutzer-Workflows interagieren. Dynamic Application Security Testing (",[19,20,23],"a",{"href":21,"rel":22},"https://docs.gitlab.com/user/application_security/dast/",[],"DAST",") schließt diese Lücke. GitLab DAST automatisiert Penetrationstests in CI/CD-Pipelines und validiert Sicherheit kontinuierlich ohne Workflow-Unterbrechung.",[26,27,29],"h2",{"id":28},"warum-dast-für-deutsche-unternehmen","Warum DAST für deutsche Unternehmen?",[12,31,32],{},"DAST testet Anwendungen in ihrer Betriebsumgebung und identifiziert Schwachstellen, die statische Analysen übersehen. GitLab DAST integriert sich in Shift-Left Security-Workflows und stärkt Compliance und Risikomanagement.",[34,35,37],"h3",{"id":36},"runtime-schwachstellen-erkennung","Runtime-Schwachstellen-Erkennung",[12,39,40],{},"DAST identifiziert Sicherheitsschwachstellen in laufenden Anwendungen. DAST-Scanner interagieren mit Live-Anwendungen wie externe Angreifer und decken Probleme auf wie:",[42,43,44,52,58,64,70],"ul",{},[45,46,47,51],"li",{},[48,49,50],"strong",{},"Authentifizierungs- und Session-Fehler",", die unbefugten Zugang ermöglichen",[45,53,54,57],{},[48,55,56],{},"Schwachstellen bei der Eingabevalidierung",", einschließlich SQL-Injection, Cross-Site-Scripting (XSS) und Command-Injection",[45,59,60,63],{},[48,61,62],{},"Konfigurationsschwächen"," in Webservern, Datenbanken und Anwendungs-Frameworks",[45,65,66,69],{},[48,67,68],{},"Fehler in der Geschäftslogik"," aus Benutzerinteraktionen",[45,71,72,75],{},[48,73,74],{},"API-Sicherheitsprobleme",", einschließlich unsachgemäßer Authentifizierung, Autorisierung und Datenexposition",[12,77,78,79,84,85,90,91,96],{},"DAST ergänzt andere Sicherheitstest-Ansätze für umfassende Anwendungssicherheits-Abdeckung. In Kombination mit Static Application Security Testing (",[19,80,83],{"href":81,"rel":82},"https://docs.gitlab.com/user/application_security/sast/",[],"SAST","), Software Composition Analysis (",[19,86,89],{"href":87,"rel":88},"https://docs.gitlab.com/user/application_security/dependency_scanning/",[],"SCA","), manuellen Penetrationstests und ",[19,92,95],{"href":93,"rel":94},"https://about.gitlab.com/solutions/application-security-testing/",[],"vielen anderen Scanner-Typen"," füllt DAST kritische Lücken in der Sicherheitsvalidierung:",[42,98,99,105,111,117],{},[45,100,101,104],{},[48,102,103],{},"Externe Testperspektive",", die reale Angriffsszenarien nachahmt",[45,106,107,110],{},[48,108,109],{},"Umgebungsspezifische Tests",", die Sicherheit in tatsächlichen Produktionsumgebungen validieren",[45,112,113,116],{},[48,114,115],{},"Drittanbieter-Komponenten-Tests",", einschließlich APIs, Bibliotheken und externe Services",[45,118,119,122],{},[48,120,121],{},"Konfigurationsvalidierung"," über den gesamten Anwendungsstack hinweg",[34,124,126],{"id":125},"nahtlose-shift-left-security-integration","Nahtlose Shift-Left Security Integration",[12,128,129],{},"GitLab DAST integriert sich in CI/CD-Pipelines und identifiziert Sicherheitsprobleme früh im Entwicklungszyklus. Dieser Shift-Left-Ansatz bietet Vorteile:",[42,131,132,138,144],{},[45,133,134,137],{},[48,135,136],{},"Kostensenkung"," – Schwachstellen während der Entwicklung zu beheben kostet 10 bis 100 Mal weniger als Korrekturen in der Produktion.",[45,139,140,143],{},[48,141,142],{},"Schnellere Markteinführung"," – Tests eliminieren Engpässe durch manuelle Security-Reviews.",[45,145,146,149],{},[48,147,148],{},"Entwickler-Stärkung"," – Sofortiges Feedback baut Sicherheitsbewusstsein auf.",[34,151,153],{"id":152},"compliance-und-risikomanagement","Compliance und Risikomanagement",[12,155,156],{},"Regulierungsrahmen und Industriestandards fordern regelmäßige Sicherheitstests von Webanwendungen. DAST erfüllt Compliance-Anforderungen für Standards wie:",[42,158,159,165,171],{},[45,160,161,164],{},[48,162,163],{},"PCI DSS"," für Anwendungen, die Zahlungskartensdaten verarbeiten",[45,166,167,170],{},[48,168,169],{},"SOC 2"," Sicherheitskontrollen für Service-Organisationen",[45,172,173,176],{},[48,174,175],{},"ISO 27001"," Informationssicherheits-Management-Anforderungen",[12,178,179],{},"GitLab DAST automatisiert Tests konsistent und wiederholbar. Auditoren vertrauen den Ergebnissen, während Berichte die nötige Dokumentation für Compliance-Validierung liefern.",[26,181,183],{"id":182},"dast-implementieren","DAST implementieren",[12,185,186],{},"Vor der Implementierung von GitLab DAST stellen Sie sicher, dass Ihre Umgebung folgende Anforderungen erfüllt:",[42,188,189,206,212],{},[45,190,191,194,195,200,201,205],{},[48,192,193],{},"GitLab Version und Ultimate-Abonnement"," – DAST ist in ",[19,196,199],{"href":197,"rel":198},"https://about.gitlab.com/pricing/ultimate/",[],"GitLab Ultimate"," verfügbar und benötigt GitLab 13.4 oder später für volle Funktionalität; jedoch wird die ",[19,202,204],{"href":203},"/de-de/whats-new/","neueste Version"," empfohlen.",[45,207,208,211],{},[48,209,210],{},"Anwendungszugänglichkeit"," – Ihre Anwendung muss über HTTP/HTTPS mit einer öffentlich erreichbaren URL oder innerhalb des Netzwerks Ihres GitLab Runners zugänglich sein.",[45,213,214,217],{},[48,215,216],{},"Authentifizierung-Setup"," – Falls Ihre Anwendung Authentifizierung erfordert, bereiten Sie Test-Credentials vor oder konfigurieren Sie Authentifizierungs-Bypass-Mechanismen für Sicherheitstests.",[34,219,221],{"id":220},"systematische-dast-integration-drei-konfigurationsebenen","Systematische DAST-Integration: Drei Konfigurationsebenen",[12,223,224,227,228,236],{},[48,225,226],{},"Grundkonfiguration für sofortigen Start:","\nDie einfachste DAST-Integration erfolgt durch Template-Einbindung in Ihre ",[19,229,232],{"href":230,"rel":231},"https://docs.gitlab.com/ci/#step-1-create-a-gitlab-ciyml-file",[],[233,234,235],"code",{},".gitlab-ci.yml"," Datei:",[238,239,244],"pre",{"className":240,"code":241,"language":242,"meta":243,"style":243},"language-yaml shiki shiki-themes github-light","\ninclude:\n  - template: DAST.gitlab-ci.yml\n\nvariables:\n  DAST_WEBSITE: \"https://your-application.example.com\"\n\n","yaml","",[233,245,246,255,266,282,287,295],{"__ignoreMap":243},[247,248,251],"span",{"class":249,"line":250},"line",1,[247,252,254],{"emptyLinePlaceholder":253},true,"\n",[247,256,258,262],{"class":249,"line":257},2,[247,259,261],{"class":260},"shJU0","include",[247,263,265],{"class":264},"sgsFI",":\n",[247,267,269,272,275,278],{"class":249,"line":268},3,[247,270,271],{"class":264},"  - ",[247,273,274],{"class":260},"template",[247,276,277],{"class":264},": ",[247,279,281],{"class":280},"sYBdl","DAST.gitlab-ci.yml\n",[247,283,285],{"class":249,"line":284},4,[247,286,254],{"emptyLinePlaceholder":253},[247,288,290,293],{"class":249,"line":289},5,[247,291,292],{"class":260},"variables",[247,294,265],{"class":264},[247,296,298,301,303],{"class":249,"line":297},6,[247,299,300],{"class":260},"  DAST_WEBSITE",[247,302,277],{"class":264},[247,304,305],{"class":280},"\"https://your-application.example.com\"\n",[12,307,308],{},"Diese Basiskonfiguration wird:",[42,310,311,314,317,320],{},[45,312,313],{},"Einen DAST-Scan gegen Ihre spezifizierte Website ausführen",[45,315,316],{},"Einen Sicherheitsbericht in GitLabs Security Dashboard generieren",[45,318,319],{},"Die Pipeline fehlschlagen lassen, falls hochschwere Schwachstellen erkannt werden",[45,321,322],{},"Scan-Ergebnisse als Pipeline-Artefakte speichern",[12,324,325,328],{},[48,326,327],{},"Systematische Pipeline-Integration:","\nFür umfassende CI/CD-Vorteile können Sie zuerst die Anwendung deployen und DAST so konfigurieren, dass es nur nach erfolgtem Deployment läuft:",[238,330,332],{"className":240,"code":331,"language":242,"meta":243,"style":243},"\nstages:\n  - build\n  - deploy\n  - dast\n\ninclude:\n  - template: Security/DAST.gitlab-ci.yml\n\n# Konfiguriert DAST für aktive Scans auf Nicht-Main-Branches und passive Scans auf Main-Branch\ndast:\n  stage: dast\n  rules:\n    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH\n      variables:\n        DAST_FULL_SCAN: \"false\"\n    - if: $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH\n      variables:\n        DAST_FULL_SCAN: \"true\"\n  dependencies:\n    - deploy\n\n",[233,333,334,338,345,352,359,366,370,377,389,394,401,409,419,427,441,449,460,472,479,489,497],{"__ignoreMap":243},[247,335,336],{"class":249,"line":250},[247,337,254],{"emptyLinePlaceholder":253},[247,339,340,343],{"class":249,"line":257},[247,341,342],{"class":260},"stages",[247,344,265],{"class":264},[247,346,347,349],{"class":249,"line":268},[247,348,271],{"class":264},[247,350,351],{"class":280},"build\n",[247,353,354,356],{"class":249,"line":284},[247,355,271],{"class":264},[247,357,358],{"class":280},"deploy\n",[247,360,361,363],{"class":249,"line":289},[247,362,271],{"class":264},[247,364,365],{"class":280},"dast\n",[247,367,368],{"class":249,"line":297},[247,369,254],{"emptyLinePlaceholder":253},[247,371,373,375],{"class":249,"line":372},7,[247,374,261],{"class":260},[247,376,265],{"class":264},[247,378,380,382,384,386],{"class":249,"line":379},8,[247,381,271],{"class":264},[247,383,274],{"class":260},[247,385,277],{"class":264},[247,387,388],{"class":280},"Security/DAST.gitlab-ci.yml\n",[247,390,392],{"class":249,"line":391},9,[247,393,254],{"emptyLinePlaceholder":253},[247,395,397],{"class":249,"line":396},10,[247,398,400],{"class":399},"sAwPA","# Konfiguriert DAST für aktive Scans auf Nicht-Main-Branches und passive Scans auf Main-Branch\n",[247,402,404,407],{"class":249,"line":403},11,[247,405,406],{"class":260},"dast",[247,408,265],{"class":264},[247,410,412,415,417],{"class":249,"line":411},12,[247,413,414],{"class":260},"  stage",[247,416,277],{"class":264},[247,418,365],{"class":280},[247,420,422,425],{"class":249,"line":421},13,[247,423,424],{"class":260},"  rules",[247,426,265],{"class":264},[247,428,430,433,436,438],{"class":249,"line":429},14,[247,431,432],{"class":264},"    - ",[247,434,435],{"class":260},"if",[247,437,277],{"class":264},[247,439,440],{"class":280},"$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH\n",[247,442,444,447],{"class":249,"line":443},15,[247,445,446],{"class":260},"      variables",[247,448,265],{"class":264},[247,450,452,455,457],{"class":249,"line":451},16,[247,453,454],{"class":260},"        DAST_FULL_SCAN",[247,456,277],{"class":264},[247,458,459],{"class":280},"\"false\"\n",[247,461,463,465,467,469],{"class":249,"line":462},17,[247,464,432],{"class":264},[247,466,435],{"class":260},[247,468,277],{"class":264},[247,470,471],{"class":280},"$CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH\n",[247,473,475,477],{"class":249,"line":474},18,[247,476,446],{"class":260},[247,478,265],{"class":264},[247,480,482,484,486],{"class":249,"line":481},19,[247,483,454],{"class":260},[247,485,277],{"class":264},[247,487,488],{"class":280},"\"true\"\n",[247,490,492,495],{"class":249,"line":491},20,[247,493,494],{"class":260},"  dependencies",[247,496,265],{"class":264},[247,498,500,502],{"class":249,"line":499},21,[247,501,432],{"class":264},[247,503,358],{"class":280},[34,505,507],{"id":506},"passive-vs-active-scanning-verstehen","Passive vs. Active Scanning verstehen",[12,509,510],{},"GitLab DAST verwendet zwei unterschiedliche Scanning-Methodologien (passiv und aktiv), die jeweils verschiedene Sicherheitstest-Bedürfnisse erfüllen.",[12,512,513,516],{},[48,514,515],{},"Passive Scans"," analysieren Server-Antworten ohne das Senden potenziell schädlicher Anfragen:",[42,518,519,522,525,528],{},[45,520,521],{},"Untersuchen HTTP-Headers, Cookies und Antwortinhalte auf Sicherheits-Fehlkonfigurationen",[45,523,524],{},"Identifizieren Information-Disclosure-Schwachstellen wie exponierte Server-Versionen",[45,526,527],{},"Erkennen fehlende Sicherheits-Headers (CSP, HSTS, X-Frame-Options)",[45,529,530],{},"Analysieren SSL/TLS-Konfiguration und Zertifikatsprobleme",[12,532,533,536],{},[48,534,535],{},"Active Scans"," senden gestaltete Anfragen, die Schwachstellen auslösen sollen:",[42,538,539,542,545,548],{},[45,540,541],{},"Testen auf Injection-Schwachstellen (SQL-Injection, XSS, Command-Injection)",[45,543,544],{},"Versuchen Authentifizierungs- und Autorisierungs-Fehler auszunutzen",[45,546,547],{},"Validieren Input-Sanitization und Output-Encoding",[45,549,550],{},"Testen auf Business-Logic-Schwachstellen",[12,552,553,556],{},[48,554,555],{},"Hinweis:"," Der DAST-Scanner ist standardmäßig auf passiv eingestellt.",[34,558,560],{"id":559},"authentifizierungs-konfiguration","Authentifizierungs-Konfiguration",[12,562,563,566],{},[48,564,565],{},"Enterprise-Authentifizierung für vollständige Abdeckung:","\nDAST benötigt Authentifizierungs-Konfiguration für umfassende Sicherheitsabdeckung:",[238,568,570],{"className":240,"code":569,"language":242,"meta":243,"style":243},"\nvariables:\n  DAST_AUTH_USERNAME: \"admin@tanuki.local\"\n  DAST_AUTH_PASSWORD: \"admin123\"\n  DAST_AUTH_USERNAME_FIELD: \"css:input[id=email]\"\n  DAST_AUTH_PASSWORD_FIELD: \"css:input[id=password]\"\n  DAST_AUTH_SUBMIT_FIELD: \"css:button[id=loginButton]\"\n  DAST_AUTH_REPORT: \"true\"\n  DAST_REQUEST_COOKIES: \"welcomebanner_status:dismiss\"\n\n",[233,571,572,576,582,592,602,612,622,632,641],{"__ignoreMap":243},[247,573,574],{"class":249,"line":250},[247,575,254],{"emptyLinePlaceholder":253},[247,577,578,580],{"class":249,"line":257},[247,579,292],{"class":260},[247,581,265],{"class":264},[247,583,584,587,589],{"class":249,"line":268},[247,585,586],{"class":260},"  DAST_AUTH_USERNAME",[247,588,277],{"class":264},[247,590,591],{"class":280},"\"admin@tanuki.local\"\n",[247,593,594,597,599],{"class":249,"line":284},[247,595,596],{"class":260},"  DAST_AUTH_PASSWORD",[247,598,277],{"class":264},[247,600,601],{"class":280},"\"admin123\"\n",[247,603,604,607,609],{"class":249,"line":289},[247,605,606],{"class":260},"  DAST_AUTH_USERNAME_FIELD",[247,608,277],{"class":264},[247,610,611],{"class":280},"\"css:input[id=email]\"\n",[247,613,614,617,619],{"class":249,"line":297},[247,615,616],{"class":260},"  DAST_AUTH_PASSWORD_FIELD",[247,618,277],{"class":264},[247,620,621],{"class":280},"\"css:input[id=password]\"\n",[247,623,624,627,629],{"class":249,"line":372},[247,625,626],{"class":260},"  DAST_AUTH_SUBMIT_FIELD",[247,628,277],{"class":264},[247,630,631],{"class":280},"\"css:button[id=loginButton]\"\n",[247,633,634,637,639],{"class":249,"line":379},[247,635,636],{"class":260},"  DAST_AUTH_REPORT",[247,638,277],{"class":264},[247,640,488],{"class":280},[247,642,643,646,648],{"class":249,"line":391},[247,644,645],{"class":260},"  DAST_REQUEST_COOKIES",[247,647,277],{"class":264},[247,649,650],{"class":280},"\"welcomebanner_status:dismiss\"\n",[12,652,653],{},"Verfügbare Authentifizierungs-Optionen:",[42,655,656,659,662],{},[45,657,658],{},"Einstufige Login-Formulare",[45,660,661],{},"Mehrstufige Login-Formulare",[45,663,664],{},"Authentifizierung zu URLs außerhalb des Zielbereichs",[26,666,668],{"id":667},"ergebnisse-in-merge-requests-anzeigen","Ergebnisse in Merge Requests anzeigen",[12,670,671],{},"GitLabs DAST integriert Sicherheits-Scanning nahtlos in Ihren Entwicklungsworkflow durch direkte Anzeige der Ergebnisse in Merge Requests. Diese umfassen umfassende Schwachstellen-Daten, die Entwicklern helfen, Sicherheitsprobleme vor der Integration zu identifizieren und zu beheben.",[34,673,675],{"id":674},"schwachstellen-details","Schwachstellen-Details",[42,677,678,681,684,687,690],{},[45,679,680],{},"Schwachstellen-Name und -Typ (z.B. SQL-Injection, XSS, CSRF)",[45,682,683],{},"Schweregrad (Critical, High, Medium, Low, Info)",[45,685,686],{},"CVSS-Score wenn anwendbar",[45,688,689],{},"Common Weakness Enumeration (CWE) Identifier",[45,691,692],{},"Vertrauensniveau des Befunds",[34,694,696],{"id":695},"standort-informationen","Standort-Informationen",[42,698,699,702,705,708,711],{},[45,700,701],{},"URL/Endpoint, wo die Schwachstelle erkannt wurde",[45,703,704],{},"Verwendete HTTP-Methode (GET, POST, etc.)",[45,706,707],{},"Request/Response-Details der verwundbaren Interaktion",[45,709,710],{},"Parameter-Namen, die verwundbar sind",[45,712,713],{},"Nachweis der Schwachstelle",[26,715,717],{"id":716},"systematische-schwachstellen-governance","Systematische Schwachstellen-Governance",[12,719,720],{},"Schwachstellen im Default-Branch verwalten Sie über den GitLab Vulnerability Report - ein zentralisiertes Dashboard, das alle Sicherheitsbefunde über Ihr Projekt oder Organisation zeigt. Diese Ansicht sammelt alle Sicherheitstest-Ergebnisse und bietet Filter- und Sortier-Funktionen, um Behebungsmaßnahmen zu priorisieren.",[12,722,723],{},"Die Vulnerability-Seite bietet umfassende Schwachstellen-Daten. Von hier aus können Sie Schwachstellen durch Status-Zuweisung triagieren:",[42,725,726,729,732,735],{},[45,727,728],{},"Needs triage (Standard)",[45,730,731],{},"Confirmed",[45,733,734],{},"Dismissed (Acceptable risk, False positive, Mitigating control, Used in tests, Not applicable)",[45,736,737],{},"Resolved",[12,739,740],{},"Wenn ein Schwachstellen-Status geändert wird, enthält das Audit-Log eine Notiz darüber, wer es geändert hat, wann es geändert wurde und den Grund für die Änderung. Dieses umfassende System ermöglicht Sicherheitsteams effiziente Priorisierung, Tracking und Management von Schwachstellen während ihres gesamten Lebenszyklus.",[26,742,744],{"id":743},"on-demand-und-geplante-dast-scans","On-Demand und geplante DAST-Scans",[12,746,747],{},"GitLab bietet flexible Scanning-Optionen über Standard-CI/CD-Pipeline-Integration hinaus durch On-Demand und geplante DAST-Scans. On-Demand-Scans ermöglichen Sicherheitsteams und Entwicklern, DAST-Tests manuell bei Bedarf zu initiieren, ohne auf Code-Änderungen oder Pipeline-Trigger zu warten.",[12,749,750],{},"On-Demand-Scans können mit benutzerdefinierten Parametern, Ziel-URLs und Scanning-Profilen konfiguriert werden. Geplante DAST-Scans bieten automatisierte, zeitbasierte Sicherheitstests unabhängig vom Entwicklungsworkflow.",[26,752,754],{"id":753},"dast-in-compliance-workflows","DAST in Compliance-Workflows",[12,756,757],{},"GitLabs Security-Policy-Framework ermöglicht Organisationen die Durchsetzung konsistenter Sicherheitsstandards über alle Projekte hinweg. Sicherheitsrichtlinien ermöglichen zentrale Governance von DAST-Scanning-Anforderungen.",[12,759,760,763,764,767],{},[48,761,762],{},"Scan/Pipeline Execution Policies"," können konfiguriert werden, um DAST-Scans automatisch basierend auf spezifischen Bedingungen auszulösen. ",[48,765,766],{},"Merge Request Approval Policies"," bieten eine zusätzliche Sicherheits-Governance-Ebene durch erzwungene menschliche Review für Code-Änderungen, die Sicherheit beeinträchtigen könnten.",[12,769,770,771,776,777,782],{},"Für Compliance bietet GitLab ",[19,772,775],{"href":773,"rel":774},"https://docs.gitlab.com/user/application_security/security_inventory/",[],"Security Inventory"," und ",[19,778,781],{"href":779,"rel":780},"https://docs.gitlab.com/user/compliance/compliance_center/",[],"Compliance Center",", die Ihnen ermöglichen zu überwachen, ob DAST in Ihrer Umgebung läuft und wo es erforderlich ist.",[26,784,786],{"id":785},"zusammenfassung","Zusammenfassung",[12,788,789],{},"GitLab DAST stellt eine mächtige Lösung für die Integration dynamischer Sicherheitstests in moderne Entwicklungsworkflows dar. Durch DAST-Implementierung in Ihrer CI/CD-Pipeline gewinnt Ihr Team die Fähigkeit, Runtime-Schwachstellen automatisch zu erkennen, Compliance mit Sicherheitsstandards aufrechtzuerhalten und sicherere Anwendungen ohne Geschwindigkeitseinbußen zu erstellen.",[12,791,792],{},"Der Schlüssel zur erfolgreichen DAST-Implementierung liegt darin, mit Grundkonfiguration zu beginnen und schrittweise zu sophistizierteren Scanning-Profilen entsprechend Ihrer Sicherheits-Reife zu expandieren. Beginnen Sie mit einfachem Website-Scanning, fügen Sie dann progressiv Authentifizierung, Custom Exclusions und erweiterte Berichte hinzu.",[12,794,795],{},"Denken Sie daran, dass DAST am effektivsten ist, wenn es mit anderen Sicherheitstest-Ansätzen kombiniert wird. Verwenden Sie es neben statischer Analyse, Dependency-Scanning und manuellen Security-Reviews für eine umfassende Sicherheitstest-Strategie.",[797,798,799],"blockquote",{},[12,800,801],{},[48,802,803,804,809],{},"Für detaillierte Implementierungsschritte, Authentifizierungs-Konfiguration und technische Setup-Anleitungen siehe den ",[19,805,808],{"href":806,"rel":807},"https://about.gitlab.com/blog/comprehensive-guide-to-gitlab-dast/",[],"umfassenden englischen Implementierungsguide",".",[811,812,813],"style",{},"html pre.shiki code .shJU0, html code.shiki .shJU0{--shiki-default:#22863A}html pre.shiki code .sgsFI, html code.shiki .sgsFI{--shiki-default:#24292E}html pre.shiki code .sYBdl, html code.shiki .sYBdl{--shiki-default:#032F62}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html pre.shiki code .sAwPA, html code.shiki .sAwPA{--shiki-default:#6A737D}",{"title":243,"searchDepth":257,"depth":257,"links":815},[816,821,826,830,831,832,833],{"id":28,"depth":257,"text":29,"children":817},[818,819,820],{"id":36,"depth":268,"text":37},{"id":125,"depth":268,"text":126},{"id":152,"depth":268,"text":153},{"id":182,"depth":257,"text":183,"children":822},[823,824,825],{"id":220,"depth":268,"text":221},{"id":506,"depth":268,"text":507},{"id":559,"depth":268,"text":560},{"id":667,"depth":257,"text":668,"children":827},[828,829],{"id":674,"depth":268,"text":675},{"id":695,"depth":268,"text":696},{"id":716,"depth":257,"text":717},{"id":743,"depth":257,"text":744},{"id":753,"depth":257,"text":754},{"id":785,"depth":257,"text":786},"security","2025-09-17","Wie Dynamic Application Security Testing (DAST) deutschen Unternehmen bei der systematischen Implementierung von Sicherheits-Governance und Compliance-Automation hilft.","md",null,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png",{},"/de-de/blog/comprehensive-guide-to-gitlab-dast",{"title":5,"description":836},"comprehensive-guide-to-gitlab-dast","de-de/blog/comprehensive-guide-to-gitlab-dast",[834,846,847],"tutorial","testing","BlogPost","3Tfaxq-wXZ_yHkYUhI5Jad0djjKeCBLVPFnru_fA3Bw",{"logo":851,"freeTrial":856,"sales":861,"login":866,"items":871,"search":1199,"minimal":1233,"duo":1251,"switchNav":1260,"pricingDeployment":1271},{"config":852},{"href":853,"dataGaName":854,"dataGaLocation":855},"/de-de/","gitlab logo","header",{"text":857,"config":858},"Kostenlose Testversion anfordern",{"href":859,"dataGaName":860,"dataGaLocation":855},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":862,"config":863},"Demo anfordern",{"href":864,"dataGaName":865,"dataGaLocation":855},"/de-de/sales/?contact-topic=request-demo","sales",{"text":867,"config":868},"Anmelden",{"href":869,"dataGaName":870,"dataGaLocation":855},"https://gitlab.com/users/sign_in/","sign in",[872,901,1003,1008,1121,1177],{"text":873,"config":874,"menu":876},"Plattform",{"dataNavLevelOne":875},"platform",{"type":877,"columns":878},"cards",[879,885,893],{"title":873,"description":880,"link":881},"Die intelligente Orchestrierungsplattform für DevSecOps",{"text":882,"config":883},"Die Plattform erkunden",{"href":884,"dataGaName":875,"dataGaLocation":855},"/de-de/platform/",{"title":886,"description":887,"link":888},"GitLab Duo Agent Platform","Agentische KI für den gesamten Software-Lebenszyklus",{"text":889,"config":890},"Lerne GitLab Duo kennen",{"href":891,"dataGaName":892,"dataGaLocation":855},"/de-de/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":894,"description":895,"link":896},"Warum GitLab?","Erfahre, warum sich Unternehmen für GitLab entscheiden",{"text":897,"config":898},"Mehr erfahren",{"href":899,"dataGaName":900,"dataGaLocation":855},"/de-de/why-gitlab/","why gitlab",{"text":902,"left":253,"config":903,"menu":905},"Produkt",{"dataNavLevelOne":904},"solutions",{"type":906,"link":907,"columns":911,"feature":982},"lists",{"text":908,"config":909},"Alle Lösungen anzeigen",{"href":910,"dataGaName":904,"dataGaLocation":855},"/de-de/solutions/",[912,937,960],{"title":913,"description":914,"link":915,"items":920},"Automatisierung","CI/CD und Automatisierung zur Beschleunigung der Bereitstellung",{"config":916},{"icon":917,"href":918,"dataGaName":919,"dataGaLocation":855},"AutomatedCodeAlt","/de-de/solutions/delivery-automation/","automated software delivery",[921,925,928,933],{"text":922,"config":923},"CI/CD",{"href":924,"dataGaLocation":855,"dataGaName":922},"/de-de/solutions/continuous-integration/",{"text":886,"config":926},{"href":891,"dataGaLocation":855,"dataGaName":927},"gitlab duo agent platform - product menu",{"text":929,"config":930},"Quellcodeverwaltung",{"href":931,"dataGaLocation":855,"dataGaName":932},"/de-de/solutions/source-code-management/","Source Code Management",{"text":934,"config":935},"Automatische Softwarebereitstellung",{"href":918,"dataGaLocation":855,"dataGaName":936},"Automated software delivery",{"title":938,"description":939,"link":940,"items":945},"Sicherheit","Entwickle Code schneller ohne Abstriche bei der Sicherheit",{"config":941},{"href":942,"dataGaName":943,"dataGaLocation":855,"icon":944},"/de-de/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[946,950,955],{"text":947,"config":948},"Anwendungssicherheitstests",{"href":942,"dataGaName":949,"dataGaLocation":855},"Application security testing",{"text":951,"config":952},"Schutz der Software-Lieferkette",{"href":953,"dataGaLocation":855,"dataGaName":954},"/de-de/solutions/supply-chain/","Software supply chain security",{"text":956,"config":957},"Software-Compliance",{"href":958,"dataGaName":959,"dataGaLocation":855},"/de-de/solutions/software-compliance/","software compliance",{"title":961,"link":962,"items":967},"Messung",{"config":963},{"icon":964,"href":965,"dataGaName":966,"dataGaLocation":855},"DigitalTransformation","/de-de/solutions/visibility-measurement/","visibility and measurement",[968,972,977],{"text":969,"config":970},"Sichtbarkeit und Messung",{"href":965,"dataGaLocation":855,"dataGaName":971},"Visibility and Measurement",{"text":973,"config":974},"Wertstrommanagement",{"href":975,"dataGaLocation":855,"dataGaName":976},"/de-de/solutions/value-stream-management/","Value Stream Management",{"text":978,"config":979},"Analysen und Einblicke",{"href":980,"dataGaLocation":855,"dataGaName":981},"/de-de/solutions/analytics-and-insights/","Analytics and insights",{"title":983,"type":906,"items":984},"GitLab für",[985,991,997],{"text":986,"config":987},"Enterprise",{"icon":988,"href":989,"dataGaLocation":855,"dataGaName":990},"Building","/de-de/enterprise/","enterprise",{"text":992,"config":993},"Kleinunternehmen",{"icon":994,"href":995,"dataGaLocation":855,"dataGaName":996},"Work","/de-de/small-business/","small business",{"text":998,"config":999},"Öffentlicher Sektor",{"icon":1000,"href":1001,"dataGaLocation":855,"dataGaName":1002},"Organization","/de-de/solutions/public-sector/","public sector",{"text":1004,"config":1005},"Preise",{"href":1006,"dataGaName":1007,"dataGaLocation":855,"dataNavLevelOne":1007},"/de-de/pricing/","pricing",{"text":1009,"config":1010,"menu":1012},"Ressourcen",{"dataNavLevelOne":1011},"resources",{"type":906,"link":1013,"columns":1017,"feature":1111},{"text":1014,"config":1015},"Alle Ressourcen anzeigen",{"href":1016,"dataGaName":1011,"dataGaLocation":855},"/de-de/resources/",[1018,1051,1078],{"title":1019,"items":1020},"Erste Schritte",[1021,1026,1031,1036,1041,1046],{"text":1022,"config":1023},"Installieren",{"href":1024,"dataGaName":1025,"dataGaLocation":855},"/de-de/install/","install",{"text":1027,"config":1028},"Kurzanleitungen",{"href":1029,"dataGaName":1030,"dataGaLocation":855},"/de-de/get-started/","quick setup checklists",{"text":1032,"config":1033},"Lernen",{"href":1034,"dataGaLocation":855,"dataGaName":1035},"https://university.gitlab.com/","learn",{"text":1037,"config":1038},"Produktdokumentation",{"href":1039,"dataGaName":1040,"dataGaLocation":855},"https://docs.gitlab.com/","product documentation",{"text":1042,"config":1043},"Best-Practice-Videos",{"href":1044,"dataGaName":1045,"dataGaLocation":855},"/de-de/getting-started-videos/","best practice videos",{"text":1047,"config":1048},"Integrationen",{"href":1049,"dataGaName":1050,"dataGaLocation":855},"/de-de/integrations/","integrations",{"title":1052,"items":1053},"Entdecken",[1054,1059,1064,1069,1073],{"text":1055,"config":1056},"Kundenerfolge",{"href":1057,"dataGaName":1058,"dataGaLocation":855},"/de-de/customers/","customer success stories",{"text":1060,"config":1061},"Blog",{"href":1062,"dataGaName":1063,"dataGaLocation":855},"/de-de/blog/","blog",{"text":1065,"config":1066},"Demo-Hub",{"href":1067,"dataGaName":1068,"dataGaLocation":855},"/de-de/demo-hub/","demo hub",{"text":1070,"config":1071},"The Source",{"href":1072,"dataGaName":1063,"dataGaLocation":855},"/de-de/the-source/",{"text":1074,"config":1075},"Remote",{"href":1076,"dataGaName":1077,"dataGaLocation":855},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":1079,"items":1080},"Vernetzen",[1081,1086,1091,1096,1101,1106],{"text":1082,"config":1083},"GitLab-Services",{"href":1084,"dataGaName":1085,"dataGaLocation":855},"/de-de/services/","services",{"text":1087,"config":1088},"Beitragen",{"href":1089,"dataGaName":1090,"dataGaLocation":855},"https://contributors.gitlab.com","contribute",{"text":1092,"config":1093},"Community",{"href":1094,"dataGaName":1095,"dataGaLocation":855},"/community/","community",{"text":1097,"config":1098},"Forum",{"href":1099,"dataGaName":1100,"dataGaLocation":855},"https://forum.gitlab.com/","forum",{"text":1102,"config":1103},"Veranstaltungen",{"href":1104,"dataGaName":1105,"dataGaLocation":855},"/events/","events",{"text":1107,"config":1108},"Partner",{"href":1109,"dataGaName":1110,"dataGaLocation":855},"/de-de/partners/","partners",{"config":1112,"title":1115,"text":1116,"link":1117},{"background":1113,"textColor":1114},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":1118,"config":1119},"Aktuelle Nachrichten",{"href":203,"dataGaName":1120,"dataGaLocation":855},"whats new",{"text":1122,"config":1123,"menu":1125},"Unternehmen",{"dataNavLevelOne":1124},"company",{"type":906,"columns":1126},[1127],{"items":1128},[1129,1134,1140,1142,1147,1152,1157,1162,1167,1172],{"text":1130,"config":1131},"Über",{"href":1132,"dataGaName":1133,"dataGaLocation":855},"/de-de/company/","about",{"text":1135,"config":1136,"footerGa":1139},"Karriere",{"href":1137,"dataGaName":1138,"dataGaLocation":855},"/jobs/","jobs",{"dataGaName":1138},{"text":1102,"config":1141},{"href":1104,"dataGaName":1105,"dataGaLocation":855},{"text":1143,"config":1144},"Geschäftsführung",{"href":1145,"dataGaName":1146,"dataGaLocation":855},"/company/team/e-group/","leadership",{"text":1148,"config":1149},"Handbuch",{"href":1150,"dataGaName":1151,"dataGaLocation":855},"https://handbook.gitlab.com/","handbook",{"text":1153,"config":1154},"Investor Relations",{"href":1155,"dataGaName":1156,"dataGaLocation":855},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":1158,"config":1159},"Trust Center",{"href":1160,"dataGaName":1161,"dataGaLocation":855},"/de-de/security/","trust center",{"text":1163,"config":1164},"AI Transparency Center",{"href":1165,"dataGaName":1166,"dataGaLocation":855},"/de-de/ai-transparency-center/","ai transparency center",{"text":1168,"config":1169},"Newsletter",{"href":1170,"dataGaName":1171,"dataGaLocation":855},"/company/contact/#contact-forms","newsletter",{"text":1173,"config":1174},"Presse",{"href":1175,"dataGaName":1176,"dataGaLocation":855},"/press/","press",{"text":1178,"config":1179,"menu":1180},"Kontakt",{"dataNavLevelOne":1124},{"type":906,"columns":1181},[1182],{"items":1183},[1184,1189,1194],{"text":1185,"config":1186},"Vertrieb kontaktieren",{"href":1187,"dataGaName":1188,"dataGaLocation":855},"/de-de/sales/","talk to sales",{"text":1190,"config":1191},"Support-Portal",{"href":1192,"dataGaName":1193,"dataGaLocation":855},"https://support.gitlab.com/hc/en-us","support portal",{"text":1195,"config":1196},"Kundenportal",{"href":1197,"dataGaName":1198,"dataGaLocation":855},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":1200,"login":1201,"suggestions":1208},"Schließen",{"text":1202,"link":1203},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":1204,"config":1205},"gitlab.com",{"href":869,"dataGaName":1206,"dataGaLocation":1207},"search login","search",{"text":1209,"default":1210},"Vorschläge",[1211,1213,1218,1220,1225,1230],{"text":886,"config":1212},{"href":891,"dataGaName":886,"dataGaLocation":1207},{"text":1214,"config":1215},"Codevorschläge (KI)",{"href":1216,"dataGaName":1217,"dataGaLocation":1207},"/de-de/solutions/code-suggestions/","Code Suggestions (AI)",{"text":922,"config":1219},{"href":924,"dataGaName":922,"dataGaLocation":1207},{"text":1221,"config":1222},"GitLab auf AWS",{"href":1223,"dataGaName":1224,"dataGaLocation":1207},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":1226,"config":1227},"GitLab auf Google Cloud",{"href":1228,"dataGaName":1229,"dataGaLocation":1207},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":894,"config":1231},{"href":899,"dataGaName":1232,"dataGaLocation":1207},"Why GitLab?",{"freeTrial":1234,"mobileIcon":1239,"desktopIcon":1244,"secondaryButton":1247},{"text":1235,"config":1236},"Kostenlos testen",{"href":1237,"dataGaName":860,"dataGaLocation":1238},"https://gitlab.com/-/trials/new/","nav",{"altText":1240,"config":1241},"GitLab-Symbol",{"src":1242,"dataGaName":1243,"dataGaLocation":1238},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":1240,"config":1245},{"src":1246,"dataGaName":1243,"dataGaLocation":1238},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":1019,"config":1248},{"href":1249,"dataGaName":1250,"dataGaLocation":1238},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":1252,"mobileIcon":1256,"desktopIcon":1258},{"text":1253,"config":1254},"Mehr über GitLab Duo erfahren",{"href":891,"dataGaName":1255,"dataGaLocation":1238},"gitlab duo",{"altText":1240,"config":1257},{"src":1242,"dataGaName":1243,"dataGaLocation":1238},{"altText":1240,"config":1259},{"src":1246,"dataGaName":1243,"dataGaLocation":1238},{"button":1261,"mobileIcon":1266,"desktopIcon":1268},{"text":1262,"config":1263},"/Option",{"href":1264,"dataGaName":1265,"dataGaLocation":1238},"#contact","switch",{"altText":1240,"config":1267},{"src":1242,"dataGaName":1243,"dataGaLocation":1238},{"altText":1240,"config":1269},{"src":1270,"dataGaName":1243,"dataGaLocation":1238},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":1272,"mobileIcon":1277,"desktopIcon":1279},{"text":1273,"config":1274},"Zurück zur Preisübersicht",{"href":1006,"dataGaName":1275,"dataGaLocation":1238,"icon":1276},"back to pricing","GoBack",{"altText":1240,"config":1278},{"src":1242,"dataGaName":1243,"dataGaLocation":1238},{"altText":1240,"config":1280},{"src":1246,"dataGaName":1243,"dataGaLocation":1238},{"title":1282,"button":1283,"config":1287},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":897,"config":1284},{"href":1285,"dataGaName":1286,"dataGaLocation":855},"/de-de/gitlab-orbit/","orbit",{"layout":1288,"disabled":1289},"release",false,{"data":1291},{"text":1292,"source":1293,"edit":1299,"contribute":1304,"config":1309,"items":1314,"minimal":1520},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":1294,"config":1295},"Quelltext der Seite anzeigen",{"href":1296,"dataGaName":1297,"dataGaLocation":1298},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":1300,"config":1301},"Diese Seite bearbeiten",{"href":1302,"dataGaName":1303,"dataGaLocation":1298},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":1305,"config":1306},"Beteilige dich",{"href":1307,"dataGaName":1308,"dataGaLocation":1298},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":1310,"facebook":1311,"youtube":1312,"linkedin":1313},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[1315,1360,1413,1455,1487],{"title":1004,"links":1316,"subMenu":1331},[1317,1321,1326],{"text":1318,"config":1319},"Tarife anzeigen",{"href":1006,"dataGaName":1320,"dataGaLocation":1298},"view plans",{"text":1322,"config":1323},"Vorteile von Premium",{"href":1324,"dataGaName":1325,"dataGaLocation":1298},"/de-de/pricing/premium/","why premium",{"text":1327,"config":1328},"Vorteile von Ultimate",{"href":1329,"dataGaName":1330,"dataGaLocation":1298},"/de-de/pricing/ultimate/","why ultimate",[1332],{"title":1178,"links":1333},[1334,1336,1338,1340,1345,1350,1355],{"text":1185,"config":1335},{"href":1187,"dataGaName":865,"dataGaLocation":1298},{"text":1190,"config":1337},{"href":1192,"dataGaName":1193,"dataGaLocation":1298},{"text":1195,"config":1339},{"href":1197,"dataGaName":1198,"dataGaLocation":1298},{"text":1341,"config":1342},"Status",{"href":1343,"dataGaName":1344,"dataGaLocation":1298},"https://status.gitlab.com/","status",{"text":1346,"config":1347},"Nutzungsbedingungen",{"href":1348,"dataGaName":1349,"dataGaLocation":1298},"/terms/","terms of use",{"text":1351,"config":1352},"Datenschutzerklärung",{"href":1353,"dataGaName":1354,"dataGaLocation":1298},"/de-de/privacy/","privacy statement",{"text":1356,"config":1357},"Cookie-Einstellungen",{"dataGaName":1358,"dataGaLocation":1298,"id":1359,"isOneTrustButton":253},"cookie preferences","ot-sdk-btn",{"title":902,"links":1361,"subMenu":1370},[1362,1366],{"text":1363,"config":1364},"DevSecOps-Plattform",{"href":884,"dataGaName":1365,"dataGaLocation":1298},"devsecops platform",{"text":1367,"config":1368},"KI-unterstützte Entwicklung",{"href":891,"dataGaName":1369,"dataGaLocation":1298},"ai-assisted development",[1371],{"title":1372,"links":1373},"Themen",[1374,1378,1383,1388,1393,1398,1403,1408],{"text":922,"config":1375},{"href":1376,"dataGaName":1377,"dataGaLocation":1298},"/de-de/topics/ci-cd/","cicd",{"text":1379,"config":1380},"GitOps",{"href":1381,"dataGaName":1382,"dataGaLocation":1298},"/de-de/topics/gitops/","gitops",{"text":1384,"config":1385},"DevOps",{"href":1386,"dataGaName":1387,"dataGaLocation":1298},"/de-de/topics/devops/","devops",{"text":1389,"config":1390},"Versionskontrolle",{"href":1391,"dataGaName":1392,"dataGaLocation":1298},"/de-de/topics/version-control/","version control",{"text":1394,"config":1395},"DevSecOps",{"href":1396,"dataGaName":1397,"dataGaLocation":1298},"/de-de/topics/devsecops/","devsecops",{"text":1399,"config":1400},"Cloud-nativ",{"href":1401,"dataGaName":1402,"dataGaLocation":1298},"/de-de/topics/cloud-native/","cloud native",{"text":1404,"config":1405},"KI für das Programmieren",{"href":1406,"dataGaName":1407,"dataGaLocation":1298},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":1409,"config":1410},"Agentische KI",{"href":1411,"dataGaName":1412,"dataGaLocation":1298},"/de-de/topics/agentic-ai/","agentic ai",{"title":1414,"links":1415},"Lösungen",[1416,1419,1421,1426,1430,1433,1436,1439,1441,1443,1445,1450],{"text":947,"config":1417},{"href":942,"dataGaName":1418,"dataGaLocation":1298},"Application Security Testing",{"text":934,"config":1420},{"href":918,"dataGaName":919,"dataGaLocation":1298},{"text":1422,"config":1423},"Agile Entwicklung",{"href":1424,"dataGaName":1425,"dataGaLocation":1298},"/de-de/solutions/agile-delivery/","agile delivery",{"text":1427,"config":1428},"SCM",{"href":931,"dataGaName":1429,"dataGaLocation":1298},"source code management",{"text":922,"config":1431},{"href":924,"dataGaName":1432,"dataGaLocation":1298},"continuous integration & delivery",{"text":973,"config":1434},{"href":975,"dataGaName":1435,"dataGaLocation":1298},"value stream management",{"text":1379,"config":1437},{"href":1438,"dataGaName":1382,"dataGaLocation":1298},"/de-de/solutions/gitops/",{"text":986,"config":1440},{"href":989,"dataGaName":990,"dataGaLocation":1298},{"text":992,"config":1442},{"href":995,"dataGaName":996,"dataGaLocation":1298},{"text":998,"config":1444},{"href":1001,"dataGaName":1002,"dataGaLocation":1298},{"text":1446,"config":1447},"Bildungswesen",{"href":1448,"dataGaName":1449,"dataGaLocation":1298},"/de-de/solutions/education/","education",{"text":1451,"config":1452},"Finanzdienstleistungen",{"href":1453,"dataGaName":1454,"dataGaLocation":1298},"/de-de/solutions/finance/","financial services",{"title":1009,"links":1456},[1457,1459,1461,1463,1466,1468,1471,1473,1475,1477,1479,1481,1483,1485],{"text":1022,"config":1458},{"href":1024,"dataGaName":1025,"dataGaLocation":1298},{"text":1027,"config":1460},{"href":1029,"dataGaName":1030,"dataGaLocation":1298},{"text":1032,"config":1462},{"href":1034,"dataGaName":1035,"dataGaLocation":1298},{"text":1037,"config":1464},{"href":1039,"dataGaName":1465,"dataGaLocation":1298},"docs",{"text":1060,"config":1467},{"href":1062,"dataGaName":1063,"dataGaLocation":1298},{"text":1469,"config":1470},"Neuerungen",{"href":203,"dataGaName":1120,"dataGaLocation":1298},{"text":1055,"config":1472},{"href":1057,"dataGaName":1058,"dataGaLocation":1298},{"text":1074,"config":1474},{"href":1076,"dataGaName":1077,"dataGaLocation":1298},{"text":1082,"config":1476},{"href":1084,"dataGaName":1085,"dataGaLocation":1298},{"text":1087,"config":1478},{"href":1089,"dataGaName":1090,"dataGaLocation":1298},{"text":1092,"config":1480},{"href":1094,"dataGaName":1095,"dataGaLocation":1298},{"text":1097,"config":1482},{"href":1099,"dataGaName":1100,"dataGaLocation":1298},{"text":1102,"config":1484},{"href":1104,"dataGaName":1105,"dataGaLocation":1298},{"text":1107,"config":1486},{"href":1109,"dataGaName":1110,"dataGaLocation":1298},{"title":1122,"links":1488},[1489,1491,1493,1495,1497,1499,1504,1509,1511,1513,1515],{"text":1130,"config":1490},{"href":1132,"dataGaName":1124,"dataGaLocation":1298},{"text":1135,"config":1492},{"href":1137,"dataGaName":1138,"dataGaLocation":1298},{"text":1143,"config":1494},{"href":1145,"dataGaName":1146,"dataGaLocation":1298},{"text":1148,"config":1496},{"href":1150,"dataGaName":1151,"dataGaLocation":1298},{"text":1153,"config":1498},{"href":1155,"dataGaName":1156,"dataGaLocation":1298},{"text":1500,"config":1501},"Nachhaltigkeit",{"href":1502,"dataGaName":1503,"dataGaLocation":1298},"/sustainability/","Sustainability",{"text":1505,"config":1506},"Vielfalt, Inklusion und Zugehörigkeit",{"href":1507,"dataGaName":1508,"dataGaLocation":1298},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1158,"config":1510},{"href":1160,"dataGaName":1161,"dataGaLocation":1298},{"text":1168,"config":1512},{"href":1170,"dataGaName":1171,"dataGaLocation":1298},{"text":1173,"config":1514},{"href":1175,"dataGaName":1176,"dataGaLocation":1298},{"text":1516,"config":1517},"Transparenzerklärung zu moderner Sklaverei",{"href":1518,"dataGaName":1519,"dataGaLocation":1298},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1521},[1522,1525,1528],{"text":1523,"config":1524},"Terms",{"href":1348,"dataGaName":1349,"dataGaLocation":1298},{"text":1526,"config":1527},"Cookies",{"dataGaName":1358,"dataGaLocation":1298,"id":1359,"isOneTrustButton":253},{"text":1529,"config":1530},"Datenschutz",{"href":1353,"dataGaName":1354,"dataGaLocation":1298},[1532],{"id":1533,"title":7,"body":838,"config":1534,"content":1536,"description":838,"extension":1540,"meta":1541,"navigation":253,"path":1542,"seo":1543,"stem":1544,"__hash__":1545},"blogAuthors/en-us/blog/authors/fernando-diaz.yml",{"template":1535},"BlogAuthor",{"name":7,"config":1537},{"headshot":1538,"ctfId":1539},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659556/Blog/Author%20Headshots/fern_diaz.png","fjdiaz","yml",{},"/en-us/blog/authors/fernando-diaz",{},"en-us/blog/authors/fernando-diaz","lxRJIOydP4_yzYZvsPcuQevP9AYAKREF7i8QmmdnOWc",[1547,1555,1563],{"title":1548,"description":1549,"heroImage":1550,"category":834,"date":1551,"authors":1552,"slug":1554,"externalUrl":838},"Wie GitLab Schwachstellen über Refactorings hinweg verfolgt","Das verbesserte Scope+Offset-Fingerprinting hält das Tracking stabil, wenn Kommentare, Leerzeilen oder Reformatierungen dazukommen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[1553],"Julian Thome","improved-scope-offset-fingerprinting",{"title":1556,"description":1557,"heroImage":1550,"category":834,"date":1558,"authors":1559,"slug":1562,"externalUrl":838},"GitLab Secrets Manager unterstützt ESO, Terraform und API","GitLab Secrets Manager liefert Secrets sicher an Kubernetes, Terraform und externe Workflows, aus einer einzigen Quelle für die gesamte Toolchain.","2026-08-06",[1560,1561],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1564,"description":1565,"heroImage":839,"category":834,"date":1566,"authors":1567,"slug":1569,"externalUrl":838},"Mit Claude und GitLab jeden Commit bis zur Produktion absichern","Claude Security findet Schwachstellen in der Coding-Session. GitLab übernimmt danach: Scans, Policy-Durchsetzung und Audit-Nachweise im Lebenszyklus.","2026-08-03",[1568],"Alisa Ho","claude-security-and-gitlab",{"promotions":1571},[1572,1586,1598,1609],{"id":1573,"categories":1574,"header":1576,"text":1577,"button":1578,"image":1583},"ai-modernization",[1575],"ai","Hält KI, was uns versprochen wurde?","Das Quiz dauert maximal 5 Minuten.",{"text":1579,"config":1580},"Ermittle deinen KI-Reifegrad",{"href":1581,"dataGaName":1582,"dataGaLocation":1063},"/de-de/assessments/ai-modernization-assessment/","modernization assessment",{"config":1584},{"src":1585},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1587,"categories":1588,"header":1590,"text":1577,"button":1591,"image":1595},"devops-modernization",[1589,1397],"product","Verwaltest du Tool-Chaos oder stellst du Innovationen bereit?",{"text":1592,"config":1593},"Ermittle deinen DevOps-Reifegrad",{"href":1594,"dataGaName":1582,"dataGaLocation":1063},"/de-de/assessments/devops-modernization-assessment/",{"config":1596},{"src":1597},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1599,"categories":1600,"header":1601,"text":1577,"button":1602,"image":1606},"security-modernization",[834],"Tauschst du Schnelligkeit gegen Sicherheit ein?",{"text":1603,"config":1604},"Ermittle deinen Sicherheitsreifegrad",{"href":1605,"dataGaName":1582,"dataGaLocation":1063},"/de-de/assessments/security-modernization-assessment/",{"config":1607},{"src":1608},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1610,"paths":1611,"header":1614,"text":1615,"button":1616,"image":1621},"github-azure-migration",[1612,1613],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Ist dein Team bereit für den Umzug von GitHub nach Azure?","GitHub stellt bereits auf Azure um. Finde heraus, was das für dich bedeutet.",{"text":1617,"config":1618},"Erfahre, wie GitLab im Vergleich zu GitHub abschneidet",{"href":1619,"dataGaName":1620,"dataGaLocation":1063},"/de-de/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1622},{"src":1597},{"header":1624,"blurb":1625,"button":1626,"secondaryButton":1631},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1627,"config":1628},"Kostenlosen Test starten",{"href":1629,"dataGaName":860,"dataGaLocation":1630},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":1185,"config":1632},{"href":1187,"dataGaName":865,"dataGaLocation":1630},1786803736809]