[{"data":1,"prerenderedAt":1078},["ShallowReactive",2],{"/de-de/blog/cyber-resilience-act-reporting-deadline":3,"navigation-de-de":321,"banner-de-de":757,"footer-de-de":764,"blog-post-authors-de-de-Amit Shalem":1021,"blog-related-posts-de-de-cyber-resilience-act-reporting-deadline":1035,"blog-share-wrapper-de-de":1058,"next-steps-de-de":1068},{"id":4,"title":5,"authors":6,"body":8,"category":303,"date":304,"description":305,"extension":306,"externalUrl":307,"faq":307,"featured":308,"heroImage":309,"meta":310,"navigation":311,"path":312,"seo":313,"slug":315,"stem":316,"tags":317,"template":319,"updatedDate":307,"__hash__":320},"blogPosts/de-de/blog/cyber-resilience-act-reporting-deadline.md","Cyber Resilience Act: ab jetzt 24 Stunden Meldefrist",[7],"Amit Shalem",{"type":9,"value":10,"toc":289},"minimark",[11,22,31,36,44,66,70,73,78,84,98,102,107,122,126,131,134,138,143,169,173,176,201,205,208,211,224,240,257,284],[12,13,14,15,21],"p",{},"Für Unternehmen, die Software auf dem EU-Markt bereitstellen, gilt ab dem 11. September 2026 eine neue Frist: 24 Stunden, um eine Meldung einzureichen, sobald bekannt wird, dass eine Schwachstelle in einem ihrer Produkte aktiv ausgenutzt wird. Diese Anforderung stammt aus dem Cyber Resilience Act (",[16,17,20],"a",{"href":18,"rel":19},"https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act",[],"CRA","), dem EU-Gesetz für Cybersicherheitsanforderungen an Produkte mit digitalen Elementen, die in Europa verkauft werden. Es soll sicherstellen, dass diese Produkte von Grund auf sicher gestaltet sind und gegen neue Bedrohungen abgesichert bleiben. Die strengsten Anforderungen des CRA gelten für die Hersteller dieser Produkte, von großen Softwareanbietern bis zu Unternehmen, die vernetzte Hardware ausliefern.",[12,23,24,25,30],{},"Die eigentliche Herausforderung ist nicht die Meldung selbst, sondern das rechtzeitige Erkennen: Wird gerade eine Schwachstelle im eigenen Produkt aktiv ausgenutzt? Die 24-Stunden-Frist beginnt in dem Moment der Kenntniserlangung. Genau deshalb ist Erkennung so wichtig. Kontinuierliche Erkennung ist eine technische Lösung, kein einmaliger Compliance-Akt. Die Funktionen von GitLab für ",[16,26,29],{"href":27,"rel":28},"https://about.gitlab.com/de-de/solutions/supply-chain/",[],"Software Supply Chain Security"," helfen dabei, aktive Ausnutzung im eigenen ausgelieferten Code automatisch und kontinuierlich zu erkennen. Dieser Beitrag geht vier Fragen durch, die sich zur kontinuierlichen Erkennung in der eigenen Pipeline schon heute stellen lassen.",[32,33,35],"h2",{"id":34},"meldepflicht-startet-im-september-2026","Meldepflicht startet im September 2026",[12,37,38,39,43],{},"Ab dem 11. September 2026 müssen Hersteller eine aktiv ausgenutzte Schwachstelle ",[40,41,42],"strong",{},"innerhalb von 24 Stunden nach Kenntniserlangung"," melden. Die Meldung läuft in drei Stufen, die jeweils gleichzeitig an die Agentur der Europäischen Union für Cybersicherheit (ENISA) und an das Computer Security Incident Response Team (CSIRT), das als Koordinator benannt ist, übermittelt werden.",[45,46,47,54,60],"ol",{},[48,49,50,53],"li",{},[40,51,52],{},"Frühwarnung, innerhalb von 24 Stunden nach Kenntniserlangung von der aktiv ausgenutzten Schwachstelle."," Eine kurze erste Meldung, dass eine Ausnutzung stattfindet. Der volle Umfang der Auswirkungen oder eine Lösung muss zu diesem Zeitpunkt noch nicht bekannt sein.",[48,55,56,59],{},[40,57,58],{},"Meldung, innerhalb von 72 Stunden."," Ein ausführlicherer Bericht darüber, was betroffen ist, was bislang bekannt ist und welche Maßnahmen ergriffen werden.",[48,61,62,65],{},[40,63,64],{},"Abschlussbericht."," Bei einer aktiv ausgenutzten Schwachstelle spätestens 14 Tage, nachdem eine Korrektur- oder Abhilfemaßnahme verfügbar ist.",[32,67,69],{"id":68},"vier-fragen-zur-vorbereitung-mit-gitlab","Vier Fragen zur Vorbereitung mit GitLab",[12,71,72],{},"Ob eine Schwachstelle im eigenen Produkt meldepflichtig ist, muss jedes Unternehmen selbst entscheiden. Die folgenden vier Fragen lassen sich schon heute zur Vorbereitung auf den CRA stellen, jeweils mit einem Blick darauf, wie GitLab bei der Antwort hilft.",[74,75,77],"h3",{"id":76},"aktive-ausnutzung-im-bereits-ausgelieferten-erkennen","Aktive Ausnutzung im bereits Ausgelieferten erkennen",[12,79,80],{},[81,82,83],"em",{},"Wird gerade eine Komponente in etwas, das ich ausgeliefert habe, aktiv ausgenutzt?",[12,85,86,91,92,97],{},[16,87,90],{"href":88,"rel":89},"https://docs.gitlab.com/user/application_security/dependency_scanning/continuous_dependency_scanning/",[],"Continuous Dependency Scanning"," überwacht die eigene SBOM und gleicht sie mit neu veröffentlichten Advisories ab. KEV-Status und EPSS-Werte zu jedem Fund zeigen, welche davon tatsächlich von Angreifern genutzt werden, sodass sich die Schwachstellen mit echtem Risiko priorisieren lassen. Container Scanning deckt die ausgelieferten Images ab, ",[16,93,96],{"href":94,"rel":95},"https://docs.gitlab.com/user/clusters/agent/vulnerabilities/",[],"Operational Container Scanning"," das, was aktuell in den eigenen Clustern läuft.",[74,99,101],{"id":100},"jedes-betroffene-produkt-und-repository-finden","Jedes betroffene Produkt und Repository finden",[12,103,104],{},[81,105,106],{},"Welche meiner Produkte sind betroffen, und in welchem Repository?",[12,108,109,110,115,116,121],{},"Eine einzige Suche in der ",[16,111,114],{"href":112,"rel":113},"https://docs.gitlab.com/user/application_security/dependency_list/",[],"gruppenweiten Abhängigkeitsliste"," liefert jedes Projekt, das diese Komponente ausliefert. Sicherheitsattribute zeigen, welche davon internetexponiert oder geschäftskritisch sind, damit klar ist, wo zuerst anzusetzen ist. Diese Liste speist sich aus zwei Quellen: einer CycloneDX-SBOM aus ",[16,117,120],{"href":118,"rel":119},"https://docs.gitlab.com/user/application_security/dependency_scanning/",[],"Dependency Scanning"," für das, was der eigene Code deklariert, einschließlich transitiver Abhängigkeiten, sowie einer weiteren aus Container Scanning für die im Image enthaltenen Betriebssystempakete. Eine einzige Suche erreicht die gesamte eigene Software-Lieferkette – alles, was tatsächlich ausgeliefert wurde.",[74,123,125],{"id":124},"erkennungszeitpunkt-dokumentieren","Erkennungszeitpunkt dokumentieren",[12,127,128],{},[81,129,130],{},"Lässt sich zeigen, wann ich davon erfahren habe?",[12,132,133],{},"Das Aktivitätsprotokoll zu jeder Schwachstelle hält fest: wann sie erkannt wurde, in welcher Pipeline, und jede folgende Statusänderung mit Person und Zeitpunkt. Der Vulnerability-Events-Webhook spielt genau diese Momente in das jeweilige System ein, das die eigene Frist im Blick behält. Fragt jemand, wann man davon erfahren hat, liegt die Antwort bereits vor.",[74,135,137],{"id":136},"fix-auslieferung-und-zeitpunkt-zeigen","Fix-Auslieferung und Zeitpunkt zeigen",[12,139,140],{},[81,141,142],{},"Wurde ein Fix ausgeliefert, und wann?",[12,144,145,148,149,152,153,160,161,164,165,168],{},[40,146,147],{},"Dependency scanning auto-remediation"," öffnet automatisch den Merge Request für das Upgrade. ",[40,150,151],{},"Merge request approval policies"," können auf den Known-Exploited-Status prüfen, sodass die Regel gilt, ohne dass sie jedes Mal neu verhandelt werden muss. ",[40,154,155],{},[16,156,159],{"href":157,"rel":158},"https://about.gitlab.com/de-de/solutions/software-compliance/",[],"Compliance frameworks"," legen die dahinterliegenden Kontrollen fest. Der ",[40,162,163],{},"Compliance Status Report"," zeigt, wo jedes Projekt im Verhältnis dazu steht, und der ",[40,166,167],{},"Compliance Violations Report"," erfasst alles, was durchgerutscht ist.",[74,170,172],{"id":171},"alles-andere-läuft-bereits","Alles andere läuft bereits",[12,174,175],{},"Ein Großteil der Informationen, die zur Einschätzung der Meldepflichten nach dem CRA nötig sind, ist bereits in der GitLab-Plattform vorhanden, in der der eigene Code liegt. Das Inventar, die Ausnutzungssignale, der kontinuierliche Abgleich, die Zeitstempel und die Policy-Gates sind keine fünf separaten Tools, die bewertet, gekauft und miteinander verkabelt werden müssen. Es sind Funktionen, die sich in den bereits laufenden Pipelines aktivieren lassen, ohne neue Agents und ohne neue Datenebene.",[12,177,178,179,186,187,186,190,186,193,196,197,200],{},"Für die Beantwortung dieser vier Fragen werden GitLabs Sicherheits-Scans möglicherweise nicht gebraucht – ",[40,180,181],{},[16,182,185],{"href":183,"rel":184},"https://about.gitlab.com/de-de/solutions/application-security-testing/",[],"Static Application Security Testing (SAST)",", ",[40,188,189],{},"Secret Detection",[40,191,192],{},"Secret Push Protection",[40,194,195],{},"Infrastructure-as-Code (IaC) Scanning"," und ",[40,198,199],{},"Security Policies",". Sie helfen aber dabei, die nächste Phase der CRA-Anforderungen anzugehen, die im Dezember 2027 in Kraft tritt.",[32,202,204],{"id":203},"blick-nach-vorn-riskante-pakete-vor-dem-eintritt-in-die-lieferkette-stoppen","Blick nach vorn: riskante Pakete vor dem Eintritt in die Lieferkette stoppen",[12,206,207],{},"Die Sicherheitsfunktionen von GitLab helfen bei einer schnellen Reaktion. Es lohnt sich außerdem, die eigene Umgebung so aufzustellen, dass von vornherein weniger Schwachstellen zu melden sind.",[12,209,210],{},"Nicht jedes Lieferkettenrisiko taucht als CVE-Eintrag auf (Common Vulnerabilities and Exposures). Ein Paket, das nur ein Zeichen von einer täglich verwendeten Bibliothek entfernt veröffentlicht wird, erhält weder ein Advisory noch einen Schweregrad, ebenso wenig ein Paketname, den ein KI-Assistent erfunden hat und den jemand anderes dann registriert hat. Hier gibt es nichts zu patchen, denn das Paket selbst ist der Angriff.",[12,212,213,214,217,218,223],{},"Bald ermöglicht GitLab es, eine präventive Policy direkt an der Registry anzuwenden – statt eine Schwachstelle erst drei Wochen später in einem Review zu entdecken. So lassen sich schädliche Pakete stoppen, bevor sie überhaupt in die Lieferkette gelangen, noch vor einem Build. Informationen zur bald startenden Closed Beta der ",[40,215,216],{},"Dependency Firewall"," gibt es über ",[16,219,222],{"href":220,"rel":221},"https://dfw-beta-signup-0fb9a5.gitlab.io/?utm_medium=blog&utm_source=blog&utm_campaign=eg_global_x_trial_security_de_",[],"dieses Formular",".",[12,225,226,229,230,233,234,239],{},[40,227,228],{},"Für bestehende GitLab-Kund(inn)en: an einer einzelnen Komponente ausprobieren."," Die gruppenweite Abhängigkeitsliste öffnen, eine bekanntermaßen ausgelieferte Komponente auswählen und die Zeit stoppen, die für die Beantwortung aller vier Fragen nötig ist. Fallen die Antworten leicht, lässt sich ",[16,231,90],{"href":118,"rel":232},[]," aktivieren und der Known-Exploited-Status einer ",[16,235,238],{"href":236,"rel":237},"https://docs.gitlab.com/user/application_security/policies/",[],"Merge Request Approval Policy"," hinzufügen.",[12,241,242,251,252,223],{},[40,243,244,245,250],{},"Noch nicht auf ",[16,246,249],{"href":247,"rel":248},"https://about.gitlab.com/de-de/pricing/ultimate/",[],"GitLab Ultimate","?"," In einer einzigen Ansicht zeigt sich, ob ausgelieferte Komponenten bekanntermaßen in freier Wildbahn ausgenutzte Schwachstellen tragen. ",[16,253,256],{"href":254,"rel":255},"https://about.gitlab.com/de-de/free-trial/?utm_medium=native&utm_source=integrate-market&utm_campaign=eg_global_cmp_content-syndication_security_en",[],"Kostenlose Testversion starten",[12,258,259],{},[81,260,261,262,266,267,272,273,278,279,223],{},"Weiterführende Informationen: der Überblick der Europäischen Kommission zum ",[16,263,265],{"href":18,"rel":264},[],"Cyber Resilience Act",", die Seite zu den ",[16,268,271],{"href":269,"rel":270},"https://digital-strategy.ec.europa.eu/en/policies/cra-reporting",[],"Meldepflichten",", die ",[16,274,277],{"href":275,"rel":276},"https://digital-strategy.ec.europa.eu/en/policies/cra-summary",[],"Zusammenfassung des Gesetzestexts"," sowie die ",[16,280,283],{"href":281,"rel":282},"https://digital-strategy.ec.europa.eu/en/library/commission-publishes-new-guidance-support-timely-cyber-resilience-act-implementation",[],"Umsetzungsleitlinien der Kommission",[12,285,286],{},[81,287,288],{},"Amit Shalem ist Principal Product Manager, Software Supply Chain Security, bei GitLab.",{"title":290,"searchDepth":291,"depth":291,"links":292},"",2,[293,294,302],{"id":34,"depth":291,"text":35},{"id":68,"depth":291,"text":69,"children":295},[296,298,299,300,301],{"id":76,"depth":297,"text":77},3,{"id":100,"depth":297,"text":101},{"id":124,"depth":297,"text":125},{"id":136,"depth":297,"text":137},{"id":171,"depth":297,"text":172},{"id":203,"depth":291,"text":204},"security","2026-09-10","Nach dem Cyber Resilience Act haben Hersteller 24 Stunden Zeit, eine aktiv ausgenutzte Schwachstelle zu melden. So hilft GitLab bei schneller Antwort.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png",{},true,"/de-de/blog/cyber-resilience-act-reporting-deadline",{"config":314,"title":5,"description":305},{"noIndex":308},"cyber-resilience-act-reporting-deadline","de-de/blog/cyber-resilience-act-reporting-deadline",[303,318],"features","BlogPost","XIVD81pzSEM3Gqh0xh8Y4NpMQs3lgryPZ5gf5V5j1LI",{"logo":322,"freeTrial":327,"sales":332,"login":337,"items":342,"search":673,"minimal":708,"duo":727,"switchNav":736,"pricingDeployment":747},{"config":323},{"href":324,"dataGaName":325,"dataGaLocation":326},"/de-de/","gitlab logo","header",{"text":328,"config":329},"Kostenlose Testversion anfordern",{"href":330,"dataGaName":331,"dataGaLocation":326},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":333,"config":334},"Demo anfordern",{"href":335,"dataGaName":336,"dataGaLocation":326},"/request-a-demo/","sales",{"text":338,"config":339},"Anmelden",{"href":340,"dataGaName":341,"dataGaLocation":326},"https://gitlab.com/users/sign_in/","sign in",[343,429,517,522,597,651],{"text":344,"left":311,"config":345,"menu":347},"Plattform",{"dataNavLevelOne":346},"platform",{"type":348,"link":349,"columns":353,"feature":418},"lists",{"text":350,"config":351},"Die Plattform erkunden",{"href":352,"dataGaName":346,"dataGaLocation":326},"/de-de/platform/",[354,377,400],{"title":355,"items":356},"Ausführung und Workflows",[357,362,367,372],{"text":358,"config":359},"CI/CD",{"href":360,"dataGaLocation":326,"dataGaName":361},"/de-de/solutions/continuous-integration/","ci/cd",{"text":363,"config":364},"Quellcodeverwaltung",{"href":365,"dataGaLocation":326,"dataGaName":366},"/de-de/solutions/source-code-management/","source code management",{"text":368,"config":369},"Agile Delivery",{"href":370,"dataGaLocation":326,"dataGaName":371},"/de-de/solutions/agile-delivery/","agile delivery",{"text":373,"config":374},"Artefaktverwaltung",{"href":375,"dataGaLocation":326,"dataGaName":376},"/de-de/artifact-central/","artifact management",{"title":378,"items":379},"Sicherheit und Governance",[380,385,390,395],{"text":381,"config":382},"Anwendungssicherheitstests",{"href":383,"dataGaLocation":326,"dataGaName":384},"/de-de/solutions/application-security-testing/","application security testing",{"text":386,"config":387},"Governance und Compliance",{"href":388,"dataGaLocation":326,"dataGaName":389},"/de-de/solutions/software-compliance/","governance and compliance",{"text":391,"config":392},"Secrets-Management",{"href":393,"dataGaLocation":326,"dataGaName":394},"/de-de/gitlab-secrets-manager/","secrets management",{"text":396,"config":397},"Lieferkettensicherheit",{"href":398,"dataGaLocation":326,"dataGaName":399},"/de-de/solutions/supply-chain/","supply chain security",{"title":401,"items":402},"Kontext und KI",[403,408,413],{"text":404,"config":405},"Agentische Orchestrierung",{"href":406,"dataGaLocation":326,"dataGaName":407},"/de-de/gitlab-duo-agent-platform/","agentic orchestration",{"text":409,"config":410},"Kontextgraph",{"href":411,"dataGaLocation":326,"dataGaName":412},"/de-de/gitlab-orbit/","context graph",{"text":414,"config":415},"Sichtbarkeit und Messung",{"href":416,"dataGaLocation":326,"dataGaName":417},"/de-de/solutions/visibility-measurement/","visibility and measurement",{"config":419,"title":422,"text":423,"link":424},{"background":420,"textColor":421},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1790185102/o7dn32anqcb6z8dgd3as.jpg')","#000","Warum GitLab","Eine Plattform für Schnelligkeit und Kontrolle im gesamten Software-Lebenszyklus.",{"text":425,"config":426},"Mehr erfahren",{"href":427,"dataGaName":428,"dataGaLocation":326},"/de-de/why-gitlab/","why gitlab",{"text":430,"left":311,"config":431,"menu":433},"Lösungen",{"dataNavLevelOne":432},"solutions",{"type":348,"link":434,"columns":438,"feature":508},{"text":435,"config":436},"Alle Lösungen anzeigen",{"href":437,"dataGaName":432,"dataGaLocation":326},"/de-de/solutions/",[439,457,475],{"title":440,"items":441},"Ergebnisse",[442,447,452],{"text":443,"config":444},"DevOps-Modernisierung",{"href":445,"dataGaLocation":326,"dataGaName":446},"/de-de/assessments/devops-modernization-assessment/","devops modernization",{"text":448,"config":449},"Sicherheitsmodernisierung",{"href":450,"dataGaLocation":326,"dataGaName":451},"/de-de/assessments/security-modernization-assessment/","security modernization",{"text":453,"config":454},"KI-Modernisierung",{"href":455,"dataGaLocation":326,"dataGaName":456},"/de-de/assessments/ai-modernization-assessment/","ai modernization",{"title":458,"items":459},"Nach Größe",[460,465,470],{"text":461,"config":462},"Große Unternehmen",{"href":463,"dataGaLocation":326,"dataGaName":464},"/de-de/enterprise/","enterprise",{"text":466,"config":467},"Kleine Unternehmen",{"href":468,"dataGaLocation":326,"dataGaName":469},"/de-de/small-business/","small business",{"text":471,"config":472},"Start-ups",{"href":473,"dataGaLocation":326,"dataGaName":474},"/de-de/solutions/startups/","startups",{"title":476,"items":477},"Branchen",[478,483,488,493,498,503],{"text":479,"config":480},"Finanzdienstleistungen",{"href":481,"dataGaLocation":326,"dataGaName":482},"/de-de/solutions/finance/","financial services",{"text":484,"config":485},"Öffentlicher Sektor",{"href":486,"dataGaLocation":326,"dataGaName":487},"/de-de/solutions/public-sector/","public sector",{"text":489,"config":490},"Telekommunikation",{"href":491,"dataGaLocation":326,"dataGaName":492},"/de-de/solutions/telecommunications/","telecommunications",{"text":494,"config":495},"Automobilindustrie",{"href":496,"dataGaLocation":326,"dataGaName":497},"/de-de/solutions/automotive/","automotive",{"text":499,"config":500},"Bildungswesen",{"href":501,"dataGaLocation":326,"dataGaName":502},"/de-de/solutions/education/","education",{"text":504,"config":505},"Luft- und Raumfahrt",{"href":506,"dataGaLocation":326,"dataGaName":507},"/de-de/solutions/aerospace/","aerospace",{"config":509,"title":510,"text":511,"link":512},{"background":420,"textColor":421},"GitLab-Sicherheitsstandard","Mehr dazu, wie du deine Software Factory stärkst und KI-Agenten Autonomie gewinnen lässt, ohne an Sicherheit einzubüßen.",{"text":513,"config":514},"Standard entdecken",{"href":515,"dataGaName":516,"dataGaLocation":326},"/gitlab-security-standard/","gitlab security standard",{"text":518,"config":519},"Preise",{"href":520,"dataGaName":521,"dataGaLocation":326,"dataNavLevelOne":521},"/de-de/pricing/","pricing",{"text":523,"config":524,"menu":526},"Ressourcen",{"dataNavLevelOne":525},"resources",{"type":348,"link":527,"columns":531,"feature":588},{"text":528,"config":529},"Alle Ressourcen anzeigen",{"href":530,"dataGaName":525,"dataGaLocation":326},"/de-de/resources/",[532,560],{"title":533,"items":534},"Entdecken",[535,540,545,550,555],{"text":536,"config":537},"Dokumentation",{"href":538,"dataGaName":539,"dataGaLocation":326},"https://docs.gitlab.com/","docs",{"text":541,"config":542},"GitLab University",{"href":543,"dataGaName":544,"dataGaLocation":326},"https://university.gitlab.com/","university",{"text":546,"config":547},"Demo-Reihe",{"href":548,"dataGaName":549,"dataGaLocation":326},"/de-de/gitlab-technical-demo-series/","demo series",{"text":551,"config":552},"Demo-Hub",{"href":553,"dataGaName":554,"dataGaLocation":326},"/de-de/demo-hub/","demo hub",{"text":556,"config":557},"Dienste",{"href":558,"dataGaName":559,"dataGaLocation":326},"/de-de/services/","services",{"title":561,"items":562},"Vernetzen",[563,568,573,578,583],{"text":564,"config":565},"Blog",{"href":566,"dataGaName":567,"dataGaLocation":326},"/de-de/blog/","blog",{"text":569,"config":570},"Community",{"href":571,"dataGaName":572,"dataGaLocation":326},"/community/","community",{"text":574,"config":575},"Kunden",{"href":576,"dataGaName":577,"dataGaLocation":326},"/de-de/customers/","customers",{"text":579,"config":580},"Partner",{"href":581,"dataGaName":582,"dataGaLocation":326},"/de-de/partners/","partners",{"text":584,"config":585},"Veranstaltungen",{"href":586,"dataGaName":587,"dataGaLocation":326},"/events/","events",{"config":589,"title":590,"text":591,"link":592},{"background":420,"textColor":421},"Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":593,"config":594},"Aktuelle Nachrichten",{"href":595,"dataGaName":596,"dataGaLocation":326},"/de-de/whats-new/","whats new",{"text":598,"config":599,"menu":601},"Unternehmen",{"dataNavLevelOne":600},"company",{"type":348,"columns":602},[603],{"items":604},[605,610,616,621,626,631,636,641,646],{"text":606,"config":607},"Über",{"href":608,"dataGaName":609,"dataGaLocation":326},"/de-de/company/","about",{"text":611,"config":612,"footerGa":615},"Karriere",{"href":613,"dataGaName":614,"dataGaLocation":326},"/jobs/","jobs",{"dataGaName":614},{"text":617,"config":618},"Presse",{"href":619,"dataGaName":620,"dataGaLocation":326},"/press/","press",{"text":622,"config":623},"Handbuch",{"href":624,"dataGaName":625,"dataGaLocation":326},"https://handbook.gitlab.com/","handbook",{"text":627,"config":628},"Geschäftsführung",{"href":629,"dataGaName":630,"dataGaLocation":326},"/company/team/e-group/","leadership",{"text":632,"config":633},"Investor Relations",{"href":634,"dataGaName":635,"dataGaLocation":326},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":637,"config":638},"Trust Center",{"href":639,"dataGaName":640,"dataGaLocation":326},"/de-de/security/","trust center",{"text":642,"config":643},"AI Transparency Center",{"href":644,"dataGaName":645,"dataGaLocation":326},"/de-de/ai-transparency-center/","ai transparency center",{"text":647,"config":648},"Newsletter",{"href":649,"dataGaName":650,"dataGaLocation":326},"/company/contact/#contact-forms","newsletter",{"text":652,"config":653,"menu":654},"Kontakt",{"dataNavLevelOne":600},{"type":348,"columns":655},[656],{"items":657},[658,663,668],{"text":659,"config":660},"Vertrieb kontaktieren",{"href":661,"dataGaName":662,"dataGaLocation":326},"/de-de/sales/","talk to sales",{"text":664,"config":665},"Support-Portal",{"href":666,"dataGaName":667,"dataGaLocation":326},"https://support.gitlab.com/hc/en-us","support portal",{"text":669,"config":670},"Kundenportal",{"href":671,"dataGaName":672,"dataGaLocation":326},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":674,"login":675,"suggestions":682},"Schließen",{"text":676,"link":677},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":678,"config":679},"gitlab.com",{"href":340,"dataGaName":680,"dataGaLocation":681},"search login","search",{"text":683,"default":684},"Vorschläge",[685,688,692,694,699,704],{"text":686,"config":687},"GitLab Duo Agent Platform",{"href":406,"dataGaName":686,"dataGaLocation":681},{"text":689,"config":690},"Codevorschläge (KI)",{"href":406,"dataGaName":691,"dataGaLocation":681},"Code Suggestions (AI)",{"text":358,"config":693},{"href":360,"dataGaName":358,"dataGaLocation":681},{"text":695,"config":696},"GitLab auf AWS",{"href":697,"dataGaName":698,"dataGaLocation":681},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":700,"config":701},"GitLab auf Google Cloud",{"href":702,"dataGaName":703,"dataGaLocation":681},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":705,"config":706},"Warum GitLab?",{"href":427,"dataGaName":707,"dataGaLocation":681},"Why GitLab?",{"freeTrial":709,"mobileIcon":714,"desktopIcon":719,"secondaryButton":722},{"text":710,"config":711},"Kostenlos testen",{"href":712,"dataGaName":331,"dataGaLocation":713},"https://gitlab.com/-/trials/new/","nav",{"altText":715,"config":716},"GitLab-Symbol",{"src":717,"dataGaName":718,"dataGaLocation":713},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":715,"config":720},{"src":721,"dataGaName":718,"dataGaLocation":713},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":723,"config":724},"Erste Schritte",{"href":725,"dataGaName":726,"dataGaLocation":713},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":728,"mobileIcon":732,"desktopIcon":734},{"text":729,"config":730},"Mehr über GitLab Duo erfahren",{"href":406,"dataGaName":731,"dataGaLocation":713},"gitlab duo",{"altText":715,"config":733},{"src":717,"dataGaName":718,"dataGaLocation":713},{"altText":715,"config":735},{"src":721,"dataGaName":718,"dataGaLocation":713},{"button":737,"mobileIcon":742,"desktopIcon":744},{"text":738,"config":739},"/Option",{"href":740,"dataGaName":741,"dataGaLocation":713},"#contact","switch",{"altText":715,"config":743},{"src":717,"dataGaName":718,"dataGaLocation":713},{"altText":715,"config":745},{"src":746,"dataGaName":718,"dataGaLocation":713},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":748,"mobileIcon":753,"desktopIcon":755},{"text":749,"config":750},"Zurück zur Preisübersicht",{"href":520,"dataGaName":751,"dataGaLocation":713,"icon":752},"back to pricing","GoBack",{"altText":715,"config":754},{"src":717,"dataGaName":718,"dataGaLocation":713},{"altText":715,"config":756},{"src":721,"dataGaName":718,"dataGaLocation":713},{"title":758,"button":759,"config":762},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":425,"config":760},{"href":411,"dataGaName":761,"dataGaLocation":326},"orbit",{"layout":763,"disabled":308},"release",{"data":765},{"text":766,"source":767,"edit":773,"contribute":778,"config":783,"items":788,"minimal":1010},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":768,"config":769},"Quelltext der Seite anzeigen",{"href":770,"dataGaName":771,"dataGaLocation":772},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":774,"config":775},"Diese Seite bearbeiten",{"href":776,"dataGaName":777,"dataGaLocation":772},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":779,"config":780},"Beteilige dich",{"href":781,"dataGaName":782,"dataGaLocation":772},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":784,"facebook":785,"youtube":786,"linkedin":787},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[789,834,892,935,977],{"title":518,"links":790,"subMenu":805},[791,795,800],{"text":792,"config":793},"Tarife anzeigen",{"href":520,"dataGaName":794,"dataGaLocation":772},"view plans",{"text":796,"config":797},"Vorteile von Premium",{"href":798,"dataGaName":799,"dataGaLocation":772},"/de-de/pricing/premium/","why premium",{"text":801,"config":802},"Vorteile von Ultimate",{"href":803,"dataGaName":804,"dataGaLocation":772},"/de-de/pricing/ultimate/","why ultimate",[806],{"title":652,"links":807},[808,810,812,814,819,824,829],{"text":659,"config":809},{"href":661,"dataGaName":336,"dataGaLocation":772},{"text":664,"config":811},{"href":666,"dataGaName":667,"dataGaLocation":772},{"text":669,"config":813},{"href":671,"dataGaName":672,"dataGaLocation":772},{"text":815,"config":816},"Status",{"href":817,"dataGaName":818,"dataGaLocation":772},"https://status.gitlab.com/","status",{"text":820,"config":821},"Nutzungsbedingungen",{"href":822,"dataGaName":823,"dataGaLocation":772},"/terms/","terms of use",{"text":825,"config":826},"Datenschutzerklärung",{"href":827,"dataGaName":828,"dataGaLocation":772},"/de-de/privacy/","privacy statement",{"text":830,"config":831},"Cookie-Einstellungen",{"dataGaName":832,"dataGaLocation":772,"id":833,"isOneTrustButton":311},"cookie preferences","ot-sdk-btn",{"title":344,"links":835,"subMenu":849},[836,839,841,843,845,847],{"text":837,"config":838},"Plattform entdecken",{"href":352,"dataGaName":346,"dataGaLocation":772},{"text":404,"config":840},{"href":406,"dataGaName":407,"dataGaLocation":772},{"text":358,"config":842},{"href":360,"dataGaName":361,"dataGaLocation":772},{"text":409,"config":844},{"href":411,"dataGaName":412,"dataGaLocation":772},{"text":391,"config":846},{"href":393,"dataGaName":394,"dataGaLocation":772},{"text":422,"config":848},{"href":427,"dataGaName":428,"dataGaLocation":772},[850],{"title":851,"links":852},"Themen",[853,857,862,867,872,877,882,887],{"text":358,"config":854},{"href":855,"dataGaName":856,"dataGaLocation":772},"/de-de/topics/ci-cd/","cicd",{"text":858,"config":859},"GitOps",{"href":860,"dataGaName":861,"dataGaLocation":772},"/de-de/topics/gitops/","gitops",{"text":863,"config":864},"DevOps",{"href":865,"dataGaName":866,"dataGaLocation":772},"/de-de/topics/devops/","devops",{"text":868,"config":869},"Versionskontrolle",{"href":870,"dataGaName":871,"dataGaLocation":772},"/de-de/topics/version-control/","version control",{"text":873,"config":874},"DevSecOps",{"href":875,"dataGaName":876,"dataGaLocation":772},"/de-de/topics/devsecops/","devsecops",{"text":878,"config":879},"Cloud-nativ",{"href":880,"dataGaName":881,"dataGaLocation":772},"/de-de/topics/cloud-native/","cloud native",{"text":883,"config":884},"KI für das Programmieren",{"href":885,"dataGaName":886,"dataGaLocation":772},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":888,"config":889},"Agentische KI",{"href":890,"dataGaName":891,"dataGaLocation":772},"/de-de/topics/agentic-ai/","agentic ai",{"title":430,"links":893},[894,896,898,900,902,904,906,908,910,912,915,918,920,923,927,931],{"text":443,"config":895},{"href":445,"dataGaName":446,"dataGaLocation":772},{"text":448,"config":897},{"href":450,"dataGaName":451,"dataGaLocation":772},{"text":453,"config":899},{"href":455,"dataGaName":456,"dataGaLocation":772},{"text":479,"config":901},{"href":481,"dataGaName":482,"dataGaLocation":772},{"text":484,"config":903},{"href":486,"dataGaName":487,"dataGaLocation":772},{"text":489,"config":905},{"href":491,"dataGaName":492,"dataGaLocation":772},{"text":494,"config":907},{"href":496,"dataGaName":497,"dataGaLocation":772},{"text":499,"config":909},{"href":501,"dataGaName":502,"dataGaLocation":772},{"text":504,"config":911},{"href":506,"dataGaName":507,"dataGaLocation":772},{"text":913,"config":914},"Enterprise",{"href":463,"dataGaName":464,"dataGaLocation":772},{"text":916,"config":917},"Kleinunternehmen",{"href":468,"dataGaName":469,"dataGaLocation":772},{"text":471,"config":919},{"href":473,"dataGaName":474,"dataGaLocation":772},{"text":858,"config":921},{"href":922,"dataGaName":861,"dataGaLocation":772},"/de-de/solutions/gitops/",{"text":924,"config":925},"Analyse der Softwarezusammensetzung (SCA)",{"href":398,"dataGaName":926,"dataGaLocation":772},"software composition analysis",{"text":928,"config":929},"Wertstrommanagement",{"href":416,"dataGaName":930,"dataGaLocation":772},"value stream management",{"text":932,"config":933},"Alle Lösungen",{"href":437,"dataGaName":934,"dataGaLocation":772},"all solutions",{"title":523,"links":936},[937,942,947,949,951,953,955,957,959,961,964,966,968,970,973],{"text":938,"config":939},"Installieren",{"href":940,"dataGaName":941,"dataGaLocation":772},"/de-de/install/","install",{"text":943,"config":944},"Kurzanleitungen",{"href":945,"dataGaName":946,"dataGaLocation":772},"/de-de/get-started/","quick setup checklists",{"text":536,"config":948},{"href":538,"dataGaName":539,"dataGaLocation":772},{"text":541,"config":950},{"href":543,"dataGaName":544,"dataGaLocation":772},{"text":546,"config":952},{"href":548,"dataGaName":549,"dataGaLocation":772},{"text":551,"config":954},{"href":553,"dataGaName":554,"dataGaLocation":772},{"text":556,"config":956},{"href":558,"dataGaName":559,"dataGaLocation":772},{"text":564,"config":958},{"href":566,"dataGaName":567,"dataGaLocation":772},{"text":569,"config":960},{"href":571,"dataGaName":572,"dataGaLocation":772},{"text":962,"config":963},"Kund(inn)en",{"href":576,"dataGaName":577,"dataGaLocation":772},{"text":579,"config":965},{"href":581,"dataGaName":582,"dataGaLocation":772},{"text":584,"config":967},{"href":586,"dataGaName":587,"dataGaLocation":772},{"text":647,"config":969},{"href":649,"dataGaName":650,"dataGaLocation":772},{"text":971,"config":972},"Neuerungen",{"href":595,"dataGaName":596,"dataGaLocation":772},{"text":974,"config":975},"Alle Ressourcen",{"href":530,"dataGaName":976,"dataGaLocation":772},"all resources",{"title":598,"links":978},[979,981,983,985,987,989,991,993,995,1000,1005],{"text":606,"config":980},{"href":608,"dataGaName":600,"dataGaLocation":772},{"text":611,"config":982},{"href":613,"dataGaName":614,"dataGaLocation":772},{"text":617,"config":984},{"href":619,"dataGaName":620,"dataGaLocation":772},{"text":622,"config":986},{"href":624,"dataGaName":625,"dataGaLocation":772},{"text":627,"config":988},{"href":629,"dataGaName":630,"dataGaLocation":772},{"text":632,"config":990},{"href":634,"dataGaName":635,"dataGaLocation":772},{"text":637,"config":992},{"href":639,"dataGaName":640,"dataGaLocation":772},{"text":642,"config":994},{"href":644,"dataGaName":645,"dataGaLocation":772},{"text":996,"config":997},"Nachhaltigkeit",{"href":998,"dataGaName":999,"dataGaLocation":772},"/sustainability/","Sustainability",{"text":1001,"config":1002},"Vielfalt, Inklusion und Zugehörigkeit",{"href":1003,"dataGaName":1004,"dataGaLocation":772},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1006,"config":1007},"Transparenzerklärung zu moderner Sklaverei",{"href":1008,"dataGaName":1009,"dataGaLocation":772},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1011},[1012,1015,1018],{"text":1013,"config":1014},"Terms",{"href":822,"dataGaName":823,"dataGaLocation":772},{"text":1016,"config":1017},"Cookies",{"dataGaName":832,"dataGaLocation":772,"id":833,"isOneTrustButton":311},{"text":1019,"config":1020},"Datenschutz",{"href":827,"dataGaName":828,"dataGaLocation":772},[1022],{"id":1023,"title":7,"body":307,"config":1024,"content":1026,"description":307,"extension":1029,"meta":1030,"navigation":311,"path":1031,"seo":1032,"stem":1033,"__hash__":1034},"blogAuthors/en-us/blog/authors/amit-shalem.yml",{"template":1025},"BlogAuthor",{"name":7,"config":1027},{"headshot":1028},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1789051782/t66kjqncbzsznqsokogo.png","yml",{},"/en-us/blog/authors/amit-shalem",{},"en-us/blog/authors/amit-shalem","myYkfCRRxt-YcE_B3aEI5IBr8ZsVXHZ7UdbKwEabo4I",[1036,1044,1051],{"title":1037,"description":1038,"heroImage":1039,"category":303,"date":1040,"authors":1041,"slug":1043,"externalUrl":307},"Sicherheitsrisiken der gesamten Organisation in einem Dashboard","Für Unternehmen mit vielen Top-Level-Gruppen fasst GitLab jetzt Schwachstellen und einen einheitlichen Risikowert für die gesamte Organisation zusammen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-10-08",[1042],"Alisa Ho","security-risk-in-one-dashboard",{"title":1045,"description":1046,"heroImage":1047,"category":303,"date":1048,"authors":1049,"slug":1050,"externalUrl":307},"Dependency Firewall: riskante Pakete vor dem Build stoppen","GitLab Dependency Firewall hält schädliche und anfällige Pakete automatisch aus dem Build fern, damit Teams und Agenten mit geprüften Abhängigkeiten arbeiten.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198675/kmajkudog4fj3xc6qfyb.png","2026-10-06",[1042,7],"transcend-dependency-firewall",{"title":1052,"description":1053,"heroImage":309,"category":303,"date":1054,"authors":1055,"slug":1057,"externalUrl":307},"Die Software Factory maschinenschnell sichern","Das Fundament für agentische Softwareentwicklung muss mit den KI-Modellen wachsen und den Weg von der Erkennung zur verifizierten Behebung verkürzen.","2026-09-18",[1056],"Chaim Mazal","securing-the-software-factory-at-machine-speed",{"header":1059,"text":1060,"button":1064,"disclaimer":1067},"Kostenlose 30-tägige\n\nGitLab-Testversion starten\n",[1061,1062,1063],"GitLab Duo Agent Platform nutzen","Unsere fortschrittlichsten Funktionen ausprobieren","Komplexe Aufgaben mit KI automatisieren",{"text":710,"config":1065},{"href":1066,"dataGaName":331,"dataGaLocation":567},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/blog/","Keine Kreditkarte erforderlich.",{"header":1069,"blurb":1070,"button":1071,"secondaryButton":1076},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1072,"config":1073},"Kostenlosen Test starten",{"href":1074,"dataGaName":331,"dataGaLocation":1075},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":659,"config":1077},{"href":661,"dataGaName":336,"dataGaLocation":1075},1791952241799]