[{"data":1,"prerenderedAt":1079},["ShallowReactive",2],{"/de-de/blog/introducing-gitlab-advanced-vulnerability-tracking":3,"navigation-de-de":298,"banner-de-de":729,"footer-de-de":737,"blog-post-authors-de-de-Julian Thome":978,"blog-related-posts-de-de-introducing-gitlab-advanced-vulnerability-tracking":992,"blog-promotions-de-de":1016,"next-steps-de-de":1069},{"id":4,"title":5,"authors":6,"body":8,"category":274,"date":275,"description":276,"extension":277,"externalUrl":278,"faq":278,"featured":279,"heroImage":280,"meta":281,"navigation":282,"path":283,"seo":284,"slug":290,"stem":291,"tags":292,"template":296,"updatedDate":278,"__hash__":297},"blogPosts/de-de/blog/introducing-gitlab-advanced-vulnerability-tracking.md","Dank Vulnerability Tracking 30% kürzere Audit-Zeit",[7],"Julian Thome",{"type":9,"value":10,"toc":260},"minimark",[11,15,31,36,45,62,70,75,78,82,91,94,100,121,124,128,137,143,146,158,162,165,171,175,178,181,184,188,197,202,216,219,222,248,250],[12,13,14],"p",{},"DevSecOps ermöglicht kurze Release-Zyklen und schnelle Feedback-Schleifen für Deployment-Erfolg. Diese Feedbacks informieren Entwicklungsteams und Product Management über Feature-Auswirkungen unmittelbar nach Auslieferung.",[12,16,17,18,24,25,30],{},"GitLab als agnostische DevSecOps-Plattform integriert verschiedene ",[19,20,23],"a",{"href":21,"rel":22},"https://about.gitlab.com/topics/ci-cd/",[],"CI/CD","-Tools, die zur Funktionalität beitragen. Der ",[19,26,29],{"href":27,"rel":28},"https://docs.gitlab.com/user/application_security/vulnerability_report/",[],"Vulnerability Report"," konsolidiert beispielsweise Schwachstellen-Detections aus mehreren Tools verschiedener Pipelines in einer einheitlichen Ansicht.",[32,33,35],"h2",{"id":34},"das-duplikations-problem-in-heterogenen-sast-setups","Das Duplikations-Problem in heterogenen SAST-Setups",[12,37,38,39,44],{},"In heterogenen Static Application Security Testing (",[19,40,43],{"href":41,"rel":42},"https://docs.gitlab.com/user/application_security/sast/",[],"SAST",")-Umgebungen entstehen Schwachstellen-Duplikate aus zwei Quellen:",[46,47,48,56],"ol",{},[49,50,51,55],"li",{},[52,53,54],"strong",{},"Code-Volatilität:"," Schwachstellen werden in sich ständig ändernder Code-Basis wiederholt gemeldet.",[49,57,58,61],{},[52,59,60],{},"Double-Reporting:"," Mehrere SAST-Tools melden dieselbe Schwachstelle separat.",[12,63,64,65,69],{},"Traditionelle Tracking-Methoden nutzen ",[66,67,68],"code",{},"\u003Cfile, line number>","-Fingerprints, die bei Code-Änderungen brechen. Sobald Code refaktoriert oder verschoben wird, erscheint dieselbe Schwachstelle als \"neu\" – dies führt zu redundanten manuellen Audits bereits bekannter Schwachstellen. GitLab-Dokumentation beschreibt das Problem: \"Source code is volatile; as developers make changes, source code may move in the same file or between files... If the code fragments are not tracked reliably as they move, vulnerability management is harder because the same vulnerability could be reported again.\"",[71,72,74],"h3",{"id":73},"vulnerability-fatigue-durch-duplikate","Vulnerability Fatigue durch Duplikate",[12,76,77],{},"Duplikations-bedingte Vulnerability Fatigue entsteht, wenn Security-Teams durch wiederholte Warnungen desensibilisiert werden. Das hohe Volumen redundanter Findings kann zu verminderter Reaktion auf tatsächlich relevante Schwachstellen führen – die schiere Menge überwältigt Auditor*innen bis Ergebnisse nicht mehr angemessen adressiert werden. Scope+Offset reduziert dieses Risiko durch systematische Deduplizierung.",[32,79,81],{"id":80},"advanced-vulnerability-tracking-syntax-tree-basierte-deduplizierung","Advanced Vulnerability Tracking: Syntax-Tree-basierte Deduplizierung",[12,83,84,85,90],{},"GitLab ",[19,86,89],{"href":87,"rel":88},"https://docs.gitlab.com/user/application_security/sast/#advanced-vulnerability-tracking",[],"Advanced Vulnerability Tracking"," adressiert beide Duplikations-Quellen durch kontextbasierte Deduplizierung in sich ändernden Code-Basen.",[12,92,93],{},"Das Feature nutzt Syntax-Tree-generierte Kontextinformationen, um Schwachstellen zu skopieren und Location-Fingerprints zu erzeugen, die robuster gegenüber Code-Änderungen sind als traditionelle Zeilen-basierte Methoden.",[12,95,96,99],{},[52,97,98],{},"Scope+Offset-Methode:"," Schwachstellen-Identität basiert auf drei Komponenten:",[101,102,103,109,115],"ul",{},[49,104,105,108],{},[52,106,107],{},"Scope:"," Code-Kontext (module > class > function Verschachtelung)",[49,110,111,114],{},[52,112,113],{},"Offset:"," Zeilen-Distanz zur Scope-Grenze (nicht absolute Zeilennummer)",[49,116,117,120],{},[52,118,119],{},"CWE-Typ:"," Vulnerability-Klassifikation (z.B. CWE-22 Path Traversal)",[12,122,123],{},"Diese Methode ermöglicht Tracking über Refactoring-Operationen hinweg: Selbst wenn Code innerhalb derselben Funktion verschoben wird, bleibt die Schwachstelle durch Scope+Offset identifizierbar.",[71,125,127],{"id":126},"wissenschaftlich-validierte-effizienzsteigerung","Wissenschaftlich validierte Effizienzsteigerung",[12,129,130,131,136],{},"Eine peer-reviewed Studie, präsentiert auf der ",[19,132,135],{"href":133,"rel":134},"https://conf.researchr.org/home/icse-2025",[],"47th International Conference on Software Engineering (ICSE 2025)",", belegt: Advanced Vulnerability Tracking ist 30% effektiver als traditionelles Zeilen-basiertes Tracking. Dies entspricht einer 30%-Reduzierung des manuellen Audit-Aufwands für Schwachstellen-Management.",[12,138,139,142],{},[52,140,141],{},"Evaluierungs-Rigor:"," Die Studie basiert auf dem GitLab-Source-Code-Repository mit 3,7 Millionen Zeilen Code und 200.000 Commits über einen 2-Monats-Zeitraum. Die Ergebnisse zeigen progressive Verbesserung: 11% Effizienzgewinn nach dem ersten Patch, steigend auf 30% nach 13 Patches. Der Performance-Overhead ist vernachlässigbar (\u003C3%).",[12,144,145],{},"Die Studie zeigt außerdem: Der positive Effekt der Methode verstärkt sich über die Zeit, da sich Code-Basen weiterentwickeln und traditionelle Fingerprints zunehmend fragmentieren.",[12,147,148,151,152,157],{},[52,149,150],{},"Preprint verfügbar:"," ",[19,153,156],{"href":154,"rel":155},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1781054360/ddalqemesepnforop58c.pdf",[],"A scalable, effective and simple Vulnerability Tracking approach for heterogeneous SAST setups based on Scope+Offset"," (PDF, ICSE 2025)",[71,159,161],{"id":160},"produktiveinsatz-seit-2022","Produktiveinsatz seit 2022",[12,163,164],{},"Seit der Integration in GitLab im Jahr 2022 verarbeitet Scope+Offset täglich tausende Security-Scans auf der GitLab DevSecOps-Plattform. Die Methode erwies sich als skalierbar, effektiv und wartungsarm in heterogenen SAST-Umgebungen mit mehreren Tools.",[12,166,167,170],{},[52,168,169],{},"Sprachunterstützung:"," C#, C/C++, Go, Java, JavaScript, Python, Ruby und PHP. Die Methode ist sprachagnostisch durch tree-sitter-Parser-Integration und lässt sich als Post-Analyzer mit beliebigen SAST-Tools kombinieren, die das GitLab-SAST-Report-Format unterstützen.",[32,172,174],{"id":173},"relevanz-für-deutsche-devsecops-teams","Relevanz für deutsche DevSecOps-Teams",[12,176,177],{},"Deutsche Unternehmen setzen zunehmend heterogene SAST-Tool-Landschaften ein, insbesondere in regulierten Branchen (Automotive, Finance, Healthcare). Die NIS2-Richtlinie (Artikel 21) und DSGVO (Artikel 32) erfordern systematisches Schwachstellen-Management mit lückenloser Nachverfolgung.",[12,179,180],{},"Advanced Vulnerability Tracking reduziert den administrativen Overhead durch Deduplizierung und ermöglicht Sicherheitsteams, sich auf tatsächliche Schwachstellen-Remediation zu konzentrieren statt auf redundante Audits. Die wissenschaftliche Validierung durch ICSE 2025 (International Conference on Software Engineering) unterstreicht die methodische Fundierung – ein wichtiger Faktor für deutsche Compliance-Anforderungen und Zertifizierungsprozesse.",[12,182,183],{},"Für Unternehmen mit BSI IT-Grundschutz-Zertifizierung (Baustein APP.3.1: Sichere Webanwendungen) ermöglicht die Methode effizientere Schwachstellen-Dokumentation für Audit-Trails.",[32,185,187],{"id":186},"verwandte-features-für-audit-effizienz","Verwandte Features für Audit-Effizienz",[12,189,190,191,196],{},"Advanced Vulnerability Tracking reduziert operativen SAST-Audit-Aufwand um 30% auf technischer Pipeline-Ebene. Für strategische Compliance-Audit-Beschleunigung siehe ",[19,192,195],{"href":193,"rel":194},"https://about.gitlab.com/de-de/blog/introducing-custom-compliance-frameworks-in-gitlab/",[],"Custom Compliance Frameworks: 90% weniger Auditzeit",", die Audit-Vorbereitung um 90% reduzieren durch automatisierte Multi-Framework-Durchsetzung (NIS2, DSGVO, ISO 27001).",[12,198,199],{},[52,200,201],{},"Kombinierte Audit-Effizienz:",[101,203,204,210],{},[49,205,206,209],{},[52,207,208],{},"30% (Vulnerability Tracking):"," SAST-Deduplizierung, operative Pipeline-Ebene",[49,211,212,215],{},[52,213,214],{},"90% (Compliance Frameworks):"," Framework-Governance, strategische Compliance-Ebene",[12,217,218],{},"Beide Features eliminieren unterschiedliche Arten manuellen Overheads und ermöglichen Security- und Compliance-Teams, sich auf tatsächliche Remediation zu konzentrieren statt auf redundante Audits.",[220,221],"hr",{},[12,223,224],{},[225,226,227,151,230,235,236,241,242,247],"em",{},[52,228,229],{},"Mitwirkende:",[19,231,234],{"href":232,"rel":233},"https://gitlab.com/theoretick",[],"Lucas Charles",", ",[19,237,240],{"href":238,"rel":239},"https://gitlab.com/jleasure",[],"Jason Leasure"," und ",[19,243,246],{"href":244,"rel":245},"https://gitlab.com/hyan3",[],"Hua Yan"," haben zu diesem Artikel und der Studie beigetragen.",[220,249],{},[12,251,252,151,255],{},[52,253,254],{},"Englische Originalversion:",[19,256,259],{"href":257,"rel":258},"https://about.gitlab.com/blog/introducing-gitlab-advanced-vulnerability-tracking/",[],"Introducing GitLab Advanced Vulnerability Tracking",{"title":261,"searchDepth":262,"depth":262,"links":263},"",2,[264,268,272,273],{"id":34,"depth":262,"text":35,"children":265},[266],{"id":73,"depth":267,"text":74},3,{"id":80,"depth":262,"text":81,"children":269},[270,271],{"id":126,"depth":267,"text":127},{"id":160,"depth":267,"text":161},{"id":173,"depth":262,"text":174},{"id":186,"depth":262,"text":187},"security","2025-01-21","ICSE 2025 peer-reviewed: Syntax-Tree-Deduplizierung reduziert SAST-Audit um 30%. Evaluierung mit 3,7 Mio. Zeilen Code, Effizienz steigt über Zeit.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749664844/Blog/Hero%20Images/AdobeStock_941867776.jpg",{},true,"/de-de/blog/introducing-gitlab-advanced-vulnerability-tracking",{"title":5,"description":285,"ogTitle":5,"ogDescription":276,"noIndex":279,"ogImage":280,"ogUrl":286,"ogSiteName":287,"ogType":288,"canonicalUrls":289},"ICSE 2025 peer-reviewed: Syntax-Tree-Deduplizierung reduziert SAST-Audit um 30%. Test: 3,7 Mio. Zeilen Code, Effizienz steigt über Zeit.","https://about.gitlab.com/de-de/blog/introducing-gitlab-advanced-vulnerability-tracking","https://about.gitlab.com","article","https://about.gitlab.com/blog/introducing-gitlab-advanced-vulnerability-tracking","introducing-gitlab-advanced-vulnerability-tracking","de-de/blog/introducing-gitlab-advanced-vulnerability-tracking",[274,293,294,295],"security research","features","DevSecOps platform","BlogPost","gi7Aw2na1PEBT4N07nmBp-_j3RqDufZblubgL1bGYzk",{"logo":299,"freeTrial":304,"sales":309,"login":314,"items":319,"search":647,"minimal":681,"duo":699,"switchNav":708,"pricingDeployment":719},{"config":300},{"href":301,"dataGaName":302,"dataGaLocation":303},"/de-de/","gitlab logo","header",{"text":305,"config":306},"Kostenlose Testversion anfordern",{"href":307,"dataGaName":308,"dataGaLocation":303},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":310,"config":311},"Demo anfordern",{"href":312,"dataGaName":313,"dataGaLocation":303},"/de-de/sales/?contact-topic=request-demo","sales",{"text":315,"config":316},"Anmelden",{"href":317,"dataGaName":318,"dataGaLocation":303},"https://gitlab.com/users/sign_in/","sign in",[320,349,450,455,569,625],{"text":321,"config":322,"menu":324},"Plattform",{"dataNavLevelOne":323},"platform",{"type":325,"columns":326},"cards",[327,333,341],{"title":321,"description":328,"link":329},"Die intelligente Orchestrierungsplattform für DevSecOps",{"text":330,"config":331},"Die Plattform erkunden",{"href":332,"dataGaName":323,"dataGaLocation":303},"/de-de/platform/",{"title":334,"description":335,"link":336},"GitLab Duo Agent Platform","Agentische KI für den gesamten Software-Lebenszyklus",{"text":337,"config":338},"Lerne GitLab Duo kennen",{"href":339,"dataGaName":340,"dataGaLocation":303},"/de-de/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":342,"description":343,"link":344},"Warum GitLab?","Erfahre, warum sich Unternehmen für GitLab entscheiden",{"text":345,"config":346},"Mehr erfahren",{"href":347,"dataGaName":348,"dataGaLocation":303},"/de-de/why-gitlab/","why gitlab",{"text":350,"left":282,"config":351,"menu":353},"Produkt",{"dataNavLevelOne":352},"solutions",{"type":354,"link":355,"columns":359,"feature":429},"lists",{"text":356,"config":357},"Alle Lösungen anzeigen",{"href":358,"dataGaName":352,"dataGaLocation":303},"/de-de/solutions/",[360,384,407],{"title":361,"description":362,"link":363,"items":368},"Automatisierung","CI/CD und Automatisierung zur Beschleunigung der Bereitstellung",{"config":364},{"icon":365,"href":366,"dataGaName":367,"dataGaLocation":303},"AutomatedCodeAlt","/de-de/solutions/delivery-automation/","automated software delivery",[369,372,375,380],{"text":23,"config":370},{"href":371,"dataGaLocation":303,"dataGaName":23},"/de-de/solutions/continuous-integration/",{"text":334,"config":373},{"href":339,"dataGaLocation":303,"dataGaName":374},"gitlab duo agent platform - product menu",{"text":376,"config":377},"Quellcodeverwaltung",{"href":378,"dataGaLocation":303,"dataGaName":379},"/de-de/solutions/source-code-management/","Source Code Management",{"text":381,"config":382},"Automatische Softwarebereitstellung",{"href":366,"dataGaLocation":303,"dataGaName":383},"Automated software delivery",{"title":385,"description":386,"link":387,"items":392},"Sicherheit","Entwickle Code schneller ohne Abstriche bei der Sicherheit",{"config":388},{"href":389,"dataGaName":390,"dataGaLocation":303,"icon":391},"/de-de/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[393,397,402],{"text":394,"config":395},"Anwendungssicherheitstests",{"href":389,"dataGaName":396,"dataGaLocation":303},"Application security testing",{"text":398,"config":399},"Schutz der Software-Lieferkette",{"href":400,"dataGaLocation":303,"dataGaName":401},"/de-de/solutions/supply-chain/","Software supply chain security",{"text":403,"config":404},"Software-Compliance",{"href":405,"dataGaName":406,"dataGaLocation":303},"/de-de/solutions/software-compliance/","software compliance",{"title":408,"link":409,"items":414},"Messung",{"config":410},{"icon":411,"href":412,"dataGaName":413,"dataGaLocation":303},"DigitalTransformation","/de-de/solutions/visibility-measurement/","visibility and measurement",[415,419,424],{"text":416,"config":417},"Sichtbarkeit und Messung",{"href":412,"dataGaLocation":303,"dataGaName":418},"Visibility and Measurement",{"text":420,"config":421},"Wertstrommanagement",{"href":422,"dataGaLocation":303,"dataGaName":423},"/de-de/solutions/value-stream-management/","Value Stream Management",{"text":425,"config":426},"Analysen und Einblicke",{"href":427,"dataGaLocation":303,"dataGaName":428},"/de-de/solutions/analytics-and-insights/","Analytics and insights",{"title":430,"type":354,"items":431},"GitLab für",[432,438,444],{"text":433,"config":434},"Enterprise",{"icon":435,"href":436,"dataGaLocation":303,"dataGaName":437},"Building","/de-de/enterprise/","enterprise",{"text":439,"config":440},"Kleinunternehmen",{"icon":441,"href":442,"dataGaLocation":303,"dataGaName":443},"Work","/de-de/small-business/","small business",{"text":445,"config":446},"Öffentlicher Sektor",{"icon":447,"href":448,"dataGaLocation":303,"dataGaName":449},"Organization","/de-de/solutions/public-sector/","public sector",{"text":451,"config":452},"Preise",{"href":453,"dataGaName":454,"dataGaLocation":303,"dataNavLevelOne":454},"/de-de/pricing/","pricing",{"text":456,"config":457,"menu":459},"Ressourcen",{"dataNavLevelOne":458},"resources",{"type":354,"link":460,"columns":464,"feature":558},{"text":461,"config":462},"Alle Ressourcen anzeigen",{"href":463,"dataGaName":458,"dataGaLocation":303},"/de-de/resources/",[465,498,525],{"title":466,"items":467},"Erste Schritte",[468,473,478,483,488,493],{"text":469,"config":470},"Installieren",{"href":471,"dataGaName":472,"dataGaLocation":303},"/de-de/install/","install",{"text":474,"config":475},"Kurzanleitungen",{"href":476,"dataGaName":477,"dataGaLocation":303},"/de-de/get-started/","quick setup checklists",{"text":479,"config":480},"Lernen",{"href":481,"dataGaLocation":303,"dataGaName":482},"https://university.gitlab.com/","learn",{"text":484,"config":485},"Produktdokumentation",{"href":486,"dataGaName":487,"dataGaLocation":303},"https://docs.gitlab.com/","product documentation",{"text":489,"config":490},"Best-Practice-Videos",{"href":491,"dataGaName":492,"dataGaLocation":303},"/de-de/getting-started-videos/","best practice videos",{"text":494,"config":495},"Integrationen",{"href":496,"dataGaName":497,"dataGaLocation":303},"/de-de/integrations/","integrations",{"title":499,"items":500},"Entdecken",[501,506,511,516,520],{"text":502,"config":503},"Kundenerfolge",{"href":504,"dataGaName":505,"dataGaLocation":303},"/de-de/customers/","customer success stories",{"text":507,"config":508},"Blog",{"href":509,"dataGaName":510,"dataGaLocation":303},"/de-de/blog/","blog",{"text":512,"config":513},"Demo-Hub",{"href":514,"dataGaName":515,"dataGaLocation":303},"/de-de/demo-hub/","demo hub",{"text":517,"config":518},"The Source",{"href":519,"dataGaName":510,"dataGaLocation":303},"/de-de/the-source/",{"text":521,"config":522},"Remote",{"href":523,"dataGaName":524,"dataGaLocation":303},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":526,"items":527},"Vernetzen",[528,533,538,543,548,553],{"text":529,"config":530},"GitLab-Services",{"href":531,"dataGaName":532,"dataGaLocation":303},"/de-de/services/","services",{"text":534,"config":535},"Beitragen",{"href":536,"dataGaName":537,"dataGaLocation":303},"https://contributors.gitlab.com","contribute",{"text":539,"config":540},"Community",{"href":541,"dataGaName":542,"dataGaLocation":303},"/community/","community",{"text":544,"config":545},"Forum",{"href":546,"dataGaName":547,"dataGaLocation":303},"https://forum.gitlab.com/","forum",{"text":549,"config":550},"Veranstaltungen",{"href":551,"dataGaName":552,"dataGaLocation":303},"/events/","events",{"text":554,"config":555},"Partner",{"href":556,"dataGaName":557,"dataGaLocation":303},"/de-de/partners/","partners",{"config":559,"title":562,"text":563,"link":564},{"background":560,"textColor":561},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":565,"config":566},"Aktuelle Nachrichten",{"href":567,"dataGaName":568,"dataGaLocation":303},"/de-de/whats-new/","whats new",{"text":570,"config":571,"menu":573},"Unternehmen",{"dataNavLevelOne":572},"company",{"type":354,"columns":574},[575],{"items":576},[577,582,588,590,595,600,605,610,615,620],{"text":578,"config":579},"Über",{"href":580,"dataGaName":581,"dataGaLocation":303},"/de-de/company/","about",{"text":583,"config":584,"footerGa":587},"Karriere",{"href":585,"dataGaName":586,"dataGaLocation":303},"/jobs/","jobs",{"dataGaName":586},{"text":549,"config":589},{"href":551,"dataGaName":552,"dataGaLocation":303},{"text":591,"config":592},"Geschäftsführung",{"href":593,"dataGaName":594,"dataGaLocation":303},"/company/team/e-group/","leadership",{"text":596,"config":597},"Handbuch",{"href":598,"dataGaName":599,"dataGaLocation":303},"https://handbook.gitlab.com/","handbook",{"text":601,"config":602},"Investor Relations",{"href":603,"dataGaName":604,"dataGaLocation":303},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":606,"config":607},"Trust Center",{"href":608,"dataGaName":609,"dataGaLocation":303},"/de-de/security/","trust center",{"text":611,"config":612},"AI Transparency Center",{"href":613,"dataGaName":614,"dataGaLocation":303},"/de-de/ai-transparency-center/","ai transparency center",{"text":616,"config":617},"Newsletter",{"href":618,"dataGaName":619,"dataGaLocation":303},"/company/contact/#contact-forms","newsletter",{"text":621,"config":622},"Presse",{"href":623,"dataGaName":624,"dataGaLocation":303},"/press/","press",{"text":626,"config":627,"menu":628},"Kontakt",{"dataNavLevelOne":572},{"type":354,"columns":629},[630],{"items":631},[632,637,642],{"text":633,"config":634},"Vertrieb kontaktieren",{"href":635,"dataGaName":636,"dataGaLocation":303},"/de-de/sales/","talk to sales",{"text":638,"config":639},"Support-Portal",{"href":640,"dataGaName":641,"dataGaLocation":303},"https://support.gitlab.com/hc/en-us","support portal",{"text":643,"config":644},"Kundenportal",{"href":645,"dataGaName":646,"dataGaLocation":303},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":648,"login":649,"suggestions":656},"Schließen",{"text":650,"link":651},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":652,"config":653},"gitlab.com",{"href":317,"dataGaName":654,"dataGaLocation":655},"search login","search",{"text":657,"default":658},"Vorschläge",[659,661,666,668,673,678],{"text":334,"config":660},{"href":339,"dataGaName":334,"dataGaLocation":655},{"text":662,"config":663},"Codevorschläge (KI)",{"href":664,"dataGaName":665,"dataGaLocation":655},"/de-de/solutions/code-suggestions/","Code Suggestions (AI)",{"text":23,"config":667},{"href":371,"dataGaName":23,"dataGaLocation":655},{"text":669,"config":670},"GitLab auf AWS",{"href":671,"dataGaName":672,"dataGaLocation":655},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":674,"config":675},"GitLab auf Google Cloud",{"href":676,"dataGaName":677,"dataGaLocation":655},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":342,"config":679},{"href":347,"dataGaName":680,"dataGaLocation":655},"Why GitLab?",{"freeTrial":682,"mobileIcon":687,"desktopIcon":692,"secondaryButton":695},{"text":683,"config":684},"Kostenlos testen",{"href":685,"dataGaName":308,"dataGaLocation":686},"https://gitlab.com/-/trials/new/","nav",{"altText":688,"config":689},"GitLab-Symbol",{"src":690,"dataGaName":691,"dataGaLocation":686},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":688,"config":693},{"src":694,"dataGaName":691,"dataGaLocation":686},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":466,"config":696},{"href":697,"dataGaName":698,"dataGaLocation":686},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":700,"mobileIcon":704,"desktopIcon":706},{"text":701,"config":702},"Mehr über GitLab Duo erfahren",{"href":339,"dataGaName":703,"dataGaLocation":686},"gitlab duo",{"altText":688,"config":705},{"src":690,"dataGaName":691,"dataGaLocation":686},{"altText":688,"config":707},{"src":694,"dataGaName":691,"dataGaLocation":686},{"button":709,"mobileIcon":714,"desktopIcon":716},{"text":710,"config":711},"/Option",{"href":712,"dataGaName":713,"dataGaLocation":686},"#contact","switch",{"altText":688,"config":715},{"src":690,"dataGaName":691,"dataGaLocation":686},{"altText":688,"config":717},{"src":718,"dataGaName":691,"dataGaLocation":686},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":720,"mobileIcon":725,"desktopIcon":727},{"text":721,"config":722},"Zurück zur Preisübersicht",{"href":453,"dataGaName":723,"dataGaLocation":686,"icon":724},"back to pricing","GoBack",{"altText":688,"config":726},{"src":690,"dataGaName":691,"dataGaLocation":686},{"altText":688,"config":728},{"src":694,"dataGaName":691,"dataGaLocation":686},{"title":730,"button":731,"config":735},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":345,"config":732},{"href":733,"dataGaName":734,"dataGaLocation":303},"/de-de/gitlab-orbit/","orbit",{"layout":736,"disabled":279},"release",{"data":738},{"text":739,"source":740,"edit":746,"contribute":751,"config":756,"items":761,"minimal":967},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":741,"config":742},"Quelltext der Seite anzeigen",{"href":743,"dataGaName":744,"dataGaLocation":745},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":747,"config":748},"Diese Seite bearbeiten",{"href":749,"dataGaName":750,"dataGaLocation":745},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":752,"config":753},"Beteilige dich",{"href":754,"dataGaName":755,"dataGaLocation":745},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":757,"facebook":758,"youtube":759,"linkedin":760},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[762,807,860,902,934],{"title":451,"links":763,"subMenu":778},[764,768,773],{"text":765,"config":766},"Tarife anzeigen",{"href":453,"dataGaName":767,"dataGaLocation":745},"view plans",{"text":769,"config":770},"Vorteile von Premium",{"href":771,"dataGaName":772,"dataGaLocation":745},"/de-de/pricing/premium/","why premium",{"text":774,"config":775},"Vorteile von Ultimate",{"href":776,"dataGaName":777,"dataGaLocation":745},"/de-de/pricing/ultimate/","why ultimate",[779],{"title":626,"links":780},[781,783,785,787,792,797,802],{"text":633,"config":782},{"href":635,"dataGaName":313,"dataGaLocation":745},{"text":638,"config":784},{"href":640,"dataGaName":641,"dataGaLocation":745},{"text":643,"config":786},{"href":645,"dataGaName":646,"dataGaLocation":745},{"text":788,"config":789},"Status",{"href":790,"dataGaName":791,"dataGaLocation":745},"https://status.gitlab.com/","status",{"text":793,"config":794},"Nutzungsbedingungen",{"href":795,"dataGaName":796,"dataGaLocation":745},"/terms/","terms of use",{"text":798,"config":799},"Datenschutzerklärung",{"href":800,"dataGaName":801,"dataGaLocation":745},"/de-de/privacy/","privacy statement",{"text":803,"config":804},"Cookie-Einstellungen",{"dataGaName":805,"dataGaLocation":745,"id":806,"isOneTrustButton":282},"cookie preferences","ot-sdk-btn",{"title":350,"links":808,"subMenu":817},[809,813],{"text":810,"config":811},"DevSecOps-Plattform",{"href":332,"dataGaName":812,"dataGaLocation":745},"devsecops platform",{"text":814,"config":815},"KI-unterstützte Entwicklung",{"href":339,"dataGaName":816,"dataGaLocation":745},"ai-assisted development",[818],{"title":819,"links":820},"Themen",[821,825,830,835,840,845,850,855],{"text":23,"config":822},{"href":823,"dataGaName":824,"dataGaLocation":745},"/de-de/topics/ci-cd/","cicd",{"text":826,"config":827},"GitOps",{"href":828,"dataGaName":829,"dataGaLocation":745},"/de-de/topics/gitops/","gitops",{"text":831,"config":832},"DevOps",{"href":833,"dataGaName":834,"dataGaLocation":745},"/de-de/topics/devops/","devops",{"text":836,"config":837},"Versionskontrolle",{"href":838,"dataGaName":839,"dataGaLocation":745},"/de-de/topics/version-control/","version control",{"text":841,"config":842},"DevSecOps",{"href":843,"dataGaName":844,"dataGaLocation":745},"/de-de/topics/devsecops/","devsecops",{"text":846,"config":847},"Cloud-nativ",{"href":848,"dataGaName":849,"dataGaLocation":745},"/de-de/topics/cloud-native/","cloud native",{"text":851,"config":852},"KI für das Programmieren",{"href":853,"dataGaName":854,"dataGaLocation":745},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":856,"config":857},"Agentische KI",{"href":858,"dataGaName":859,"dataGaLocation":745},"/de-de/topics/agentic-ai/","agentic ai",{"title":861,"links":862},"Lösungen",[863,866,868,873,877,880,883,886,888,890,892,897],{"text":394,"config":864},{"href":389,"dataGaName":865,"dataGaLocation":745},"Application Security Testing",{"text":381,"config":867},{"href":366,"dataGaName":367,"dataGaLocation":745},{"text":869,"config":870},"Agile Entwicklung",{"href":871,"dataGaName":872,"dataGaLocation":745},"/de-de/solutions/agile-delivery/","agile delivery",{"text":874,"config":875},"SCM",{"href":378,"dataGaName":876,"dataGaLocation":745},"source code management",{"text":23,"config":878},{"href":371,"dataGaName":879,"dataGaLocation":745},"continuous integration & delivery",{"text":420,"config":881},{"href":422,"dataGaName":882,"dataGaLocation":745},"value stream management",{"text":826,"config":884},{"href":885,"dataGaName":829,"dataGaLocation":745},"/de-de/solutions/gitops/",{"text":433,"config":887},{"href":436,"dataGaName":437,"dataGaLocation":745},{"text":439,"config":889},{"href":442,"dataGaName":443,"dataGaLocation":745},{"text":445,"config":891},{"href":448,"dataGaName":449,"dataGaLocation":745},{"text":893,"config":894},"Bildungswesen",{"href":895,"dataGaName":896,"dataGaLocation":745},"/de-de/solutions/education/","education",{"text":898,"config":899},"Finanzdienstleistungen",{"href":900,"dataGaName":901,"dataGaLocation":745},"/de-de/solutions/finance/","financial services",{"title":456,"links":903},[904,906,908,910,913,915,918,920,922,924,926,928,930,932],{"text":469,"config":905},{"href":471,"dataGaName":472,"dataGaLocation":745},{"text":474,"config":907},{"href":476,"dataGaName":477,"dataGaLocation":745},{"text":479,"config":909},{"href":481,"dataGaName":482,"dataGaLocation":745},{"text":484,"config":911},{"href":486,"dataGaName":912,"dataGaLocation":745},"docs",{"text":507,"config":914},{"href":509,"dataGaName":510,"dataGaLocation":745},{"text":916,"config":917},"Neuerungen",{"href":567,"dataGaName":568,"dataGaLocation":745},{"text":502,"config":919},{"href":504,"dataGaName":505,"dataGaLocation":745},{"text":521,"config":921},{"href":523,"dataGaName":524,"dataGaLocation":745},{"text":529,"config":923},{"href":531,"dataGaName":532,"dataGaLocation":745},{"text":534,"config":925},{"href":536,"dataGaName":537,"dataGaLocation":745},{"text":539,"config":927},{"href":541,"dataGaName":542,"dataGaLocation":745},{"text":544,"config":929},{"href":546,"dataGaName":547,"dataGaLocation":745},{"text":549,"config":931},{"href":551,"dataGaName":552,"dataGaLocation":745},{"text":554,"config":933},{"href":556,"dataGaName":557,"dataGaLocation":745},{"title":570,"links":935},[936,938,940,942,944,946,951,956,958,960,962],{"text":578,"config":937},{"href":580,"dataGaName":572,"dataGaLocation":745},{"text":583,"config":939},{"href":585,"dataGaName":586,"dataGaLocation":745},{"text":591,"config":941},{"href":593,"dataGaName":594,"dataGaLocation":745},{"text":596,"config":943},{"href":598,"dataGaName":599,"dataGaLocation":745},{"text":601,"config":945},{"href":603,"dataGaName":604,"dataGaLocation":745},{"text":947,"config":948},"Nachhaltigkeit",{"href":949,"dataGaName":950,"dataGaLocation":745},"/sustainability/","Sustainability",{"text":952,"config":953},"Vielfalt, Inklusion und Zugehörigkeit",{"href":954,"dataGaName":955,"dataGaLocation":745},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":606,"config":957},{"href":608,"dataGaName":609,"dataGaLocation":745},{"text":616,"config":959},{"href":618,"dataGaName":619,"dataGaLocation":745},{"text":621,"config":961},{"href":623,"dataGaName":624,"dataGaLocation":745},{"text":963,"config":964},"Transparenzerklärung zu moderner Sklaverei",{"href":965,"dataGaName":966,"dataGaLocation":745},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":968},[969,972,975],{"text":970,"config":971},"Terms",{"href":795,"dataGaName":796,"dataGaLocation":745},{"text":973,"config":974},"Cookies",{"dataGaName":805,"dataGaLocation":745,"id":806,"isOneTrustButton":282},{"text":976,"config":977},"Datenschutz",{"href":800,"dataGaName":801,"dataGaLocation":745},[979],{"id":980,"title":7,"body":278,"config":981,"content":983,"description":278,"extension":986,"meta":987,"navigation":282,"path":988,"seo":989,"stem":990,"__hash__":991},"blogAuthors/en-us/blog/authors/julian-thome.yml",{"template":982},"BlogAuthor",{"name":7,"config":984},{"headshot":261,"ctfId":985},"jthome","yml",{},"/en-us/blog/authors/julian-thome",{},"en-us/blog/authors/julian-thome","60j2yTW0PuY7q83cXf4NkfzrKTRE2sUlVv5TXE6o1xM",[993,1000,1008],{"title":994,"description":995,"heroImage":996,"category":274,"date":997,"authors":998,"slug":999,"externalUrl":278},"Wie GitLab Schwachstellen über Refactorings hinweg verfolgt","Das verbesserte Scope+Offset-Fingerprinting hält das Tracking stabil, wenn Kommentare, Leerzeilen oder Reformatierungen dazukommen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[7],"improved-scope-offset-fingerprinting",{"title":1001,"description":1002,"heroImage":996,"category":274,"date":1003,"authors":1004,"slug":1007,"externalUrl":278},"GitLab Secrets Manager unterstützt ESO, Terraform und API","GitLab Secrets Manager liefert Secrets sicher an Kubernetes, Terraform und externe Workflows, aus einer einzigen Quelle für die gesamte Toolchain.","2026-08-06",[1005,1006],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1009,"description":1010,"heroImage":1011,"category":274,"date":1012,"authors":1013,"slug":1015,"externalUrl":278},"Mit Claude und GitLab jeden Commit bis zur Produktion absichern","Claude Security findet Schwachstellen in der Coding-Session. GitLab übernimmt danach: Scans, Policy-Durchsetzung und Audit-Nachweise im Lebenszyklus.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[1014],"Alisa Ho","claude-security-and-gitlab",{"promotions":1017},[1018,1032,1044,1055],{"id":1019,"categories":1020,"header":1022,"text":1023,"button":1024,"image":1029},"ai-modernization",[1021],"ai","Hält KI, was uns versprochen wurde?","Das Quiz dauert maximal 5 Minuten.",{"text":1025,"config":1026},"Ermittle deinen KI-Reifegrad",{"href":1027,"dataGaName":1028,"dataGaLocation":510},"/de-de/assessments/ai-modernization-assessment/","modernization assessment",{"config":1030},{"src":1031},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1033,"categories":1034,"header":1036,"text":1023,"button":1037,"image":1041},"devops-modernization",[1035,844],"product","Verwaltest du Tool-Chaos oder stellst du Innovationen bereit?",{"text":1038,"config":1039},"Ermittle deinen DevOps-Reifegrad",{"href":1040,"dataGaName":1028,"dataGaLocation":510},"/de-de/assessments/devops-modernization-assessment/",{"config":1042},{"src":1043},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1045,"categories":1046,"header":1047,"text":1023,"button":1048,"image":1052},"security-modernization",[274],"Tauschst du Schnelligkeit gegen Sicherheit ein?",{"text":1049,"config":1050},"Ermittle deinen Sicherheitsreifegrad",{"href":1051,"dataGaName":1028,"dataGaLocation":510},"/de-de/assessments/security-modernization-assessment/",{"config":1053},{"src":1054},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1056,"paths":1057,"header":1060,"text":1061,"button":1062,"image":1067},"github-azure-migration",[1058,1059],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Ist dein Team bereit für den Umzug von GitHub nach Azure?","GitHub stellt bereits auf Azure um. Finde heraus, was das für dich bedeutet.",{"text":1063,"config":1064},"Erfahre, wie GitLab im Vergleich zu GitHub abschneidet",{"href":1065,"dataGaName":1066,"dataGaLocation":510},"/de-de/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1068},{"src":1043},{"header":1070,"blurb":1071,"button":1072,"secondaryButton":1077},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1073,"config":1074},"Kostenlosen Test starten",{"href":1075,"dataGaName":308,"dataGaLocation":1076},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":633,"config":1078},{"href":635,"dataGaName":313,"dataGaLocation":1076},1786803724230]