[{"data":1,"prerenderedAt":1851},["ShallowReactive",2],{"/de-de/blog/the-ultimate-guide-to-token-management-at-gitlab":3,"navigation-de-de":1067,"banner-de-de":1499,"footer-de-de":1507,"blog-post-authors-de-de-Hakeem Abdul-Razak":1748,"blog-related-posts-de-de-the-ultimate-guide-to-token-management-at-gitlab":1764,"blog-promotions-de-de":1789,"next-steps-de-de":1841},{"id":4,"title":5,"authors":6,"body":8,"category":1045,"date":1046,"description":1047,"extension":1048,"externalUrl":1049,"faq":1049,"featured":461,"heroImage":1050,"meta":1051,"navigation":461,"path":1052,"seo":1053,"slug":1058,"stem":1059,"tags":1060,"template":1065,"updatedDate":1049,"__hash__":1066},"blogPosts/de-de/blog/the-ultimate-guide-to-token-management-at-gitlab.md","Der ultimative Leitfaden für die Token-Verwaltung mit GitLab",[7],"Hakeem Abdul-Razak",{"type":9,"value":10,"toc":1025},"minimark",[11,15,33,42,45,101,105,108,115,124,153,156,165,361,364,368,371,374,390,393,406,411,432,497,500,506,510,513,554,560,563,566,658,662,665,674,677,696,700,708,712,715,811,814,818,821,843,847,854,875,890,896,900,903,940,944,947,997,1001,1010,1021],[12,13,14],"p",{},"Stell dir Folgendes vor: Du bist Entwickler(in) in einem aufstrebenden Technologieunternehmen, es ist 2 Uhr morgens und du erhältst einen dringenden Anruf. Eine wichtige Bereitstellungs-Pipeline ist fehlgeschlagen und dein Team versucht, den Grund herauszufinden. Nach stundenlangem Suchen stellst du fest, dass jemand einen persönlichen Zugriffs-Token widerrufen hat, der zu einem bzw. einer Entwickler(in) gehörte, der bzw. die schon seit Wochen nicht mehr für das Unternehmen arbeitet. Dieser Token war an mehrere Automatisierungsprozesse gekoppelt, sodass jetzt dein gesamtes System im Chaos versunken ist. Wie stellst du sicher, dass so etwas nicht nochmals passiert?",[16,17,18],"blockquote",{},[12,19,20,24,25],{},[21,22,23],"strong",{},"40 Stunden weniger Arbeit pro Woche: Cube nutzt GitLab Duo für mehr Effizienz."," Codevorschläge, Testgenerierung und KI-Chat verhelfen zu einer besseren Arbeitsweise – schnell, sicher und effizient. Erfahre, wie Cube mit GitLab Duo den KI-Einsatz im SDLC perfektioniert. ",[21,26,27],{},[28,29,32],"a",{"href":30,"rel":31},"https://about.gitlab.com/de-de/customers/cube/",[],"Erfolgsstory lesen",[12,34,35,36,41],{},"Folge dieser Anleitung und erfahre Schritt für Schritt, wie du mit GitLab Token identifizieren, verwalten und schützen kannst. Dies ist eine praktische Ergänzung zur umfassenden ",[28,37,40],{"href":38,"rel":39},"https://docs.gitlab.com/security/tokens/",[],"Token-Übersichtsdokumentation"," für GitLab-Administrator(inn)en, Entwickler(innen) und Sicherheitsteams, die eine robuste Token-Verwaltung in ihren Projekten benötigen.",[12,43,44],{},"In diesem Leitfaden geht es um folgende Themen:",[46,47,48,55,61,75,81,87],"ul",{},[49,50,51],"li",{},[28,52,54],{"href":53},"#how-to-select-the-right-token-for-the-job","Wie wählst du den richtigen Token für den Job aus?",[49,56,57],{},[28,58,60],{"href":59},"#token-types","Token-Arten",[49,62,63,67],{},[28,64,66],{"href":65},"#discovering-your-tokens","Entdecke deine Token",[46,68,69],{},[49,70,71],{},[28,72,74],{"href":73},"#credentials-inventory","Credentials Inventory",[49,76,77],{},[28,78,80],{"href":79},"#managing-tokens-in-the-gitlab-ui-and-api","Token im GitLab-UI und in der API verwalten",[49,82,83],{},[28,84,86],{"href":85},"#token-rotation-and-expiration-management","Rotation der Token und Verwaltung von Ablaufdaten",[49,88,89,93],{},[28,90,92],{"href":91},"#token-management-best-practices","Best Practices für die Token-Verwaltung",[46,94,95],{},[49,96,97],{},[28,98,100],{"href":99},"#service-accounts","Dienstkonten",[102,103,54],"h2",{"id":104},"wie-wählst-du-den-richtigen-token-für-den-job-aus",[12,106,107],{},"Mit der Auswahl des richtigen Tokens garantierst du die für deinen Anwendungsfall optimale Sicherheit und Funktionsfähigkeit.\nToken können zur Authentifizierung von API-Anfragen, zur Automatisierung von CI/CD-Pipelines, zur Integration von externen Tools, zur Verwaltung von Bereitstellungen und Repositories und für vieles mehr verwendet werden.",[12,109,110],{},[111,112],"img",{"alt":113,"src":114},"Leitfaden für die Token-Verwaltung – Flussdiagramm für Token","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097435/Blog/Content%20Images/Blog/Content%20Images/image3_aHR0cHM6_1750097434869.png",[12,116,117,118,123],{},"Der Einfachheit halber zeigt dieses Diagramm einen unkomplizierten Anwendungsfall, bei der nur ein(e) Benutzer(in) die Inhaberschaft hat. Weitere Informationen findest du in unsere Dokumentation zu Benutzerrollen und Berechtigungen in den einzelnen ",[28,119,122],{"href":120,"rel":121},"https://docs.gitlab.com/user/permissions/",[],"Namensräumen"," (Benutzer(innen)/Gruppe) in deiner Instanz oder Hauptgruppe. Beispiele für Anwendungsfälle:",[46,125,126],{},[49,127,128,131,132,137,138,131,141,146,147,152],{},[21,129,130],{},"Persönliche Zugriffs-Token"," (",[28,133,136],{"href":134,"rel":135},"https://docs.gitlab.com/user/profile/personal_access_tokens/#personal-access-token-scopes",[],"PAT",") können von Entwickler(innen) verwendet werden, wenn für eine(n) Benutzer(in) persönlicher Zugriff und persönliche Berechtigungen nötig sind. In diesem Fall folgen die Anmeldeinformationen dem Status und den Berechtigungen des Benutzers bzw. der Benutzerin, einschließlich der Entfernung des Zugriffs, wenn das Konto den Zugriff auf ein bestimmtes Projekt oder eine bestimmte Gruppe verliert (oder vollständig gesperrt wird).   - ",[21,139,140],{},"Projekt-/Gruppenzugriffs-Token",[28,142,145],{"href":143,"rel":144},"https://docs.gitlab.com/user/project/settings/project_access_tokens/#scopes-for-a-project-access-token",[],"PrAT","/",[28,148,151],{"href":149,"rel":150},"https://docs.gitlab.com/user/group/settings/group_access_tokens/#scopes-for-a-group-access-token",[],"GrAT",") werden empfohlen, wenn der Zugriff auf Ressourcen in einem bestimmten Projekt oder einer bestimmten Gruppe eingeschränkt werden soll. Da diese PrAT/GrAT einem bestimmten Geltungsbereichen zugewiesen wurden, können alle auf die jeweils nötigen Ressourcen zugreifen.",[102,154,60],{"id":155},"token-arten",[12,157,158,159,164],{},"Unten findest du eine Liste mit GitLab-Token und deren standardmäßigen Präfixen und Anwendungsfällen. Weitere Informationen findest du auf der ",[28,160,163],{"href":161,"rel":162},"https://docs.gitlab.com/security/tokens/#available-scopes",[],"GitLab-Token-Übersichtsseite",".",[166,167,168,185],"table",{},[169,170,171],"thead",{},[172,173,174,179,182],"tr",{},[175,176,178],"th",{"align":177},"center","Token",[175,180,181],{"align":177},"Präfix",[175,183,184],{"align":177},"Beschreibung",[186,187,188,200,211,221,231,241,252,263,274,285,296,307,318,329,340,351],"tbody",{},[172,189,190,194,197],{},[191,192,193],"td",{"align":177},"Persönlicher Zugriffs-Token",[191,195,196],{"align":177},"glpat",[191,198,199],{"align":177},"Für den Zugriff auf benutzerspezifische Daten",[172,201,202,205,208],{},[191,203,204],{"align":177},"OAuth-2.0-Token",[191,206,207],{"align":177},"gloas",[191,209,210],{"align":177},"Für die Integration mit externen Anwendungen über das OAuth2.0-Authentifizierungsprotokoll",[172,212,213,216,218],{},[191,214,215],{"align":177},"Imitations-Token",[191,217,196],{"align":177},[191,219,220],{"align":177},"Für administrative Handlungen im Namen anderer Benutzer(innen)",[172,222,223,226,228],{},[191,224,225],{"align":177},"Projektzugriffs-Token",[191,227,196],{"align":177},[191,229,230],{"align":177},"Für den Zugriff auf Daten eines bestimmten Projekts",[172,232,233,236,238],{},[191,234,235],{"align":177},"Gruppenzugriffs-Token",[191,237,196],{"align":177},[191,239,240],{"align":177},"Für den Zugriff auf Daten einer bestimmten Gruppe",[172,242,243,246,249],{},[191,244,245],{"align":177},"Bereitstellungs-Token",[191,247,248],{"align":177},"gldt",[191,250,251],{"align":177},"Zum Klonen, Pushen und Pullen von Container-Registry-Images eines Projekts ohne Benutzer(in) und Passwort",[172,253,254,257,260],{},[191,255,256],{"align":177},"Bereitstellungsschlüssel",[191,258,259],{"align":177},"n.v.",[191,261,262],{"align":177},"Ermöglicht den Lese- oder Schreibzugriff auf deine Repositories",[172,264,265,268,271],{},[191,266,267],{"align":177},"Runner-Authentifizierungs-Token",[191,269,270],{"align":177},"glrt",[191,272,273],{"align":177},"Für die Authentifizierung von GitLab-Runners",[172,275,276,279,282],{},[191,277,278],{"align":177},"CI/CD-Job-Token",[191,280,281],{"align":177},"glcbt",[191,283,284],{"align":177},"Für die Automatisierung von CI/CD-Prozessen",[172,286,287,290,293],{},[191,288,289],{"align":177},"Trigger-Token",[191,291,292],{"align":177},"glptt",[191,294,295],{"align":177},"Löst Pipelines manuell oder programmatisch aus",[172,297,298,301,304],{},[191,299,300],{"align":177},"Feed-Token",[191,302,303],{"align":177},"glft",[191,305,306],{"align":177},"Für die Authentifizierung des Zugriffs auf Paket-/RSS-Feeds",[172,308,309,312,315],{},[191,310,311],{"align":177},"Token für eingehende Mails",[191,313,314],{"align":177},"glimt",[191,316,317],{"align":177},"Für die Verarbeitung eingehender E-Mails",[172,319,320,323,326],{},[191,321,322],{"align":177},"Token für GitLab Agent for Kubernetes",[191,324,325],{"align":177},"glagent",[191,327,328],{"align":177},"Für die Verwaltung von Kubernetes-Clustern über den GitLab Agent",[172,330,331,334,337],{},[191,332,333],{"align":177},"SCIM-Token",[191,335,336],{"align":177},"glsoat",[191,338,339],{"align":177},"Ermöglicht SCIM-Integrationen für die Benutzerbereitstellung",[172,341,342,345,348],{},[191,343,344],{"align":177},"Client-Token für Feature-Flags",[191,346,347],{"align":177},"glffct",[191,349,350],{"align":177},"Für programmatische Feature-Flags",[172,352,353,356,358],{},[191,354,355],{"align":177},"Webhook-Token",[191,357,259],{"align":177},[191,359,360],{"align":177},"Vom bzw. von der Benutzer(in) festgelegter geheimer Token, um Webhook-Payloads zu sichern und zu gewährleisten, dass Anfragen von GitLab stammen",[102,362,66],{"id":363},"entdecke-deine-token",[365,366,74],"h3",{"id":367},"credentials-inventory",[12,369,370],{},"In GitLab Ultimate können Administrator(inn)en (GitLab Self-Managed) und Eigentümer(innen) von Hauptgruppen eines Unternehmens (GitLab.com ab Version 17.5) die Zugangsdaten in ihrem Namensraum überwachen.",[12,372,373],{},"Dieses Inventar verfolgt Token-Details wie:",[46,375,376],{},[49,377,378,379,384,385,389],{},"Token-Typ    * Verfügbare Token auf ",[28,380,383],{"href":381,"rel":382},"https://docs.gitlab.com/administration/credentials_inventory/",[],"GitLab.com","    * Verfügbare Token auf ",[28,386,388],{"href":381,"rel":387},[],"GitLab Self-Managed","  * Zugehörige Benutzerkonten  * Token-Geltungsbereiche sowie Erstellungs- und Ablaufdaten  * Zuletzt verwendete IP-Adressen des Tokens (ab GitLab 17.10)  * Token-Filterung basierend auf den oben genannten benutzerdefinierten Parametern  * Möglichkeit zum Widerrufen und Rotieren dieser Token",[12,391,392],{},"Ein gut gepflegtes Credentials Inventory hilft dabei, Token mit zu vielen Berechtigungen zu identifizieren, und gibt Aufschluss über Zugangsdaten, die möglicherweise rotiert werden müssen, um einen sicheren und effizienten Workflow zu gewährleisten.",[394,395,398,399],"figure",{"className":396},[397],"video_container","\n  ",[400,401,405],"iframe",{"src":402,"frameBorder":403,"allowFullScreen":404},"https://www.youtube.com/embed/A9ONfnwswd0?si=4VIEUgJaD4daj81b&start=105","0","true"," ",[407,408,410],"h4",{"id":409},"credentials-inventory-api","Credentials Inventory API",[12,412,413,414,419,420,425,426,431],{},"Als Ergänzung zur UI ",[28,415,418],{"href":416,"rel":417},"https://gitlab.com/groups/gitlab-org/-/epics/16343",[],"entwickeln wir derzeit"," eine Credentials Inventory API über den neuen ",[28,421,424],{"href":422,"rel":423},"https://docs.gitlab.com/api/group_members/#list-all-members-of-a-group-or-project",[],"Endpunkt /group/:id/manage",". Die unter diesem Endpunkt zugänglichen Zugangsdaten sind auf ",[28,427,430],{"href":428,"rel":429},"https://docs.gitlab.com/user/enterprise_user/",[],"Enterprise-Benutzer(innen)"," beschränkt und können vom bzw. von der Eigentümer(in) der Hauptgruppe eines Unternehmens abgerufen werden. Ein Beispiel für den zukünftigen API-Aufruf wäre:",[433,434,439],"pre",{"className":435,"code":436,"language":437,"meta":438,"style":438},"language-console shiki shiki-themes github-light","curl --header \"PRIVATE-TOKEN: \u003Cpat>\" \"https://verified_domain.com/api/v4/groups/\u003Cgroup_id>/manage/personal_access_tokens\"           ```\n### GitLab-API\n\nMit der GitLab-API kannst du Token in deinem Unternehmen programmgesteuert auflisten und verwalten. Wichtige authentifizierungsbezogene Endpunkte unterstützen [verschiedene Token-Typen](https://docs.gitlab.com/api/rest/authentication/)), darunter persönliche Token, Gruppen-Token, CI/CD-Token und mehr. Ein Beispiel für die Verwendung eines persönlichen Zugriffs-Tokens zum Auflisten aller sichtbaren Projekte in GitLab für authentifizierte Benutzer(innen) ist:\n\n\n```console\ncurl --header \"PRIVATE-TOKEN: \u003Cyour_access_token>\" \\\n     \"https://gitlab.example.com/api/v4/projects\"\n\n","console","",[440,441,442,450,456,463,469,474,479,485,491],"code",{"__ignoreMap":438},[443,444,447],"span",{"class":445,"line":446},"line",1,[443,448,449],{},"curl --header \"PRIVATE-TOKEN: \u003Cpat>\" \"https://verified_domain.com/api/v4/groups/\u003Cgroup_id>/manage/personal_access_tokens\"           ```\n",[443,451,453],{"class":445,"line":452},2,[443,454,455],{},"### GitLab-API\n",[443,457,459],{"class":445,"line":458},3,[443,460,462],{"emptyLinePlaceholder":461},true,"\n",[443,464,466],{"class":445,"line":465},4,[443,467,468],{},"Mit der GitLab-API kannst du Token in deinem Unternehmen programmgesteuert auflisten und verwalten. Wichtige authentifizierungsbezogene Endpunkte unterstützen [verschiedene Token-Typen](https://docs.gitlab.com/api/rest/authentication/)), darunter persönliche Token, Gruppen-Token, CI/CD-Token und mehr. Ein Beispiel für die Verwendung eines persönlichen Zugriffs-Tokens zum Auflisten aller sichtbaren Projekte in GitLab für authentifizierte Benutzer(innen) ist:\n",[443,470,472],{"class":445,"line":471},5,[443,473,462],{"emptyLinePlaceholder":461},[443,475,477],{"class":445,"line":476},6,[443,478,462],{"emptyLinePlaceholder":461},[443,480,482],{"class":445,"line":481},7,[443,483,484],{},"```console\n",[443,486,488],{"class":445,"line":487},8,[443,489,490],{},"curl --header \"PRIVATE-TOKEN: \u003Cyour_access_token>\" \\\n",[443,492,494],{"class":445,"line":493},9,[443,495,496],{},"     \"https://gitlab.example.com/api/v4/projects\"\n",[12,498,499],{},"In diesem Video erfährst du, wie du API-Aufrufe an die GitLab-API sendest.",[394,501,398,503],{"className":502},[397],[400,504,405],{"src":505,"frameBorder":403,"allowFullScreen":404},"https://www.youtube.com/embed/0LsMC3ZiXkA?si=vj871YH610jwQdFc",[365,507,509],{"id":508},"finde-heraus-wo-token-verwendet-werden","Finde heraus, wo Token verwendet werden",[12,511,512],{},"Kund(inn)en können auf verschiedene Arten herausfinden, wo Token verwendet werden:",[46,514,515,526,529,532],{},[49,516,517,518],{},"Unter ",[21,519,520,521],{},"Benutzerprofil > ",[28,522,525],{"href":523,"rel":524},"https://docs.gitlab.com/user/profile/personal_access_tokens/#view-the-time-at-and-ips-where-a-token-was-last-used",[],"Zugriffstoken",[49,527,528],{},"Im Credentials Inventory",[49,530,531],{},"In Audit-Ereignissen",[49,533,534,535,538,539,542,543,548,549,553],{},"Über die API\nInformationen zur Token-Nutzung werden alle 10 Minuten für ",[21,536,537],{},"last_used"," und einmal pro Minute für ",[21,540,541],{},"last_used_ip"," aktualisiert.\nDie Möglichkeit, IP-Adressen anzuzeigen, wurde in GitLab 17.9 eingeführt und wird durch das Feature-Flag ",[21,544,545],{},[546,547],"pat-ip",{}," gesteuert. Befolge diese ",[28,550,552],{"href":523,"rel":551},[],"Schritte, um herauszufinden, wann ein Token zuletzt verwendet wurde",". Außerdem werden dir seine letzten fünf eindeutigen IP-Adressen angezeigt.",[12,555,556],{},[111,557],{"alt":558,"src":559},"Leitfaden für Token-Verwaltung – Einstellungen für persönliche Zugriffs-Token","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097435/Blog/Content%20Images/Blog/Content%20Images/image1_aHR0cHM6_1750097434870.png",[102,561,80],{"id":562},"token-im-gitlab-ui-und-in-der-api-verwalten",[12,564,565],{},"In der folgenden Tabelle findest du Videos, in denen gezeigt wird, wie Token im UI erstellt werden und wie sie über die API genutzt werden können.",[166,567,568,580],{},[169,569,570],{},[172,571,572,574,577],{},[175,573,178],{},[175,575,576],{},"GitLab-UI",[175,578,579],{},"GitLab-API",[186,581,582,610,634],{},[172,583,584,587,600],{},[191,585,586],{},"Persönlicher Zugriffs-Token \u000b",[191,588,589,594,595],{},[28,590,593],{"href":591,"rel":592},"https://docs.gitlab.com/user/profile/personal_access_tokens/#create-a-personal-access-token",[],"Dokumentation"," und ",[28,596,599],{"href":597,"rel":598},"https://youtu.be/v5Nj3Jy4vaI?t=3",[],"Video",[191,601,602,594,606],{},[28,603,593],{"href":604,"rel":605},"https://docs.gitlab.com/api/personal_access_tokens/",[],[28,607,599],{"href":608,"rel":609},"https://youtu.be/v5Nj3Jy4vaI?t=43",[],[172,611,612,614,624],{},[191,613,235],{},[191,615,616,594,620],{},[28,617,593],{"href":618,"rel":619},"https://docs.gitlab.com/user/group/settings/group_access_tokens/#group-access-tokens",[],[28,621,599],{"href":622,"rel":623},"https://youtu.be/v5Nj3Jy4vaI?t=120",[],[191,625,626,594,630],{},[28,627,593],{"href":628,"rel":629},"https://docs.gitlab.com/api/group_access_tokens/",[],[28,631,599],{"href":632,"rel":633},"https://youtu.be/v5Nj3Jy4vaI?t=157",[],[172,635,636,638,648],{},[191,637,225],{},[191,639,640,594,644],{},[28,641,593],{"href":642,"rel":643},"https://docs.gitlab.com/user/project/settings/project_access_tokens/#project-access-tokens",[],[28,645,599],{"href":646,"rel":647},"https://youtu.be/v5Nj3Jy4vaI?t=254",[],[191,649,650,594,654],{},[28,651,593],{"href":652,"rel":653},"https://docs.gitlab.com/api/project_access_tokens/",[],[28,655,599],{"href":656,"rel":657},"https://youtu.be/v5Nj3Jy4vaI?t=285",[],[102,659,661],{"id":660},"rotation-der-tokens-und-verwaltung-von-ablaufdaten","Rotation der Tokens und Verwaltung von Ablaufdaten",[12,663,664],{},"Indem du Token rotierst und strikte Richtlinien für Ablaufdaten einführst, reduzierst du das Komprimittierungsrisiko und stellst die Einhaltung von Sicherheitsstandards sicher. Regelmäßige Rotation und erzwungene Abläufe verhindern, dass veraltete Zugangsdaten zu Sicherheitslücken werden.",[12,666,667,668,673],{},"Bisher wurden abgelaufene Gruppen- und Projektzugriffs-Token nach Ablauf automatisch gelöscht, was die Überwachung und Sicherheitsüberprüfung schwieriger machte, da keine Aufzeichnungen zu inaktiven Token vorlagen. Um dieses Problem zu beheben, wurde eine ",[28,669,672],{"href":670,"rel":671},"https://gitlab.com/gitlab-org/gitlab/-/issues/462217",[],"neue Funktion"," eingeführt, um Aufzeichnungen zu inaktiven Gruppen- und Projektzugriffs-Token 30 Tage, nachdem sie inaktiv wurden, im UI aufzubewahren. Diese Verbesserung soll es den Teams ermöglichen, die Verwendung, den Ablauf und den Widerruf von Token zu verfolgen, um die Compliance und Überwachung zu verbessern.",[12,675,676],{},"Um die Rotation von Token und die Verwaltung von Ablaufdaten proaktiv zu gestalten, kannst du Folgendes tun:",[46,678,679,687],{},[49,680,681,682,164],{},"Rotiere deine Token aktiv über die UI oder die API. Wenn du die API verwendest, achte auf den Sicherheitsmechanismus, mit dem ",[28,683,686],{"href":684,"rel":685},"https://docs.gitlab.com/api/personal_access_tokens/#automatic-reuse-detection",[],"wiederverwendete Token automatisch erkannt werden",[49,688,689,690,695],{},"Lege eine instanzweite ",[28,691,694],{"href":692,"rel":693},"https://docs.gitlab.com/administration/settings/account_and_limit_settings/#limit-the-lifetime-of-access-tokens",[],"maximale Geltungsdauer"," für Zugriffs-Token fest.",[365,697,699],{"id":698},"api-für-die-rotation-von-token","API für die Rotation von Token",[12,701,702,703,707],{},"Bis GitLab 17.7 mussten Kund(inn)en Zugriffs-Token programmgesteuert mit der API rotieren. Die entsprechende Funktion ist jetzt im UI verfügbar. Sieh dir das Video in der folgenden Tabelle an oder lies dir die ",[28,704,593],{"href":705,"rel":706},"https://docs.gitlab.com/user/project/settings/project_access_tokens/#use-the-ui",[]," durch.",[365,709,711],{"id":710},"codeausschnitte-für-die-rotation-von-token","Codeausschnitte für die Rotation von Token",[12,713,714],{},"In der folgenden Tabelle findest du Videos, in denen die Rotation von GitLab-Token erläutert wird.",[166,716,717,730],{},[169,718,719],{},[172,720,721,723,726,728],{},[175,722,178],{"align":177},[175,724,725],{"align":177},"Voraussetzungen",[175,727,576],{},[175,729,579],{},[186,731,732,759,785],{},[172,733,734,737,740,749],{},[191,735,736],{"align":177},"Persönliches Zugriffs-Token",[191,738,739],{"align":177},"Geltungsbereich: API",[191,741,742,594,745],{},[28,743,593],{"href":591,"rel":744},[],[28,746,599],{"href":747,"rel":748},"https://youtu.be/v5Nj3Jy4vaI?t=76",[],[191,750,751,594,755],{},[28,752,593],{"href":753,"rel":754},"https://docs.gitlab.com/api/personal_access_tokens/#rotate-a-personal-access-token",[],[28,756,599],{"href":757,"rel":758},"https://youtu.be/v5Nj3Jy4vaI?t=92",[],[172,760,761,763,766,776],{},[191,762,235],{"align":177},[191,764,765],{"align":177},"Geltungsbereich: API und Rolle(n): Eigentümer(in)",[191,767,768,594,772],{},[28,769,593],{"href":770,"rel":771},"https://docs.gitlab.com/user/group/settings/group_access_tokens/#create-a-group-access-token-using-ui",[],[28,773,599],{"href":774,"rel":775},"https://youtu.be/v5Nj3Jy4vaI?t=203",[],[191,777,778,594,781],{},[28,779,593],{"href":628,"rel":780},[],[28,782,599],{"href":783,"rel":784},"https://youtu.be/v5Nj3Jy4vaI?t=214",[],[172,786,787,789,792,802],{},[191,788,225],{"align":177},[191,790,791],{"align":177},"Geltungsbereich: API und Rolle(n): Eigentümer(in), Betreuer(in)",[191,793,794,594,798],{},[28,795,593],{"href":796,"rel":797},"https://docs.gitlab.com/user/project/settings/project_access_tokens/#create-a-project-access-token",[],[28,799,599],{"href":800,"rel":801},"https://youtu.be/v5Nj3Jy4vaI?t=335",[],[191,803,804,594,807],{},[28,805,593],{"href":652,"rel":806},[],[28,808,599],{"href":809,"rel":810},"https://youtu.be/v5Nj3Jy4vaI?t=349",[],[102,812,92],{"id":813},"best-practices-für-die-token-verwaltung",[365,815,817],{"id":816},"prinzip-des-geringsten-privilegs","Prinzip des geringsten Privilegs",[12,819,820],{},"Mindere Risiken, indem du Berechtigungen für Token wirklich nur für die jeweiligen unbedingt nötigen Aufgaben zuweist. Auf diese Weise kannst du Fehlerquellen in deinen Systemen proaktiv vorhersagen und beheben. Beachte dazu Folgendes:",[46,822,823,832,840],{},[49,824,825,826,831],{},"Wähle den richtigen Token für den richtigen Job aus. Infos dazu findest du im Flussdiagramm.  * Weise beim Erstellen eines Tokens nur die erforderlichen Geltungsbereiche zu. Verwende beispielsweise schreibgeschützte Geltungsbereiche für Token mit Aufgaben für Auditor(innen). Siehe ",[28,827,830],{"href":828,"rel":829},"https://docs.gitlab.com/user/permissions/#roles",[],"Rollen",".  * Vermeide es, Administratorrechte zu gewähren, wenn sie nicht unbedingt nötig sind.",[49,833,834,835,164],{},"Erzwinge eine instanzweite Standard-Token-",[28,836,839],{"href":837,"rel":838},"https://docs.gitlab.com/administration/settings/account_and_limit_settings/#set-a-lifetime-1",[],"Lebensdauer",[49,841,842],{},"Überprüfe und auditiere Token-Berechtigungen regelmäßig, um sicherzustellen, dass sie den aktuellen Anforderungen deines Unternehmens entsprechen.  * Widerrufe Token, sobald die Aufgabe abgeschlossen ist.",[365,844,846],{"id":845},"service-konten","Service-Konten",[12,848,849,853],{},[28,850,100],{"href":851,"rel":852},"https://docs.gitlab.com/user/profile/service_accounts/",[]," stellen sicher, dass Token an nicht-menschliche Entitäten gebunden sind. Dadurch werden sie von einzelnen Benutzerkonten getrennt und die Abhängigkeit von bestimmten Benutzer(inne)n wird verringert. Anstatt persönliche Konten zu verwenden, um Token für die Automatisierung zu generieren, solltest du Dienstkonten mit eingeschränktem Geltungsbereich erstellen. Zu den Vorteilen gehören:",[46,855,856,859,867],{},[49,857,858],{},"Verwendung von Dienstkonto-Token in CI/CD-Pipelines, um Störungen durch Änderungen des Benutzerkontos zu vermeiden  * Programmgesteuerte Automatisierung von Rotationsprozessen, da persönliche Konten nicht betroffen sind",[49,860,861,862],{},"Klarere Überwachung und Prüfung der von Dienstkonten durchgeführten Aktionen  * Dienstkonten ",[28,863,866],{"href":864,"rel":865},"https://docs.gitlab.com/user/profile/personal_access_tokens/#create-a-service-account-personal-access-token-with-no-expiry-date",[],"ohne Ablaufdatum",[49,868,869,870],{},"Verbraucht keinen ",[28,871,874],{"href":872,"rel":873},"https://docs.gitlab.com/user/profile/service_accounts/#create-a-service-account",[],"Lizenzplatz",[12,876,877,878,883,884,889],{},"GitLab plant die Veröffentlichung einer neuen ",[28,879,882],{"href":880,"rel":881},"https://gitlab.com/groups/gitlab-org/-/epics/9965",[],"Benutzeroberfläche für Dienstkonten"," als Gegenstück zur ",[28,885,888],{"href":886,"rel":887},"https://docs.gitlab.com/api/service_accounts/#create-a-service-account-user",[],"API-basierten Erstellung",", wodurch die Verwaltung von Dienstkonten und der damit verbundenen Token vereinfacht werden soll. In der folgenden Demo wird die programmgesteuerte Verwendung von Dienstkonten erläutert.",[394,891,398,893],{"className":892},[397],[400,894,405],{"src":895,"frameBorder":403,"allowFullScreen":404},"https://youtu.be/oZvjg0SCsqY?si=hSXKtq87lDeY9aRq",[365,897,899],{"id":898},"sicherheitslücken-tools","Sicherheitslücken-Tools",[12,901,902],{},"Nutze die integrierten Sicherheitstools von GitLab, um Sicherheitslücken, die durch die Nutzung von Token entstehen, zu identifizieren und zu beheben. Für eine maximale Abdeckung wird empfohlen, alle Tools gemeinsam zu verwenden.",[46,904,905,919,932],{},[49,906,907,912,913,918],{},[28,908,911],{"href":909,"rel":910},"https://docs.gitlab.com/user/application_security/secret_detection/",[],"Erkennung von Geheimnissen",": Scannt dein Repository nach fest codierten Geheimnissen wie API-Token, Passwörtern und anderen vertraulichen Informationen. Sieh dir die ",[28,914,917],{"href":915,"rel":916},"https://docs.gitlab.com/user/application_security/secret_detection/detected_secrets/",[],"Liste der erkannten Geheimnisse"," an.",[49,920,921,926,927,164],{},[28,922,925],{"href":923,"rel":924},"https://docs.gitlab.com/user/application_security/sast/",[],"Statische Anwendungssicherheitstests (SAST)",": Analysiert deinen Quellcode auf Sicherheitslücken und ",[28,928,931],{"href":929,"rel":930},"https://docs.gitlab.com/user/application_security/sast/#features",[],"stellt unter anderem Berichte mit UI-Ergebnissen in Merge Requests bereit",[49,933,934,939],{},[28,935,938],{"href":936,"rel":937},"https://docs.gitlab.com/user/application_security/dependency_scanning/",[],"Abhängigkeitssuche",": Stellt sicher, dass in deinem Projekt verwendete Bibliotheken von Drittanbietern keine Sicherheitslücken hinsichtlich ihrer Token aufweisen.",[365,941,943],{"id":942},"audit-protokolle-und-überwachung","Audit-Protokolle und Überwachung",[12,945,946],{},"Pflege den Zustand von Token, indem du regelmäßig Audit-Protokolle und die Token-Nutzung auf Instanz- und/oder Gruppenebene überprüfst.",[46,948,949,963,971,977],{},[49,950,951,956,957,962],{},[28,952,955],{"href":953,"rel":954},"https://docs.gitlab.com/user/compliance/audit_events/",[],"Audit Events",": Protokolliere Audit Events in GitLab, um Aktivitäten im Zusammenhang mit Token zu verfolgen, z. B. Erstellung, Verwendung, Löschung und ungewöhnliche API-Aufrufe (nicht zulässige Parameter in Protokollen und konsistente Auslöser des Rate Limiters). * ",[28,958,961],{"href":959,"rel":960},"https://docs.gitlab.com/administration/reporting/ip_addr_restrictions/#configure-ip-address-restrictions",[],"IP-Allowlisting",": Verhindert, dass böswillige Benutzer(innen) ihre Aktivitäten hinter mehreren IP-Adressen verbergen.",[49,964,965,970],{},[28,966,969],{"href":967,"rel":968},"https://docs.gitlab.com/operations/incident_management/alerts/",[],"Alarme",": Richte Alarme für ungewöhnliche Aktivitäten ein (lösen z. B. Paging für Bereitschaftsrotationen aus oder verwende es, um Vorfälle zu erstellen).",[49,972,973,976],{},[28,974,74],{"href":381,"rel":975},[],": Erhalte vollständige Kontrolle über alle verfügbaren Zugriffs-Token sowie die Möglichkeit, diese bei Bedarf zu widerrufen.",[49,978,979,984,985,990,991,996],{},[28,980,983],{"href":981,"rel":982},"https://docs.gitlab.com/user/profile/notifications/",[],"Benachrichtigungen",": Bearbeite proaktiv alle Ablaufbenachrichtigungen für Token (Gruppen-, Projekt- und persönliche Token), die du per E-Mail erhältst. Aufgrund der Nachfrage unserer Kund(inn)en wurde diese Funktion kürzlich um 30-Tage- und 60-Tage-Benachrichtigungen erweitert (die Standardeinstellung ist 7 Tage).   * ",[28,986,989],{"href":987,"rel":988},"https://docs.gitlab.com/user/project/integrations/webhooks/#create-a-webhook",[],"Webhooks",": Zugriffs-Token-Webhooks können für Gruppen und Projekte konfiguriert werden, um Ereignisse sieben Tage vor Ablauf von Token auszulösen. Diese Funktion wurde kürzlich auch um 30-Tage- und 60-Tage-Benachrichtigungen hinter dem Feature-Flag ",[21,992,993],{},[994,995],"extended-expiry-webhook-execution-setting",{}," erweitert (standardmäßig deaktiviert).",[102,998,1000],{"id":999},"was-kommt-als-nächstes","Was kommt als Nächstes?",[12,1002,1003,1004,1009],{},"Angesichts des großen Token-Katalogs von GitLab gibt es laufende ",[28,1005,1008],{"href":1006,"rel":1007},"https://gitlab.com/gitlab-org/gitlab/-/issues/502630",[],"Pläne"," für eine Konsolidierung mit Schwerpunkt auf der Lebensdauer, detaillierten Geltungsbereichen, konsistenter Verwaltung und Nutzung. Derzeit priorisieren wir hinsichtlich der Token-Funktionen ein umfassendes UI für Dienstkonten, zusätzliche Arten von Zugangsdaten im Credentials Inventory sowie ein verbessertes Auditing für Token und Dienstkonten.",[16,1011,1012],{},[12,1013,1014,1015,1020],{},"Melde dich für eine ",[28,1016,1019],{"href":1017,"rel":1018},"https://about.gitlab.com/de-de/free-trial/",[],"kostenlose Testversion von GitLab Ultimate"," an, um die Token-Verwaltung zu nutzen.",[1022,1023,1024],"style",{},"html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":438,"searchDepth":452,"depth":452,"links":1026},[1027,1028,1029,1033,1034,1038,1044],{"id":104,"depth":452,"text":54},{"id":155,"depth":452,"text":60},{"id":363,"depth":452,"text":66,"children":1030},[1031,1032],{"id":367,"depth":458,"text":74},{"id":508,"depth":458,"text":509},{"id":562,"depth":452,"text":80},{"id":660,"depth":452,"text":661,"children":1035},[1036,1037],{"id":698,"depth":458,"text":699},{"id":710,"depth":458,"text":711},{"id":813,"depth":452,"text":92,"children":1039},[1040,1041,1042,1043],{"id":816,"depth":458,"text":817},{"id":845,"depth":458,"text":846},{"id":898,"depth":458,"text":899},{"id":942,"depth":458,"text":943},{"id":999,"depth":452,"text":1000},"security","2025-02-25","Erfahre Schritt für Schritt, wie du Token identifizierst, verwaltest und schützt, um die Sicherheit in deinem gesamten Software-Entwicklungsprozess zu verbessern.","md",null,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750097408/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_1097303277_6gTk7M1DNx0tFuovupVFB1_1750097407860.jpg",{},"/de-de/blog/the-ultimate-guide-to-token-management-at-gitlab",{"title":5,"description":1047,"ogTitle":5,"ogDescription":1047,"noIndex":1054,"ogImage":1050,"ogUrl":1055,"ogSiteName":1056,"ogType":1057,"canonicalUrls":1055},false,"https://about.gitlab.com/blog/the-ultimate-guide-to-token-management-at-gitlab","https://about.gitlab.com","article","the-ultimate-guide-to-token-management-at-gitlab","de-de/blog/the-ultimate-guide-to-token-management-at-gitlab",[1061,1045,1062,1063,1064],"tutorial","DevSecOps platform","features","product","BlogPost","uiZISulK8I_Ab5PP7R2syWTA7OL7T8Iouz5nADfRUBs",{"logo":1068,"freeTrial":1073,"sales":1078,"login":1083,"items":1088,"search":1417,"minimal":1451,"duo":1469,"switchNav":1478,"pricingDeployment":1489},{"config":1069},{"href":1070,"dataGaName":1071,"dataGaLocation":1072},"/de-de/","gitlab logo","header",{"text":1074,"config":1075},"Kostenlose Testversion anfordern",{"href":1076,"dataGaName":1077,"dataGaLocation":1072},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":1079,"config":1080},"Demo anfordern",{"href":1081,"dataGaName":1082,"dataGaLocation":1072},"/de-de/sales/?contact-topic=request-demo","sales",{"text":1084,"config":1085},"Anmelden",{"href":1086,"dataGaName":1087,"dataGaLocation":1072},"https://gitlab.com/users/sign_in/","sign in",[1089,1118,1220,1225,1339,1395],{"text":1090,"config":1091,"menu":1093},"Plattform",{"dataNavLevelOne":1092},"platform",{"type":1094,"columns":1095},"cards",[1096,1102,1110],{"title":1090,"description":1097,"link":1098},"Die intelligente Orchestrierungsplattform für DevSecOps",{"text":1099,"config":1100},"Die Plattform erkunden",{"href":1101,"dataGaName":1092,"dataGaLocation":1072},"/de-de/platform/",{"title":1103,"description":1104,"link":1105},"GitLab Duo Agent Platform","Agentische KI für den gesamten Software-Lebenszyklus",{"text":1106,"config":1107},"Lerne GitLab Duo kennen",{"href":1108,"dataGaName":1109,"dataGaLocation":1072},"/de-de/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":1111,"description":1112,"link":1113},"Warum GitLab?","Erfahre, warum sich Unternehmen für GitLab entscheiden",{"text":1114,"config":1115},"Mehr erfahren",{"href":1116,"dataGaName":1117,"dataGaLocation":1072},"/de-de/why-gitlab/","why gitlab",{"text":1119,"left":461,"config":1120,"menu":1122},"Produkt",{"dataNavLevelOne":1121},"solutions",{"type":1123,"link":1124,"columns":1128,"feature":1199},"lists",{"text":1125,"config":1126},"Alle Lösungen anzeigen",{"href":1127,"dataGaName":1121,"dataGaLocation":1072},"/de-de/solutions/",[1129,1154,1177],{"title":1130,"description":1131,"link":1132,"items":1137},"Automatisierung","CI/CD und Automatisierung zur Beschleunigung der Bereitstellung",{"config":1133},{"icon":1134,"href":1135,"dataGaName":1136,"dataGaLocation":1072},"AutomatedCodeAlt","/de-de/solutions/delivery-automation/","automated software delivery",[1138,1142,1145,1150],{"text":1139,"config":1140},"CI/CD",{"href":1141,"dataGaLocation":1072,"dataGaName":1139},"/de-de/solutions/continuous-integration/",{"text":1103,"config":1143},{"href":1108,"dataGaLocation":1072,"dataGaName":1144},"gitlab duo agent platform - product menu",{"text":1146,"config":1147},"Quellcodeverwaltung",{"href":1148,"dataGaLocation":1072,"dataGaName":1149},"/de-de/solutions/source-code-management/","Source Code Management",{"text":1151,"config":1152},"Automatische Softwarebereitstellung",{"href":1135,"dataGaLocation":1072,"dataGaName":1153},"Automated software delivery",{"title":1155,"description":1156,"link":1157,"items":1162},"Sicherheit","Entwickle Code schneller ohne Abstriche bei der Sicherheit",{"config":1158},{"href":1159,"dataGaName":1160,"dataGaLocation":1072,"icon":1161},"/de-de/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[1163,1167,1172],{"text":1164,"config":1165},"Anwendungssicherheitstests",{"href":1159,"dataGaName":1166,"dataGaLocation":1072},"Application security testing",{"text":1168,"config":1169},"Schutz der Software-Lieferkette",{"href":1170,"dataGaLocation":1072,"dataGaName":1171},"/de-de/solutions/supply-chain/","Software supply chain security",{"text":1173,"config":1174},"Software-Compliance",{"href":1175,"dataGaName":1176,"dataGaLocation":1072},"/de-de/solutions/software-compliance/","software compliance",{"title":1178,"link":1179,"items":1184},"Messung",{"config":1180},{"icon":1181,"href":1182,"dataGaName":1183,"dataGaLocation":1072},"DigitalTransformation","/de-de/solutions/visibility-measurement/","visibility and measurement",[1185,1189,1194],{"text":1186,"config":1187},"Sichtbarkeit und Messung",{"href":1182,"dataGaLocation":1072,"dataGaName":1188},"Visibility and Measurement",{"text":1190,"config":1191},"Wertstrommanagement",{"href":1192,"dataGaLocation":1072,"dataGaName":1193},"/de-de/solutions/value-stream-management/","Value Stream Management",{"text":1195,"config":1196},"Analysen und Einblicke",{"href":1197,"dataGaLocation":1072,"dataGaName":1198},"/de-de/solutions/analytics-and-insights/","Analytics and insights",{"title":1200,"type":1123,"items":1201},"GitLab für",[1202,1208,1214],{"text":1203,"config":1204},"Enterprise",{"icon":1205,"href":1206,"dataGaLocation":1072,"dataGaName":1207},"Building","/de-de/enterprise/","enterprise",{"text":1209,"config":1210},"Kleinunternehmen",{"icon":1211,"href":1212,"dataGaLocation":1072,"dataGaName":1213},"Work","/de-de/small-business/","small business",{"text":1215,"config":1216},"Öffentlicher Sektor",{"icon":1217,"href":1218,"dataGaLocation":1072,"dataGaName":1219},"Organization","/de-de/solutions/public-sector/","public sector",{"text":1221,"config":1222},"Preise",{"href":1223,"dataGaName":1224,"dataGaLocation":1072,"dataNavLevelOne":1224},"/de-de/pricing/","pricing",{"text":1226,"config":1227,"menu":1229},"Ressourcen",{"dataNavLevelOne":1228},"resources",{"type":1123,"link":1230,"columns":1234,"feature":1328},{"text":1231,"config":1232},"Alle Ressourcen anzeigen",{"href":1233,"dataGaName":1228,"dataGaLocation":1072},"/de-de/resources/",[1235,1268,1295],{"title":1236,"items":1237},"Erste Schritte",[1238,1243,1248,1253,1258,1263],{"text":1239,"config":1240},"Installieren",{"href":1241,"dataGaName":1242,"dataGaLocation":1072},"/de-de/install/","install",{"text":1244,"config":1245},"Kurzanleitungen",{"href":1246,"dataGaName":1247,"dataGaLocation":1072},"/de-de/get-started/","quick setup checklists",{"text":1249,"config":1250},"Lernen",{"href":1251,"dataGaLocation":1072,"dataGaName":1252},"https://university.gitlab.com/","learn",{"text":1254,"config":1255},"Produktdokumentation",{"href":1256,"dataGaName":1257,"dataGaLocation":1072},"https://docs.gitlab.com/","product documentation",{"text":1259,"config":1260},"Best-Practice-Videos",{"href":1261,"dataGaName":1262,"dataGaLocation":1072},"/de-de/getting-started-videos/","best practice videos",{"text":1264,"config":1265},"Integrationen",{"href":1266,"dataGaName":1267,"dataGaLocation":1072},"/de-de/integrations/","integrations",{"title":1269,"items":1270},"Entdecken",[1271,1276,1281,1286,1290],{"text":1272,"config":1273},"Kundenerfolge",{"href":1274,"dataGaName":1275,"dataGaLocation":1072},"/de-de/customers/","customer success stories",{"text":1277,"config":1278},"Blog",{"href":1279,"dataGaName":1280,"dataGaLocation":1072},"/de-de/blog/","blog",{"text":1282,"config":1283},"Demo-Hub",{"href":1284,"dataGaName":1285,"dataGaLocation":1072},"/de-de/demo-hub/","demo hub",{"text":1287,"config":1288},"The Source",{"href":1289,"dataGaName":1280,"dataGaLocation":1072},"/de-de/the-source/",{"text":1291,"config":1292},"Remote",{"href":1293,"dataGaName":1294,"dataGaLocation":1072},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":1296,"items":1297},"Vernetzen",[1298,1303,1308,1313,1318,1323],{"text":1299,"config":1300},"GitLab-Services",{"href":1301,"dataGaName":1302,"dataGaLocation":1072},"/de-de/services/","services",{"text":1304,"config":1305},"Beitragen",{"href":1306,"dataGaName":1307,"dataGaLocation":1072},"https://contributors.gitlab.com","contribute",{"text":1309,"config":1310},"Community",{"href":1311,"dataGaName":1312,"dataGaLocation":1072},"/community/","community",{"text":1314,"config":1315},"Forum",{"href":1316,"dataGaName":1317,"dataGaLocation":1072},"https://forum.gitlab.com/","forum",{"text":1319,"config":1320},"Veranstaltungen",{"href":1321,"dataGaName":1322,"dataGaLocation":1072},"/events/","events",{"text":1324,"config":1325},"Partner",{"href":1326,"dataGaName":1327,"dataGaLocation":1072},"/de-de/partners/","partners",{"config":1329,"title":1332,"text":1333,"link":1334},{"background":1330,"textColor":1331},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":1335,"config":1336},"Aktuelle Nachrichten",{"href":1337,"dataGaName":1338,"dataGaLocation":1072},"/de-de/whats-new/","whats new",{"text":1340,"config":1341,"menu":1343},"Unternehmen",{"dataNavLevelOne":1342},"company",{"type":1123,"columns":1344},[1345],{"items":1346},[1347,1352,1358,1360,1365,1370,1375,1380,1385,1390],{"text":1348,"config":1349},"Über",{"href":1350,"dataGaName":1351,"dataGaLocation":1072},"/de-de/company/","about",{"text":1353,"config":1354,"footerGa":1357},"Karriere",{"href":1355,"dataGaName":1356,"dataGaLocation":1072},"/jobs/","jobs",{"dataGaName":1356},{"text":1319,"config":1359},{"href":1321,"dataGaName":1322,"dataGaLocation":1072},{"text":1361,"config":1362},"Geschäftsführung",{"href":1363,"dataGaName":1364,"dataGaLocation":1072},"/company/team/e-group/","leadership",{"text":1366,"config":1367},"Handbuch",{"href":1368,"dataGaName":1369,"dataGaLocation":1072},"https://handbook.gitlab.com/","handbook",{"text":1371,"config":1372},"Investor Relations",{"href":1373,"dataGaName":1374,"dataGaLocation":1072},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":1376,"config":1377},"Trust Center",{"href":1378,"dataGaName":1379,"dataGaLocation":1072},"/de-de/security/","trust center",{"text":1381,"config":1382},"AI Transparency Center",{"href":1383,"dataGaName":1384,"dataGaLocation":1072},"/de-de/ai-transparency-center/","ai transparency center",{"text":1386,"config":1387},"Newsletter",{"href":1388,"dataGaName":1389,"dataGaLocation":1072},"/company/contact/#contact-forms","newsletter",{"text":1391,"config":1392},"Presse",{"href":1393,"dataGaName":1394,"dataGaLocation":1072},"/press/","press",{"text":1396,"config":1397,"menu":1398},"Kontakt",{"dataNavLevelOne":1342},{"type":1123,"columns":1399},[1400],{"items":1401},[1402,1407,1412],{"text":1403,"config":1404},"Vertrieb kontaktieren",{"href":1405,"dataGaName":1406,"dataGaLocation":1072},"/de-de/sales/","talk to sales",{"text":1408,"config":1409},"Support-Portal",{"href":1410,"dataGaName":1411,"dataGaLocation":1072},"https://support.gitlab.com/hc/en-us","support portal",{"text":1413,"config":1414},"Kundenportal",{"href":1415,"dataGaName":1416,"dataGaLocation":1072},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":1418,"login":1419,"suggestions":1426},"Schließen",{"text":1420,"link":1421},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":1422,"config":1423},"gitlab.com",{"href":1086,"dataGaName":1424,"dataGaLocation":1425},"search login","search",{"text":1427,"default":1428},"Vorschläge",[1429,1431,1436,1438,1443,1448],{"text":1103,"config":1430},{"href":1108,"dataGaName":1103,"dataGaLocation":1425},{"text":1432,"config":1433},"Codevorschläge (KI)",{"href":1434,"dataGaName":1435,"dataGaLocation":1425},"/de-de/solutions/code-suggestions/","Code Suggestions (AI)",{"text":1139,"config":1437},{"href":1141,"dataGaName":1139,"dataGaLocation":1425},{"text":1439,"config":1440},"GitLab auf AWS",{"href":1441,"dataGaName":1442,"dataGaLocation":1425},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":1444,"config":1445},"GitLab auf Google Cloud",{"href":1446,"dataGaName":1447,"dataGaLocation":1425},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":1111,"config":1449},{"href":1116,"dataGaName":1450,"dataGaLocation":1425},"Why GitLab?",{"freeTrial":1452,"mobileIcon":1457,"desktopIcon":1462,"secondaryButton":1465},{"text":1453,"config":1454},"Kostenlos testen",{"href":1455,"dataGaName":1077,"dataGaLocation":1456},"https://gitlab.com/-/trials/new/","nav",{"altText":1458,"config":1459},"GitLab-Symbol",{"src":1460,"dataGaName":1461,"dataGaLocation":1456},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":1458,"config":1463},{"src":1464,"dataGaName":1461,"dataGaLocation":1456},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":1236,"config":1466},{"href":1467,"dataGaName":1468,"dataGaLocation":1456},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":1470,"mobileIcon":1474,"desktopIcon":1476},{"text":1471,"config":1472},"Mehr über GitLab Duo erfahren",{"href":1108,"dataGaName":1473,"dataGaLocation":1456},"gitlab duo",{"altText":1458,"config":1475},{"src":1460,"dataGaName":1461,"dataGaLocation":1456},{"altText":1458,"config":1477},{"src":1464,"dataGaName":1461,"dataGaLocation":1456},{"button":1479,"mobileIcon":1484,"desktopIcon":1486},{"text":1480,"config":1481},"/Option",{"href":1482,"dataGaName":1483,"dataGaLocation":1456},"#contact","switch",{"altText":1458,"config":1485},{"src":1460,"dataGaName":1461,"dataGaLocation":1456},{"altText":1458,"config":1487},{"src":1488,"dataGaName":1461,"dataGaLocation":1456},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":1490,"mobileIcon":1495,"desktopIcon":1497},{"text":1491,"config":1492},"Zurück zur Preisübersicht",{"href":1223,"dataGaName":1493,"dataGaLocation":1456,"icon":1494},"back to pricing","GoBack",{"altText":1458,"config":1496},{"src":1460,"dataGaName":1461,"dataGaLocation":1456},{"altText":1458,"config":1498},{"src":1464,"dataGaName":1461,"dataGaLocation":1456},{"title":1500,"button":1501,"config":1505},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":1114,"config":1502},{"href":1503,"dataGaName":1504,"dataGaLocation":1072},"/de-de/gitlab-orbit/","orbit",{"layout":1506,"disabled":1054},"release",{"data":1508},{"text":1509,"source":1510,"edit":1516,"contribute":1521,"config":1526,"items":1531,"minimal":1737},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":1511,"config":1512},"Quelltext der Seite anzeigen",{"href":1513,"dataGaName":1514,"dataGaLocation":1515},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":1517,"config":1518},"Diese Seite bearbeiten",{"href":1519,"dataGaName":1520,"dataGaLocation":1515},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":1522,"config":1523},"Beteilige dich",{"href":1524,"dataGaName":1525,"dataGaLocation":1515},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":1527,"facebook":1528,"youtube":1529,"linkedin":1530},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[1532,1577,1630,1672,1704],{"title":1221,"links":1533,"subMenu":1548},[1534,1538,1543],{"text":1535,"config":1536},"Tarife anzeigen",{"href":1223,"dataGaName":1537,"dataGaLocation":1515},"view plans",{"text":1539,"config":1540},"Vorteile von Premium",{"href":1541,"dataGaName":1542,"dataGaLocation":1515},"/de-de/pricing/premium/","why premium",{"text":1544,"config":1545},"Vorteile von Ultimate",{"href":1546,"dataGaName":1547,"dataGaLocation":1515},"/de-de/pricing/ultimate/","why ultimate",[1549],{"title":1396,"links":1550},[1551,1553,1555,1557,1562,1567,1572],{"text":1403,"config":1552},{"href":1405,"dataGaName":1082,"dataGaLocation":1515},{"text":1408,"config":1554},{"href":1410,"dataGaName":1411,"dataGaLocation":1515},{"text":1413,"config":1556},{"href":1415,"dataGaName":1416,"dataGaLocation":1515},{"text":1558,"config":1559},"Status",{"href":1560,"dataGaName":1561,"dataGaLocation":1515},"https://status.gitlab.com/","status",{"text":1563,"config":1564},"Nutzungsbedingungen",{"href":1565,"dataGaName":1566,"dataGaLocation":1515},"/terms/","terms of use",{"text":1568,"config":1569},"Datenschutzerklärung",{"href":1570,"dataGaName":1571,"dataGaLocation":1515},"/de-de/privacy/","privacy statement",{"text":1573,"config":1574},"Cookie-Einstellungen",{"dataGaName":1575,"dataGaLocation":1515,"id":1576,"isOneTrustButton":461},"cookie preferences","ot-sdk-btn",{"title":1119,"links":1578,"subMenu":1587},[1579,1583],{"text":1580,"config":1581},"DevSecOps-Plattform",{"href":1101,"dataGaName":1582,"dataGaLocation":1515},"devsecops platform",{"text":1584,"config":1585},"KI-unterstützte Entwicklung",{"href":1108,"dataGaName":1586,"dataGaLocation":1515},"ai-assisted development",[1588],{"title":1589,"links":1590},"Themen",[1591,1595,1600,1605,1610,1615,1620,1625],{"text":1139,"config":1592},{"href":1593,"dataGaName":1594,"dataGaLocation":1515},"/de-de/topics/ci-cd/","cicd",{"text":1596,"config":1597},"GitOps",{"href":1598,"dataGaName":1599,"dataGaLocation":1515},"/de-de/topics/gitops/","gitops",{"text":1601,"config":1602},"DevOps",{"href":1603,"dataGaName":1604,"dataGaLocation":1515},"/de-de/topics/devops/","devops",{"text":1606,"config":1607},"Versionskontrolle",{"href":1608,"dataGaName":1609,"dataGaLocation":1515},"/de-de/topics/version-control/","version control",{"text":1611,"config":1612},"DevSecOps",{"href":1613,"dataGaName":1614,"dataGaLocation":1515},"/de-de/topics/devsecops/","devsecops",{"text":1616,"config":1617},"Cloud-nativ",{"href":1618,"dataGaName":1619,"dataGaLocation":1515},"/de-de/topics/cloud-native/","cloud native",{"text":1621,"config":1622},"KI für das Programmieren",{"href":1623,"dataGaName":1624,"dataGaLocation":1515},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":1626,"config":1627},"Agentische KI",{"href":1628,"dataGaName":1629,"dataGaLocation":1515},"/de-de/topics/agentic-ai/","agentic ai",{"title":1631,"links":1632},"Lösungen",[1633,1636,1638,1643,1647,1650,1653,1656,1658,1660,1662,1667],{"text":1164,"config":1634},{"href":1159,"dataGaName":1635,"dataGaLocation":1515},"Application Security Testing",{"text":1151,"config":1637},{"href":1135,"dataGaName":1136,"dataGaLocation":1515},{"text":1639,"config":1640},"Agile Entwicklung",{"href":1641,"dataGaName":1642,"dataGaLocation":1515},"/de-de/solutions/agile-delivery/","agile delivery",{"text":1644,"config":1645},"SCM",{"href":1148,"dataGaName":1646,"dataGaLocation":1515},"source code management",{"text":1139,"config":1648},{"href":1141,"dataGaName":1649,"dataGaLocation":1515},"continuous integration & delivery",{"text":1190,"config":1651},{"href":1192,"dataGaName":1652,"dataGaLocation":1515},"value stream management",{"text":1596,"config":1654},{"href":1655,"dataGaName":1599,"dataGaLocation":1515},"/de-de/solutions/gitops/",{"text":1203,"config":1657},{"href":1206,"dataGaName":1207,"dataGaLocation":1515},{"text":1209,"config":1659},{"href":1212,"dataGaName":1213,"dataGaLocation":1515},{"text":1215,"config":1661},{"href":1218,"dataGaName":1219,"dataGaLocation":1515},{"text":1663,"config":1664},"Bildungswesen",{"href":1665,"dataGaName":1666,"dataGaLocation":1515},"/de-de/solutions/education/","education",{"text":1668,"config":1669},"Finanzdienstleistungen",{"href":1670,"dataGaName":1671,"dataGaLocation":1515},"/de-de/solutions/finance/","financial services",{"title":1226,"links":1673},[1674,1676,1678,1680,1683,1685,1688,1690,1692,1694,1696,1698,1700,1702],{"text":1239,"config":1675},{"href":1241,"dataGaName":1242,"dataGaLocation":1515},{"text":1244,"config":1677},{"href":1246,"dataGaName":1247,"dataGaLocation":1515},{"text":1249,"config":1679},{"href":1251,"dataGaName":1252,"dataGaLocation":1515},{"text":1254,"config":1681},{"href":1256,"dataGaName":1682,"dataGaLocation":1515},"docs",{"text":1277,"config":1684},{"href":1279,"dataGaName":1280,"dataGaLocation":1515},{"text":1686,"config":1687},"Neuerungen",{"href":1337,"dataGaName":1338,"dataGaLocation":1515},{"text":1272,"config":1689},{"href":1274,"dataGaName":1275,"dataGaLocation":1515},{"text":1291,"config":1691},{"href":1293,"dataGaName":1294,"dataGaLocation":1515},{"text":1299,"config":1693},{"href":1301,"dataGaName":1302,"dataGaLocation":1515},{"text":1304,"config":1695},{"href":1306,"dataGaName":1307,"dataGaLocation":1515},{"text":1309,"config":1697},{"href":1311,"dataGaName":1312,"dataGaLocation":1515},{"text":1314,"config":1699},{"href":1316,"dataGaName":1317,"dataGaLocation":1515},{"text":1319,"config":1701},{"href":1321,"dataGaName":1322,"dataGaLocation":1515},{"text":1324,"config":1703},{"href":1326,"dataGaName":1327,"dataGaLocation":1515},{"title":1340,"links":1705},[1706,1708,1710,1712,1714,1716,1721,1726,1728,1730,1732],{"text":1348,"config":1707},{"href":1350,"dataGaName":1342,"dataGaLocation":1515},{"text":1353,"config":1709},{"href":1355,"dataGaName":1356,"dataGaLocation":1515},{"text":1361,"config":1711},{"href":1363,"dataGaName":1364,"dataGaLocation":1515},{"text":1366,"config":1713},{"href":1368,"dataGaName":1369,"dataGaLocation":1515},{"text":1371,"config":1715},{"href":1373,"dataGaName":1374,"dataGaLocation":1515},{"text":1717,"config":1718},"Nachhaltigkeit",{"href":1719,"dataGaName":1720,"dataGaLocation":1515},"/sustainability/","Sustainability",{"text":1722,"config":1723},"Vielfalt, Inklusion und Zugehörigkeit",{"href":1724,"dataGaName":1725,"dataGaLocation":1515},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1376,"config":1727},{"href":1378,"dataGaName":1379,"dataGaLocation":1515},{"text":1386,"config":1729},{"href":1388,"dataGaName":1389,"dataGaLocation":1515},{"text":1391,"config":1731},{"href":1393,"dataGaName":1394,"dataGaLocation":1515},{"text":1733,"config":1734},"Transparenzerklärung zu moderner Sklaverei",{"href":1735,"dataGaName":1736,"dataGaLocation":1515},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1738},[1739,1742,1745],{"text":1740,"config":1741},"Terms",{"href":1565,"dataGaName":1566,"dataGaLocation":1515},{"text":1743,"config":1744},"Cookies",{"dataGaName":1575,"dataGaLocation":1515,"id":1576,"isOneTrustButton":461},{"text":1746,"config":1747},"Datenschutz",{"href":1570,"dataGaName":1571,"dataGaLocation":1515},[1749],{"id":1750,"title":1751,"body":1049,"config":1752,"content":1754,"description":1049,"extension":1758,"meta":1759,"navigation":461,"path":1760,"seo":1761,"stem":1762,"__hash__":1763},"blogAuthors/en-us/blog/authors/hakeem-abdul-razak.yml","Hakeem Abdul Razak",{"template":1753},"BlogAuthor",{"name":7,"config":1755},{"headshot":1756,"ctfId":1757},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749662077/Blog/Author%20Headshots/Hakeem_Abdul-Razak_headshot.png","7H6nuZfVCK5mqJBK4fuaDH","yml",{},"/en-us/blog/authors/hakeem-abdul-razak",{},"en-us/blog/authors/hakeem-abdul-razak","Nn-O6dna3fLJxdKk54UPgaggYeqIBnLWiK0QzAVjnZc",[1765,1773,1781],{"title":1766,"description":1767,"heroImage":1768,"category":1045,"date":1769,"authors":1770,"slug":1772,"externalUrl":1049},"Wie GitLab Schwachstellen über Refactorings hinweg verfolgt","Das verbesserte Scope+Offset-Fingerprinting hält das Tracking stabil, wenn Kommentare, Leerzeilen oder Reformatierungen dazukommen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[1771],"Julian Thome","improved-scope-offset-fingerprinting",{"title":1774,"description":1775,"heroImage":1768,"category":1045,"date":1776,"authors":1777,"slug":1780,"externalUrl":1049},"GitLab Secrets Manager unterstützt ESO, Terraform und API","GitLab Secrets Manager liefert Secrets sicher an Kubernetes, Terraform und externe Workflows, aus einer einzigen Quelle für die gesamte Toolchain.","2026-08-06",[1778,1779],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1782,"description":1783,"heroImage":1784,"category":1045,"date":1785,"authors":1786,"slug":1788,"externalUrl":1049},"Mit Claude und GitLab jeden Commit bis zur Produktion absichern","Claude Security findet Schwachstellen in der Coding-Session. GitLab übernimmt danach: Scans, Policy-Durchsetzung und Audit-Nachweise im Lebenszyklus.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[1787],"Alisa Ho","claude-security-and-gitlab",{"promotions":1790},[1791,1805,1816,1827],{"id":1792,"categories":1793,"header":1795,"text":1796,"button":1797,"image":1802},"ai-modernization",[1794],"ai","Hält KI, was uns versprochen wurde?","Das Quiz dauert maximal 5 Minuten.",{"text":1798,"config":1799},"Ermittle deinen KI-Reifegrad",{"href":1800,"dataGaName":1801,"dataGaLocation":1280},"/de-de/assessments/ai-modernization-assessment/","modernization assessment",{"config":1803},{"src":1804},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1806,"categories":1807,"header":1808,"text":1796,"button":1809,"image":1813},"devops-modernization",[1064,1614],"Verwaltest du Tool-Chaos oder stellst du Innovationen bereit?",{"text":1810,"config":1811},"Ermittle deinen DevOps-Reifegrad",{"href":1812,"dataGaName":1801,"dataGaLocation":1280},"/de-de/assessments/devops-modernization-assessment/",{"config":1814},{"src":1815},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1817,"categories":1818,"header":1819,"text":1796,"button":1820,"image":1824},"security-modernization",[1045],"Tauschst du Schnelligkeit gegen Sicherheit ein?",{"text":1821,"config":1822},"Ermittle deinen Sicherheitsreifegrad",{"href":1823,"dataGaName":1801,"dataGaLocation":1280},"/de-de/assessments/security-modernization-assessment/",{"config":1825},{"src":1826},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1828,"paths":1829,"header":1832,"text":1833,"button":1834,"image":1839},"github-azure-migration",[1830,1831],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Ist dein Team bereit für den Umzug von GitHub nach Azure?","GitHub stellt bereits auf Azure um. Finde heraus, was das für dich bedeutet.",{"text":1835,"config":1836},"Erfahre, wie GitLab im Vergleich zu GitHub abschneidet",{"href":1837,"dataGaName":1838,"dataGaLocation":1280},"/de-de/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1840},{"src":1815},{"header":1842,"blurb":1843,"button":1844,"secondaryButton":1849},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1845,"config":1846},"Kostenlosen Test starten",{"href":1847,"dataGaName":1077,"dataGaLocation":1848},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":1403,"config":1850},{"href":1405,"dataGaName":1082,"dataGaLocation":1848},1786803737916]