[{"data":1,"prerenderedAt":1517},["ShallowReactive",2],{"/de-de/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent":3,"navigation-de-de":735,"banner-de-de":1167,"footer-de-de":1175,"blog-post-authors-de-de-Fernando Diaz":1416,"blog-related-posts-de-de-vulnerability-triage-made-simple-with-gitlab-security-analyst-agent":1431,"blog-promotions-de-de":1455,"next-steps-de-de":1507},{"id":4,"title":5,"authors":6,"body":8,"category":715,"date":716,"description":717,"extension":718,"externalUrl":719,"faq":719,"featured":720,"heroImage":721,"meta":722,"navigation":234,"path":723,"seo":724,"slug":727,"stem":728,"tags":729,"template":733,"updatedDate":719,"__hash__":734},"blogPosts/de-de/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent.md","So priorisierst du Schwachstellen intelligent – ein Tutorial",[7],"Fernando Diaz",{"type":9,"value":10,"toc":699},"minimark",[11,15,31,42,47,52,55,58,61,64,68,71,118,121,125,128,131,134,138,141,144,147,153,159,163,167,179,276,287,441,453,457,472,478,484,490,497,503,506,512,515,521,524,530,536,542,548,554,560,564,570,576,582,588,592,598,604,610,616,620,623,650,654,657,660,663,682,695],[12,13,14],"p",{},"Sicherheitslücken werden in modernen Applikationen kontinuierlich entdeckt. Development-Teams sehen sich oft mit Hunderten oder Tausenden von Scanner-Ergebnissen konfrontiert, was die Identifikation der größten Risiken erschwert. Hier wird systematisches Vulnerability-Triaging unverzichtbar.",[12,16,17,18,24,25,30],{},"In diesem Artikel zeigen wir, wie GitLabs ",[19,20,23],"a",{"href":21,"rel":22},"https://docs.gitlab.com/user/application_security/",[],"integrierte Funktionen zum Security-Scanning"," kombiniert mit dem ",[19,26,29],{"href":27,"rel":28},"https://docs.gitlab.com/user/duo_agent_platform/agents/foundational_agents/security_analyst_agent/",[],"GitLab Duo Security Analyst Agent"," Vulnerability-Management von einem zeitaufwändigen manuellen Prozess zu einem KI-gestützten, strukturierten Workflow verbessern.",[32,33,34],"blockquote",{},[12,35,36,37],{},"💡 Am 10. Februar bei GitLab Transcend erfahren, wie Agentic AI Software-Delivery transformiert. Kundenberichte anhören und eigene Modernisierung starten. ",[19,38,41],{"href":39,"rel":40},"https://about.gitlab.com/events/transcend/virtual/",[],"Jetzt registrieren.",[43,44,46],"h2",{"id":45},"konzept-und-kontext","KONZEPT UND KONTEXT",[48,49,51],"h3",{"id":50},"was-ist-vulnerability-triaging","Was ist Vulnerability-Triaging?",[12,53,54],{},"Vulnerability-Triaging ist der Prozess, Sicherheitslücken zu analysieren, zu priorisieren und zu entscheiden, wie diese behoben werden. Nicht alle Schwachstellen sind gleich – manche stellen kritische Risiken dar, die sofortige Aufmerksamkeit erfordern, während andere False-Positives sein können oder in einem spezifischen Kontext minimale Bedrohung darstellen.",[12,56,57],{},"Traditionelles Triaging umfasst: Scan-Ergebnisse aus mehreren Security-Tools reviewen, Severity basierend auf CVSS-Scores und Exploitability bewerten, Kontext verstehen (ob betroffener Code tatsächlich erreichbar ist), Remediation nach Business-Impact und Risiko priorisieren, und Resolution bis zum Deployment tracken.",[12,59,60],{},"Dieser Prozess wird überwältigend bei großen Codebasen und häufigen Scans. GitLab adressiert diese Herausforderungen durch integriertes Security-Scanning und KI-gestützte Analyse.",[12,62,63],{},"Der dreistufige Ansatz – automatisierte Pipeline-Scans, strukturierte manuelle Triage, KI-gestützte Risikoanalyse – bietet die systematische Methodik, die NIS2 Artikel 21.2(f) für Wirksamkeitsbewertung von Cybersecurity-Maßnahmen fordert. ISO 27001 Kontrolle A.8.8 verlangt das Einholen von Schwachstellen-Informationen, Bewertung der Exposition und geeignete Maßnahmen – alle drei Schritte werden durch diesen Workflow abgedeckt.",[48,65,67],{"id":66},"gitlab-security-scanner-übersicht","GitLab Security-Scanner: Übersicht",[12,69,70],{},"GitLab bietet integrierte Security-Scanner, die sich nahtlos in CI/CD-Pipelines einfügen und ISO 27001 Kontrollen A.8.28-29 für Security-Testing im Development-Lifecycle entsprechen. Diese Scanner laufen automatisch während Pipeline-Ausführung und befüllen GitLabs Vulnerability Report mit Findings:",[72,73,74,82,88,94,100,106,112],"ul",{},[75,76,77,81],"li",{},[78,79,80],"strong",{},"Static Application Security Testing (SAST)",": Analysiert Source-Code auf Schwachstellen",[75,83,84,87],{},[78,85,86],{},"Dependency Scanning",": Identifiziert Schwachstellen in Projekt-Dependencies",[75,89,90,93],{},[78,91,92],{},"Container Scanning",": Scannt Docker-Images auf bekannte Schwachstellen",[75,95,96,99],{},[78,97,98],{},"Dynamic Application Security Testing (DAST)",": Testet laufende Applikationen",[75,101,102,105],{},[78,103,104],{},"Secret Detection",": Findet versehentlich committete Secrets",[75,107,108,111],{},[78,109,110],{},"Infrastructure-as-Code Scanning",": Analysiert IaC auf Fehlkonfigurationen",[75,113,114,117],{},[78,115,116],{},"API Security Testing & Fuzzing",": Testet Web-APIs auf Bugs und Security-Issues",[12,119,120],{},"Die Scanner-Integration erfolgt durch GitLab-CI/CD-Templates, die sich über Variables pro Scanner konfigurieren lassen. Nach Konfiguration laufen Scanner automatisch und berichten Findings an den zentralen Vulnerability Report.",[48,122,124],{"id":123},"der-manuelle-triage-workflow","Der manuelle Triage-Workflow",[12,126,127],{},"GitLab aggregiert alle Scanner-Findings in zentralisierten Ansichten mit Filteroptionen nach Severity, Status, Scanner, OWASP Top 10 und Reachability. Der Vulnerability Report zeigt Severity-Levels, Status (Detected/Confirmed/Dismissed/Resolved), Scanner-Typ, betroffene Dateien und Pipeline-Informationen.",[12,129,130],{},"Traditionelles manuelles Triaging umfasst: Jede Schwachstelle durch Klick auf Detail-Page reviewen, Beschreibung bewerten und Impact verstehen, betroffenen Code über integrierte Links untersuchen, nach vorhandenen Fixes oder Patches prüfen, Status setzen (Confirm/Dismiss mit Begründung/Issue erstellen), und Ownership für Remediation zuweisen.",[12,132,133],{},"Dieser Workflow ist umfassend, erfordert jedoch Security-Expertise und kann zeitaufwändig sein bei Hunderten von Findings. Die Kombination aus automatisierten Scans und KI-gestützter Analyse reduziert Triage-Zeit von Stunden auf Minuten bei gleichzeitiger Erfüllung dokumentierter Compliance-Anforderungen. Nachvollziehbare Triage-Entscheidungen mit Status-Tracking unterstützen auch NIS2 Artikel 23 Meldepflichten durch lückenlose Dokumentation.",[48,135,137],{"id":136},"gitlab-duo-security-analyst-agent-capabilities","GitLab Duo Security Analyst Agent: Capabilities",[12,139,140],{},"GitLab Duo Security Analyst Agent ist ein KI-gestütztes Tool, das Schwachstellen-Analyse und Triaging automatisiert. Der Agent versteht Applikations-Kontext, bewertet Risiken intelligent und liefert umsetzbare Empfehlungen.",[12,142,143],{},"Der Agent analysiert Schwachstellen durch: Exploitability-Bewertung im spezifischen Codebase-Kontext, Reachability-Assessment (ob betroffene Code-Pfade tatsächlich genutzt werden), risikobasierte Priorisierung statt nur CVSS-Scores, Schwachstellen-Erklärungen in klarer Sprache, Remediation-Schritte spezifisch für die Applikation empfehlen, und False-Positives durch kontextbasierte Analyse reduzieren.",[12,145,146],{},"Der Agent kann: Security-Findings über verschiedene Scan-Typen analysieren und priorisieren, Severity/Exploitability/Business-Impact bewerten, echte Bedrohungen von harmlosen Findings unterscheiden, regulatorische Anforderungen und Remediation-Timelines verstehen, Zusammenfassungen zur Security-Posture generieren, umsetzbare Pläne zur Behebung erstellen, und repetitive Security-Assessment-Aufgaben optimieren.",[12,148,149,152],{},[78,150,151],{},"Voraussetzungen:"," GitLab Ultimate Subscription mit GitLab Duo Agent Platform aktiviert, Security-Scanner im Projekt konfiguriert, mindestens eine Schwachstelle im Vulnerability Report.",[12,154,155,158],{},[78,156,157],{},"Vorteile:"," Zeitersparnis (Stunden auf Minuten reduzieren), bessere Priorisierung (Fokus auf echte Risiken), Wissenstransfer (Security-Best-Practices lernen), konsistente Standards (über alle Projekte), reduzierte Alert-Fatigue (Noise filtern).",[43,160,162],{"id":161},"technische-umsetzung","TECHNISCHE UMSETZUNG",[48,164,166],{"id":165},"security-scanner-konfigurieren","Security-Scanner konfigurieren",[12,168,169,170,174,175,178],{},"Scanner zur ",[171,172,173],"code",{},".gitlab-ci.yml","-Datei hinzufügen. SAST- und Dependency-Scanning-Templates werden inkludiert, die automatisch im Test-Stage laufen. Jeder Scanner lässt sich über Variables überschreiben. Die ",[171,176,177],{},"SAST_EXCLUDED_PATHS","-Variable weist SAST an, angegebene Verzeichnisse/Dateien zu überspringen:",[180,181,186],"pre",{"className":182,"code":183,"language":184,"meta":185,"style":185},"language-yaml shiki shiki-themes github-light","include:\n  - template: Security/SAST.gitlab-ci.yml\n  - template: Security/Dependency-Scanning.gitlab-ci.yml\n\nstages:\n  - test\n\nvariables:\n  SAST_EXCLUDED_PATHS: \"spec/, test/, tests/, tmp/\"\n","yaml","",[171,187,188,201,217,229,236,244,252,257,265],{"__ignoreMap":185},[189,190,193,197],"span",{"class":191,"line":192},"line",1,[189,194,196],{"class":195},"shJU0","include",[189,198,200],{"class":199},"sgsFI",":\n",[189,202,204,207,210,213],{"class":191,"line":203},2,[189,205,206],{"class":199},"  - ",[189,208,209],{"class":195},"template",[189,211,212],{"class":199},": ",[189,214,216],{"class":215},"sYBdl","Security/SAST.gitlab-ci.yml\n",[189,218,220,222,224,226],{"class":191,"line":219},3,[189,221,206],{"class":199},[189,223,209],{"class":195},[189,225,212],{"class":199},[189,227,228],{"class":215},"Security/Dependency-Scanning.gitlab-ci.yml\n",[189,230,232],{"class":191,"line":231},4,[189,233,235],{"emptyLinePlaceholder":234},true,"\n",[189,237,239,242],{"class":191,"line":238},5,[189,240,241],{"class":195},"stages",[189,243,200],{"class":199},[189,245,247,249],{"class":191,"line":246},6,[189,248,206],{"class":199},[189,250,251],{"class":215},"test\n",[189,253,255],{"class":191,"line":254},7,[189,256,235],{"emptyLinePlaceholder":234},[189,258,260,263],{"class":191,"line":259},8,[189,261,262],{"class":195},"variables",[189,264,200],{"class":199},[189,266,268,271,273],{"class":191,"line":267},9,[189,269,270],{"class":195},"  SAST_EXCLUDED_PATHS",[189,272,212],{"class":199},[189,274,275],{"class":215},"\"spec/, test/, tests/, tmp/\"\n",[12,277,278,279,282,283,286],{},"Für Container-Scanning wird ein Container im ",[171,280,281],{},"build-container","-Job gebaut und gepusht, dann im ",[171,284,285],{},"test","-Stage gescannt:",[180,288,290],{"className":182,"code":289,"language":184,"meta":185,"style":185},"include:\n  - template: Security/Container-Scanning.gitlab-ci.yml\n\nstages:\n  - build\n  - test\n\nbuild-container:\n  stage: build\n  variables:\n    IMAGE: $CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA\n  before_script:\n    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY\n  script:\n    - docker build -t $IMAGE .\n    - docker push $IMAGE\n\ncontainer_scanning:\n  variables:\n    CS_IMAGE: $CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA\n",[171,291,292,298,309,313,319,326,332,336,342,351,359,370,378,387,395,403,411,416,424,431],{"__ignoreMap":185},[189,293,294,296],{"class":191,"line":192},[189,295,196],{"class":195},[189,297,200],{"class":199},[189,299,300,302,304,306],{"class":191,"line":203},[189,301,206],{"class":199},[189,303,209],{"class":195},[189,305,212],{"class":199},[189,307,308],{"class":215},"Security/Container-Scanning.gitlab-ci.yml\n",[189,310,311],{"class":191,"line":219},[189,312,235],{"emptyLinePlaceholder":234},[189,314,315,317],{"class":191,"line":231},[189,316,241],{"class":195},[189,318,200],{"class":199},[189,320,321,323],{"class":191,"line":238},[189,322,206],{"class":199},[189,324,325],{"class":215},"build\n",[189,327,328,330],{"class":191,"line":246},[189,329,206],{"class":199},[189,331,251],{"class":215},[189,333,334],{"class":191,"line":254},[189,335,235],{"emptyLinePlaceholder":234},[189,337,338,340],{"class":191,"line":259},[189,339,281],{"class":195},[189,341,200],{"class":199},[189,343,344,347,349],{"class":191,"line":267},[189,345,346],{"class":195},"  stage",[189,348,212],{"class":199},[189,350,325],{"class":215},[189,352,354,357],{"class":191,"line":353},10,[189,355,356],{"class":195},"  variables",[189,358,200],{"class":199},[189,360,362,365,367],{"class":191,"line":361},11,[189,363,364],{"class":195},"    IMAGE",[189,366,212],{"class":199},[189,368,369],{"class":215},"$CI_REGISTRY_IMAGE/$CI_COMMIT_REF_SLUG:$CI_COMMIT_SHA\n",[189,371,373,376],{"class":191,"line":372},12,[189,374,375],{"class":195},"  before_script",[189,377,200],{"class":199},[189,379,381,384],{"class":191,"line":380},13,[189,382,383],{"class":199},"    - ",[189,385,386],{"class":215},"docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY\n",[189,388,390,393],{"class":191,"line":389},14,[189,391,392],{"class":195},"  script",[189,394,200],{"class":199},[189,396,398,400],{"class":191,"line":397},15,[189,399,383],{"class":199},[189,401,402],{"class":215},"docker build -t $IMAGE .\n",[189,404,406,408],{"class":191,"line":405},16,[189,407,383],{"class":199},[189,409,410],{"class":215},"docker push $IMAGE\n",[189,412,414],{"class":191,"line":413},17,[189,415,235],{"emptyLinePlaceholder":234},[189,417,419,422],{"class":191,"line":418},18,[189,420,421],{"class":195},"container_scanning",[189,423,200],{"class":199},[189,425,427,429],{"class":191,"line":426},19,[189,428,356],{"class":195},[189,430,200],{"class":199},[189,432,434,437,439],{"class":191,"line":433},20,[189,435,436],{"class":195},"    CS_IMAGE",[189,438,212],{"class":199},[189,440,369],{"class":215},[12,442,443,446,447,452],{},[78,444,445],{},"Hinweis:"," In Merge-Requests zeigen Scanner die Differenz der Schwachstellen vom Feature-Branch zum Target-Branch. Zusätzlich lassen sich ",[19,448,451],{"href":449,"rel":450},"https://docs.gitlab.com/user/application_security/policies/",[],"Security-Policies"," erstellen, um vulnerable Code am Mergen zu hindern.",[48,454,456],{"id":455},"security-analyst-agent-aktivieren-und-nutzen","Security Analyst Agent aktivieren und nutzen",[12,458,459,460,465,466,471],{},"Security Analyst Agent ist ein ",[19,461,464],{"href":462,"rel":463},"https://docs.gitlab.com/user/duo_agent_platform/agents/foundational_agents/",[],"Foundational Agent",". Der Agent findet sich im ",[19,467,470],{"href":468,"rel":469},"https://docs.gitlab.com/user/duo_agent_platform/ai_catalog/",[],"AI Catalog"," und lässt sich direkt vom Projekt nutzen.",[12,473,474],{},[475,476],"img",{"alt":470,"src":477},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072458/nv1qwisln1hxbgzeva7a.png",[12,479,480],{},[475,481],{"alt":482,"src":483},"Security Analyst Agent Details 1","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072470/wjbwpgy6ipbblderxfdb.png",[12,485,486],{},[475,487],{"alt":488,"src":489},"Security Analyst Agent Details 2","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072469/dzhbqxt2cmwwvxeaqxfe.png",[12,491,492,493,496],{},"GitLab Duo Chat öffnen und ",[78,494,495],{},"Security Agent"," auswählen:",[12,498,499],{},[475,500],{"alt":501,"src":502},"Security Analyst Agent selection","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072464/rrdk9aidkck2oeddtjm0.png",[12,504,505],{},"Model auswählen und Agentic-Mode aktivieren:",[12,507,508],{},[475,509],{"alt":510,"src":511},"Security Analyst Agent - Model Selection","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072458/hvccofv3nadkpkzfevx0.png",[12,513,514],{},"Tools des Agents:",[12,516,517],{},[475,518],{"alt":519,"src":520},"Security Analyst Agent - tools","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072470/bgg2icxb0hp5g0zmerj3.png",[12,522,523],{},"Beispiel-Query: \"Was sind die kritischsten Schwachstellen und welche sollten zuerst behoben werden?\"",[12,525,526],{},[475,527],{"alt":528,"src":529},"Security Analyst Agent 1","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072476/hic8szspoobbmntxw5js.png",[12,531,532],{},[475,533],{"alt":534,"src":535},"Security Analyst Agent 2","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072463/iytr116dfkno3akr2xgf.png",[12,537,538],{},[475,539],{"alt":540,"src":541},"Security Analyst Agent 3","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072464/gzmggi6xu1bzobqdyxhg.png",[12,543,544],{},[475,545],{"alt":546,"src":547},"Security Analyst Agent 4","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/gv7ncdauqw8eszaxdcpf.png",[12,549,550],{},[475,551],{"alt":552,"src":553},"Security Analyst Agent 5","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/ifj4xp8kfv9ranfwav3h.png",[12,555,556],{},[475,557],{"alt":558,"src":559},"Security Analyst Agent 6","https://res.cloudinary.com/about-gitlab-com/image/upload/v1766072457/arr8jfqn52zy1q72jqh5.png",[48,561,563],{"id":562},"effektive-queries","Effektive Queries",[12,565,566,569],{},[78,567,568],{},"Kritische Issues identifizieren:"," \"Zeige mir Schwachstellen, die in unserem Production-Code aktiv exploitierbar sind\"",[12,571,572,575],{},[78,573,574],{},"Erreichbare Schwachstellen:"," \"Welche High-Severity-Schwachstellen befinden sich in Code-Pfaden, die tatsächlich ausgeführt werden?\"",[12,577,578,581],{},[78,579,580],{},"Dependencies verstehen:"," \"Was sind die kritischsten Dependency-Schwachstellen und sind Patches verfügbar?\"",[12,583,584,587],{},[78,585,586],{},"Remediation-Guidance:"," \"Erkläre, wie die SQL-Injection-Schwachstelle in User-Authentication zu beheben ist\"",[48,589,591],{"id":590},"agent-empfehlungen-interpretieren","Agent-Empfehlungen interpretieren",[12,593,594,597],{},[78,595,596],{},"Risk-Assessment:"," Der Agent erklärt, warum eine Schwachstelle kritisch ist, über den CVSS-Score hinaus, unter Berücksichtigung der spezifischen Applikations-Architektur.",[12,599,600,603],{},[78,601,602],{},"Exploitability-Analyse:"," Er bestimmt, ob betroffener Code tatsächlich erreichbar und exploitierbar ist, was hilft, theoretische Risiken herauszufiltern.",[12,605,606,609],{},[78,607,608],{},"Remediation-Steps:"," Der Agent liefert spezifische Guidance zur Behebung von Schwachstellen, inklusive Code-Beispielen wo angemessen.",[12,611,612,615],{},[78,613,614],{},"Priority-Ranking:"," Statt mit Hunderten von Findings zu überfordern, hilft der Agent, die Top-Issues zu identifizieren, die zuerst behoben werden sollten.",[48,617,619],{"id":618},"praktischer-workflow","Praktischer Workflow",[12,621,622],{},"Eine typische Triaging-Session:",[624,625,626,632,638,644],"ol",{},[75,627,628,631],{},[78,629,630],{},"Mit Big Picture starten:"," \"Analysiere die Security-Posture dieses Projekts und hebe die Top-5 kritischsten Schwachstellen hervor.\"",[75,633,634,637],{},[78,635,636],{},"In Specifics eintauchen:"," Für jede identifizierte kritische Schwachstelle fragen: \"Ist diese Schwachstelle in unserer Applikation tatsächlich exploitierbar?\"",[75,639,640,643],{},[78,641,642],{},"Remediation planen:"," \"Was ist die empfohlene Behebung für dieses SQL-Injection-Issue, und sind Nebeneffekte zu beachten?\"",[75,645,646,649],{},[78,647,648],{},"Progress tracken:"," Nach Behebung kritischer Issues fragen: \"Welche Schwachstellen sollten als nächstes priorisiert werden?\"",[43,651,653],{"id":652},"heute-starten","Heute starten",[12,655,656],{},"Vulnerability-Triaging muss kein überwältigender manueller Prozess sein. Durch Kombination von GitLabs integrierten Security-Scannern mit GitLab Duo Security Analyst Agent können Development-Teams schnell die Schwachstellen identifizieren und priorisieren, die wirklich wichtig sind.",[12,658,659],{},"Die Fähigkeit des Agents, Kontext zu verstehen, echtes Risiko zu bewerten und umsetzbare Guidance zu liefern, transformiert Security-Scanning von einer Compliance-Checkbox zu einem praktischen, effizienten Teil des Development-Workflows.",[12,661,662],{},"Mit Security-Scanner-Aktivierung in GitLab-Pipelines beginnen, dann den Security Analyst Agent nutzen, um intelligente, informierte Entscheidungen über Vulnerability-Remediation zu treffen.",[32,664,665],{},[12,666,667,670,671,676,677,681],{},[78,668,669],{},"Bereit zum Start?"," Die ",[19,672,675],{"href":673,"rel":674},"https://docs.gitlab.com/user/duo_agent_platform/",[],"GitLab Duo Agent Platform-Dokumentation"," und ",[19,678,680],{"href":21,"rel":679},[],"Security-Scanning-Dokumentation"," prüfen, um den Workflow für Vulnerability-Management heute zu transformieren.",[32,683,684],{},[12,685,686,689,690],{},[78,687,688],{},"Vollständige technische Details, zusätzliche Screenshots und erweiterte Konfigurationsbeispiele:"," ",[19,691,694],{"href":692,"rel":693},"https://about.gitlab.com/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent/",[],"English version of this tutorial",[696,697,698],"style",{},"html pre.shiki code .shJU0, html code.shiki .shJU0{--shiki-default:#22863A}html pre.shiki code .sgsFI, html code.shiki .sgsFI{--shiki-default:#24292E}html pre.shiki code .sYBdl, html code.shiki .sYBdl{--shiki-default:#032F62}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}",{"title":185,"searchDepth":203,"depth":203,"links":700},[701,707,714],{"id":45,"depth":203,"text":46,"children":702},[703,704,705,706],{"id":50,"depth":219,"text":51},{"id":66,"depth":219,"text":67},{"id":123,"depth":219,"text":124},{"id":136,"depth":219,"text":137},{"id":161,"depth":203,"text":162,"children":708},[709,710,711,712,713],{"id":165,"depth":219,"text":166},{"id":455,"depth":219,"text":456},{"id":562,"depth":219,"text":563},{"id":590,"depth":219,"text":591},{"id":618,"depth":219,"text":619},{"id":652,"depth":203,"text":653},"security","2026-01-07","Der GitLab Duo Security Agent automatisiert Vulnerability-Triage mit SAST, DAST und Dependency Scanning, erfüllt ISO 27001.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png",{},"/de-de/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent",{"title":725,"description":726},"Schwachstellen intelligent priorisieren mit KI","GitLab Duo Security Agent automatisiert Vulnerability-Triage, erfüllt ISO 27001, nutzt SAST und DAST für intelligente Priorisierung.","vulnerability-triage-made-simple-with-gitlab-security-analyst-agent","de-de/blog/vulnerability-triage-made-simple-with-gitlab-security-analyst-agent",[730,731,732,715],"AI","product","tutorial","BlogPost","c1Mj-MnOFvqZc3TI8TQNv98HNRBAKMnf93vrap_VqSU",{"logo":736,"freeTrial":741,"sales":746,"login":751,"items":756,"search":1085,"minimal":1119,"duo":1137,"switchNav":1146,"pricingDeployment":1157},{"config":737},{"href":738,"dataGaName":739,"dataGaLocation":740},"/de-de/","gitlab logo","header",{"text":742,"config":743},"Kostenlose Testversion anfordern",{"href":744,"dataGaName":745,"dataGaLocation":740},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":747,"config":748},"Demo anfordern",{"href":749,"dataGaName":750,"dataGaLocation":740},"/de-de/sales/?contact-topic=request-demo","sales",{"text":752,"config":753},"Anmelden",{"href":754,"dataGaName":755,"dataGaLocation":740},"https://gitlab.com/users/sign_in/","sign in",[757,786,888,893,1007,1063],{"text":758,"config":759,"menu":761},"Plattform",{"dataNavLevelOne":760},"platform",{"type":762,"columns":763},"cards",[764,770,778],{"title":758,"description":765,"link":766},"Die intelligente Orchestrierungsplattform für DevSecOps",{"text":767,"config":768},"Die Plattform erkunden",{"href":769,"dataGaName":760,"dataGaLocation":740},"/de-de/platform/",{"title":771,"description":772,"link":773},"GitLab Duo Agent Platform","Agentische KI für den gesamten Software-Lebenszyklus",{"text":774,"config":775},"Lerne GitLab Duo kennen",{"href":776,"dataGaName":777,"dataGaLocation":740},"/de-de/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":779,"description":780,"link":781},"Warum GitLab?","Erfahre, warum sich Unternehmen für GitLab entscheiden",{"text":782,"config":783},"Mehr erfahren",{"href":784,"dataGaName":785,"dataGaLocation":740},"/de-de/why-gitlab/","why gitlab",{"text":787,"left":234,"config":788,"menu":790},"Produkt",{"dataNavLevelOne":789},"solutions",{"type":791,"link":792,"columns":796,"feature":867},"lists",{"text":793,"config":794},"Alle Lösungen anzeigen",{"href":795,"dataGaName":789,"dataGaLocation":740},"/de-de/solutions/",[797,822,845],{"title":798,"description":799,"link":800,"items":805},"Automatisierung","CI/CD und Automatisierung zur Beschleunigung der Bereitstellung",{"config":801},{"icon":802,"href":803,"dataGaName":804,"dataGaLocation":740},"AutomatedCodeAlt","/de-de/solutions/delivery-automation/","automated software delivery",[806,810,813,818],{"text":807,"config":808},"CI/CD",{"href":809,"dataGaLocation":740,"dataGaName":807},"/de-de/solutions/continuous-integration/",{"text":771,"config":811},{"href":776,"dataGaLocation":740,"dataGaName":812},"gitlab duo agent platform - product menu",{"text":814,"config":815},"Quellcodeverwaltung",{"href":816,"dataGaLocation":740,"dataGaName":817},"/de-de/solutions/source-code-management/","Source Code Management",{"text":819,"config":820},"Automatische Softwarebereitstellung",{"href":803,"dataGaLocation":740,"dataGaName":821},"Automated software delivery",{"title":823,"description":824,"link":825,"items":830},"Sicherheit","Entwickle Code schneller ohne Abstriche bei der Sicherheit",{"config":826},{"href":827,"dataGaName":828,"dataGaLocation":740,"icon":829},"/de-de/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[831,835,840],{"text":832,"config":833},"Anwendungssicherheitstests",{"href":827,"dataGaName":834,"dataGaLocation":740},"Application security testing",{"text":836,"config":837},"Schutz der Software-Lieferkette",{"href":838,"dataGaLocation":740,"dataGaName":839},"/de-de/solutions/supply-chain/","Software supply chain security",{"text":841,"config":842},"Software-Compliance",{"href":843,"dataGaName":844,"dataGaLocation":740},"/de-de/solutions/software-compliance/","software compliance",{"title":846,"link":847,"items":852},"Messung",{"config":848},{"icon":849,"href":850,"dataGaName":851,"dataGaLocation":740},"DigitalTransformation","/de-de/solutions/visibility-measurement/","visibility and measurement",[853,857,862],{"text":854,"config":855},"Sichtbarkeit und Messung",{"href":850,"dataGaLocation":740,"dataGaName":856},"Visibility and Measurement",{"text":858,"config":859},"Wertstrommanagement",{"href":860,"dataGaLocation":740,"dataGaName":861},"/de-de/solutions/value-stream-management/","Value Stream Management",{"text":863,"config":864},"Analysen und Einblicke",{"href":865,"dataGaLocation":740,"dataGaName":866},"/de-de/solutions/analytics-and-insights/","Analytics and insights",{"title":868,"type":791,"items":869},"GitLab für",[870,876,882],{"text":871,"config":872},"Enterprise",{"icon":873,"href":874,"dataGaLocation":740,"dataGaName":875},"Building","/de-de/enterprise/","enterprise",{"text":877,"config":878},"Kleinunternehmen",{"icon":879,"href":880,"dataGaLocation":740,"dataGaName":881},"Work","/de-de/small-business/","small business",{"text":883,"config":884},"Öffentlicher Sektor",{"icon":885,"href":886,"dataGaLocation":740,"dataGaName":887},"Organization","/de-de/solutions/public-sector/","public sector",{"text":889,"config":890},"Preise",{"href":891,"dataGaName":892,"dataGaLocation":740,"dataNavLevelOne":892},"/de-de/pricing/","pricing",{"text":894,"config":895,"menu":897},"Ressourcen",{"dataNavLevelOne":896},"resources",{"type":791,"link":898,"columns":902,"feature":996},{"text":899,"config":900},"Alle Ressourcen anzeigen",{"href":901,"dataGaName":896,"dataGaLocation":740},"/de-de/resources/",[903,936,963],{"title":904,"items":905},"Erste Schritte",[906,911,916,921,926,931],{"text":907,"config":908},"Installieren",{"href":909,"dataGaName":910,"dataGaLocation":740},"/de-de/install/","install",{"text":912,"config":913},"Kurzanleitungen",{"href":914,"dataGaName":915,"dataGaLocation":740},"/de-de/get-started/","quick setup checklists",{"text":917,"config":918},"Lernen",{"href":919,"dataGaLocation":740,"dataGaName":920},"https://university.gitlab.com/","learn",{"text":922,"config":923},"Produktdokumentation",{"href":924,"dataGaName":925,"dataGaLocation":740},"https://docs.gitlab.com/","product documentation",{"text":927,"config":928},"Best-Practice-Videos",{"href":929,"dataGaName":930,"dataGaLocation":740},"/de-de/getting-started-videos/","best practice videos",{"text":932,"config":933},"Integrationen",{"href":934,"dataGaName":935,"dataGaLocation":740},"/de-de/integrations/","integrations",{"title":937,"items":938},"Entdecken",[939,944,949,954,958],{"text":940,"config":941},"Kundenerfolge",{"href":942,"dataGaName":943,"dataGaLocation":740},"/de-de/customers/","customer success stories",{"text":945,"config":946},"Blog",{"href":947,"dataGaName":948,"dataGaLocation":740},"/de-de/blog/","blog",{"text":950,"config":951},"Demo-Hub",{"href":952,"dataGaName":953,"dataGaLocation":740},"/de-de/demo-hub/","demo hub",{"text":955,"config":956},"The Source",{"href":957,"dataGaName":948,"dataGaLocation":740},"/de-de/the-source/",{"text":959,"config":960},"Remote",{"href":961,"dataGaName":962,"dataGaLocation":740},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":964,"items":965},"Vernetzen",[966,971,976,981,986,991],{"text":967,"config":968},"GitLab-Services",{"href":969,"dataGaName":970,"dataGaLocation":740},"/de-de/services/","services",{"text":972,"config":973},"Beitragen",{"href":974,"dataGaName":975,"dataGaLocation":740},"https://contributors.gitlab.com","contribute",{"text":977,"config":978},"Community",{"href":979,"dataGaName":980,"dataGaLocation":740},"/community/","community",{"text":982,"config":983},"Forum",{"href":984,"dataGaName":985,"dataGaLocation":740},"https://forum.gitlab.com/","forum",{"text":987,"config":988},"Veranstaltungen",{"href":989,"dataGaName":990,"dataGaLocation":740},"/events/","events",{"text":992,"config":993},"Partner",{"href":994,"dataGaName":995,"dataGaLocation":740},"/de-de/partners/","partners",{"config":997,"title":1000,"text":1001,"link":1002},{"background":998,"textColor":999},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":1003,"config":1004},"Aktuelle Nachrichten",{"href":1005,"dataGaName":1006,"dataGaLocation":740},"/de-de/whats-new/","whats new",{"text":1008,"config":1009,"menu":1011},"Unternehmen",{"dataNavLevelOne":1010},"company",{"type":791,"columns":1012},[1013],{"items":1014},[1015,1020,1026,1028,1033,1038,1043,1048,1053,1058],{"text":1016,"config":1017},"Über",{"href":1018,"dataGaName":1019,"dataGaLocation":740},"/de-de/company/","about",{"text":1021,"config":1022,"footerGa":1025},"Karriere",{"href":1023,"dataGaName":1024,"dataGaLocation":740},"/jobs/","jobs",{"dataGaName":1024},{"text":987,"config":1027},{"href":989,"dataGaName":990,"dataGaLocation":740},{"text":1029,"config":1030},"Geschäftsführung",{"href":1031,"dataGaName":1032,"dataGaLocation":740},"/company/team/e-group/","leadership",{"text":1034,"config":1035},"Handbuch",{"href":1036,"dataGaName":1037,"dataGaLocation":740},"https://handbook.gitlab.com/","handbook",{"text":1039,"config":1040},"Investor Relations",{"href":1041,"dataGaName":1042,"dataGaLocation":740},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":1044,"config":1045},"Trust Center",{"href":1046,"dataGaName":1047,"dataGaLocation":740},"/de-de/security/","trust center",{"text":1049,"config":1050},"AI Transparency Center",{"href":1051,"dataGaName":1052,"dataGaLocation":740},"/de-de/ai-transparency-center/","ai transparency center",{"text":1054,"config":1055},"Newsletter",{"href":1056,"dataGaName":1057,"dataGaLocation":740},"/company/contact/#contact-forms","newsletter",{"text":1059,"config":1060},"Presse",{"href":1061,"dataGaName":1062,"dataGaLocation":740},"/press/","press",{"text":1064,"config":1065,"menu":1066},"Kontakt",{"dataNavLevelOne":1010},{"type":791,"columns":1067},[1068],{"items":1069},[1070,1075,1080],{"text":1071,"config":1072},"Vertrieb kontaktieren",{"href":1073,"dataGaName":1074,"dataGaLocation":740},"/de-de/sales/","talk to sales",{"text":1076,"config":1077},"Support-Portal",{"href":1078,"dataGaName":1079,"dataGaLocation":740},"https://support.gitlab.com/hc/en-us","support portal",{"text":1081,"config":1082},"Kundenportal",{"href":1083,"dataGaName":1084,"dataGaLocation":740},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":1086,"login":1087,"suggestions":1094},"Schließen",{"text":1088,"link":1089},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":1090,"config":1091},"gitlab.com",{"href":754,"dataGaName":1092,"dataGaLocation":1093},"search login","search",{"text":1095,"default":1096},"Vorschläge",[1097,1099,1104,1106,1111,1116],{"text":771,"config":1098},{"href":776,"dataGaName":771,"dataGaLocation":1093},{"text":1100,"config":1101},"Codevorschläge (KI)",{"href":1102,"dataGaName":1103,"dataGaLocation":1093},"/de-de/solutions/code-suggestions/","Code Suggestions (AI)",{"text":807,"config":1105},{"href":809,"dataGaName":807,"dataGaLocation":1093},{"text":1107,"config":1108},"GitLab auf AWS",{"href":1109,"dataGaName":1110,"dataGaLocation":1093},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":1112,"config":1113},"GitLab auf Google Cloud",{"href":1114,"dataGaName":1115,"dataGaLocation":1093},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":779,"config":1117},{"href":784,"dataGaName":1118,"dataGaLocation":1093},"Why GitLab?",{"freeTrial":1120,"mobileIcon":1125,"desktopIcon":1130,"secondaryButton":1133},{"text":1121,"config":1122},"Kostenlos testen",{"href":1123,"dataGaName":745,"dataGaLocation":1124},"https://gitlab.com/-/trials/new/","nav",{"altText":1126,"config":1127},"GitLab-Symbol",{"src":1128,"dataGaName":1129,"dataGaLocation":1124},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":1126,"config":1131},{"src":1132,"dataGaName":1129,"dataGaLocation":1124},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":904,"config":1134},{"href":1135,"dataGaName":1136,"dataGaLocation":1124},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":1138,"mobileIcon":1142,"desktopIcon":1144},{"text":1139,"config":1140},"Mehr über GitLab Duo erfahren",{"href":776,"dataGaName":1141,"dataGaLocation":1124},"gitlab duo",{"altText":1126,"config":1143},{"src":1128,"dataGaName":1129,"dataGaLocation":1124},{"altText":1126,"config":1145},{"src":1132,"dataGaName":1129,"dataGaLocation":1124},{"button":1147,"mobileIcon":1152,"desktopIcon":1154},{"text":1148,"config":1149},"/Option",{"href":1150,"dataGaName":1151,"dataGaLocation":1124},"#contact","switch",{"altText":1126,"config":1153},{"src":1128,"dataGaName":1129,"dataGaLocation":1124},{"altText":1126,"config":1155},{"src":1156,"dataGaName":1129,"dataGaLocation":1124},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":1158,"mobileIcon":1163,"desktopIcon":1165},{"text":1159,"config":1160},"Zurück zur Preisübersicht",{"href":891,"dataGaName":1161,"dataGaLocation":1124,"icon":1162},"back to pricing","GoBack",{"altText":1126,"config":1164},{"src":1128,"dataGaName":1129,"dataGaLocation":1124},{"altText":1126,"config":1166},{"src":1132,"dataGaName":1129,"dataGaLocation":1124},{"title":1168,"button":1169,"config":1173},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":782,"config":1170},{"href":1171,"dataGaName":1172,"dataGaLocation":740},"/de-de/gitlab-orbit/","orbit",{"layout":1174,"disabled":720},"release",{"data":1176},{"text":1177,"source":1178,"edit":1184,"contribute":1189,"config":1194,"items":1199,"minimal":1405},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":1179,"config":1180},"Quelltext der Seite anzeigen",{"href":1181,"dataGaName":1182,"dataGaLocation":1183},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":1185,"config":1186},"Diese Seite bearbeiten",{"href":1187,"dataGaName":1188,"dataGaLocation":1183},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":1190,"config":1191},"Beteilige dich",{"href":1192,"dataGaName":1193,"dataGaLocation":1183},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":1195,"facebook":1196,"youtube":1197,"linkedin":1198},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[1200,1245,1298,1340,1372],{"title":889,"links":1201,"subMenu":1216},[1202,1206,1211],{"text":1203,"config":1204},"Tarife anzeigen",{"href":891,"dataGaName":1205,"dataGaLocation":1183},"view plans",{"text":1207,"config":1208},"Vorteile von Premium",{"href":1209,"dataGaName":1210,"dataGaLocation":1183},"/de-de/pricing/premium/","why premium",{"text":1212,"config":1213},"Vorteile von Ultimate",{"href":1214,"dataGaName":1215,"dataGaLocation":1183},"/de-de/pricing/ultimate/","why ultimate",[1217],{"title":1064,"links":1218},[1219,1221,1223,1225,1230,1235,1240],{"text":1071,"config":1220},{"href":1073,"dataGaName":750,"dataGaLocation":1183},{"text":1076,"config":1222},{"href":1078,"dataGaName":1079,"dataGaLocation":1183},{"text":1081,"config":1224},{"href":1083,"dataGaName":1084,"dataGaLocation":1183},{"text":1226,"config":1227},"Status",{"href":1228,"dataGaName":1229,"dataGaLocation":1183},"https://status.gitlab.com/","status",{"text":1231,"config":1232},"Nutzungsbedingungen",{"href":1233,"dataGaName":1234,"dataGaLocation":1183},"/terms/","terms of use",{"text":1236,"config":1237},"Datenschutzerklärung",{"href":1238,"dataGaName":1239,"dataGaLocation":1183},"/de-de/privacy/","privacy statement",{"text":1241,"config":1242},"Cookie-Einstellungen",{"dataGaName":1243,"dataGaLocation":1183,"id":1244,"isOneTrustButton":234},"cookie preferences","ot-sdk-btn",{"title":787,"links":1246,"subMenu":1255},[1247,1251],{"text":1248,"config":1249},"DevSecOps-Plattform",{"href":769,"dataGaName":1250,"dataGaLocation":1183},"devsecops platform",{"text":1252,"config":1253},"KI-unterstützte Entwicklung",{"href":776,"dataGaName":1254,"dataGaLocation":1183},"ai-assisted development",[1256],{"title":1257,"links":1258},"Themen",[1259,1263,1268,1273,1278,1283,1288,1293],{"text":807,"config":1260},{"href":1261,"dataGaName":1262,"dataGaLocation":1183},"/de-de/topics/ci-cd/","cicd",{"text":1264,"config":1265},"GitOps",{"href":1266,"dataGaName":1267,"dataGaLocation":1183},"/de-de/topics/gitops/","gitops",{"text":1269,"config":1270},"DevOps",{"href":1271,"dataGaName":1272,"dataGaLocation":1183},"/de-de/topics/devops/","devops",{"text":1274,"config":1275},"Versionskontrolle",{"href":1276,"dataGaName":1277,"dataGaLocation":1183},"/de-de/topics/version-control/","version control",{"text":1279,"config":1280},"DevSecOps",{"href":1281,"dataGaName":1282,"dataGaLocation":1183},"/de-de/topics/devsecops/","devsecops",{"text":1284,"config":1285},"Cloud-nativ",{"href":1286,"dataGaName":1287,"dataGaLocation":1183},"/de-de/topics/cloud-native/","cloud native",{"text":1289,"config":1290},"KI für das Programmieren",{"href":1291,"dataGaName":1292,"dataGaLocation":1183},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":1294,"config":1295},"Agentische KI",{"href":1296,"dataGaName":1297,"dataGaLocation":1183},"/de-de/topics/agentic-ai/","agentic ai",{"title":1299,"links":1300},"Lösungen",[1301,1304,1306,1311,1315,1318,1321,1324,1326,1328,1330,1335],{"text":832,"config":1302},{"href":827,"dataGaName":1303,"dataGaLocation":1183},"Application Security Testing",{"text":819,"config":1305},{"href":803,"dataGaName":804,"dataGaLocation":1183},{"text":1307,"config":1308},"Agile Entwicklung",{"href":1309,"dataGaName":1310,"dataGaLocation":1183},"/de-de/solutions/agile-delivery/","agile delivery",{"text":1312,"config":1313},"SCM",{"href":816,"dataGaName":1314,"dataGaLocation":1183},"source code management",{"text":807,"config":1316},{"href":809,"dataGaName":1317,"dataGaLocation":1183},"continuous integration & delivery",{"text":858,"config":1319},{"href":860,"dataGaName":1320,"dataGaLocation":1183},"value stream management",{"text":1264,"config":1322},{"href":1323,"dataGaName":1267,"dataGaLocation":1183},"/de-de/solutions/gitops/",{"text":871,"config":1325},{"href":874,"dataGaName":875,"dataGaLocation":1183},{"text":877,"config":1327},{"href":880,"dataGaName":881,"dataGaLocation":1183},{"text":883,"config":1329},{"href":886,"dataGaName":887,"dataGaLocation":1183},{"text":1331,"config":1332},"Bildungswesen",{"href":1333,"dataGaName":1334,"dataGaLocation":1183},"/de-de/solutions/education/","education",{"text":1336,"config":1337},"Finanzdienstleistungen",{"href":1338,"dataGaName":1339,"dataGaLocation":1183},"/de-de/solutions/finance/","financial services",{"title":894,"links":1341},[1342,1344,1346,1348,1351,1353,1356,1358,1360,1362,1364,1366,1368,1370],{"text":907,"config":1343},{"href":909,"dataGaName":910,"dataGaLocation":1183},{"text":912,"config":1345},{"href":914,"dataGaName":915,"dataGaLocation":1183},{"text":917,"config":1347},{"href":919,"dataGaName":920,"dataGaLocation":1183},{"text":922,"config":1349},{"href":924,"dataGaName":1350,"dataGaLocation":1183},"docs",{"text":945,"config":1352},{"href":947,"dataGaName":948,"dataGaLocation":1183},{"text":1354,"config":1355},"Neuerungen",{"href":1005,"dataGaName":1006,"dataGaLocation":1183},{"text":940,"config":1357},{"href":942,"dataGaName":943,"dataGaLocation":1183},{"text":959,"config":1359},{"href":961,"dataGaName":962,"dataGaLocation":1183},{"text":967,"config":1361},{"href":969,"dataGaName":970,"dataGaLocation":1183},{"text":972,"config":1363},{"href":974,"dataGaName":975,"dataGaLocation":1183},{"text":977,"config":1365},{"href":979,"dataGaName":980,"dataGaLocation":1183},{"text":982,"config":1367},{"href":984,"dataGaName":985,"dataGaLocation":1183},{"text":987,"config":1369},{"href":989,"dataGaName":990,"dataGaLocation":1183},{"text":992,"config":1371},{"href":994,"dataGaName":995,"dataGaLocation":1183},{"title":1008,"links":1373},[1374,1376,1378,1380,1382,1384,1389,1394,1396,1398,1400],{"text":1016,"config":1375},{"href":1018,"dataGaName":1010,"dataGaLocation":1183},{"text":1021,"config":1377},{"href":1023,"dataGaName":1024,"dataGaLocation":1183},{"text":1029,"config":1379},{"href":1031,"dataGaName":1032,"dataGaLocation":1183},{"text":1034,"config":1381},{"href":1036,"dataGaName":1037,"dataGaLocation":1183},{"text":1039,"config":1383},{"href":1041,"dataGaName":1042,"dataGaLocation":1183},{"text":1385,"config":1386},"Nachhaltigkeit",{"href":1387,"dataGaName":1388,"dataGaLocation":1183},"/sustainability/","Sustainability",{"text":1390,"config":1391},"Vielfalt, Inklusion und Zugehörigkeit",{"href":1392,"dataGaName":1393,"dataGaLocation":1183},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1044,"config":1395},{"href":1046,"dataGaName":1047,"dataGaLocation":1183},{"text":1054,"config":1397},{"href":1056,"dataGaName":1057,"dataGaLocation":1183},{"text":1059,"config":1399},{"href":1061,"dataGaName":1062,"dataGaLocation":1183},{"text":1401,"config":1402},"Transparenzerklärung zu moderner Sklaverei",{"href":1403,"dataGaName":1404,"dataGaLocation":1183},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1406},[1407,1410,1413],{"text":1408,"config":1409},"Terms",{"href":1233,"dataGaName":1234,"dataGaLocation":1183},{"text":1411,"config":1412},"Cookies",{"dataGaName":1243,"dataGaLocation":1183,"id":1244,"isOneTrustButton":234},{"text":1414,"config":1415},"Datenschutz",{"href":1238,"dataGaName":1239,"dataGaLocation":1183},[1417],{"id":1418,"title":7,"body":719,"config":1419,"content":1421,"description":719,"extension":1425,"meta":1426,"navigation":234,"path":1427,"seo":1428,"stem":1429,"__hash__":1430},"blogAuthors/en-us/blog/authors/fernando-diaz.yml",{"template":1420},"BlogAuthor",{"name":7,"config":1422},{"headshot":1423,"ctfId":1424},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659556/Blog/Author%20Headshots/fern_diaz.png","fjdiaz","yml",{},"/en-us/blog/authors/fernando-diaz",{},"en-us/blog/authors/fernando-diaz","lxRJIOydP4_yzYZvsPcuQevP9AYAKREF7i8QmmdnOWc",[1432,1440,1448],{"title":1433,"description":1434,"heroImage":1435,"category":715,"date":1436,"authors":1437,"slug":1439,"externalUrl":719},"Wie GitLab Schwachstellen über Refactorings hinweg verfolgt","Das verbesserte Scope+Offset-Fingerprinting hält das Tracking stabil, wenn Kommentare, Leerzeilen oder Reformatierungen dazukommen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[1438],"Julian Thome","improved-scope-offset-fingerprinting",{"title":1441,"description":1442,"heroImage":1435,"category":715,"date":1443,"authors":1444,"slug":1447,"externalUrl":719},"GitLab Secrets Manager unterstützt ESO, Terraform und API","GitLab Secrets Manager liefert Secrets sicher an Kubernetes, Terraform und externe Workflows, aus einer einzigen Quelle für die gesamte Toolchain.","2026-08-06",[1445,1446],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":1449,"description":1450,"heroImage":721,"category":715,"date":1451,"authors":1452,"slug":1454,"externalUrl":719},"Mit Claude und GitLab jeden Commit bis zur Produktion absichern","Claude Security findet Schwachstellen in der Coding-Session. GitLab übernimmt danach: Scans, Policy-Durchsetzung und Audit-Nachweise im Lebenszyklus.","2026-08-03",[1453],"Alisa Ho","claude-security-and-gitlab",{"promotions":1456},[1457,1471,1482,1493],{"id":1458,"categories":1459,"header":1461,"text":1462,"button":1463,"image":1468},"ai-modernization",[1460],"ai","Hält KI, was uns versprochen wurde?","Das Quiz dauert maximal 5 Minuten.",{"text":1464,"config":1465},"Ermittle deinen KI-Reifegrad",{"href":1466,"dataGaName":1467,"dataGaLocation":948},"/de-de/assessments/ai-modernization-assessment/","modernization assessment",{"config":1469},{"src":1470},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":1472,"categories":1473,"header":1474,"text":1462,"button":1475,"image":1479},"devops-modernization",[731,1282],"Verwaltest du Tool-Chaos oder stellst du Innovationen bereit?",{"text":1476,"config":1477},"Ermittle deinen DevOps-Reifegrad",{"href":1478,"dataGaName":1467,"dataGaLocation":948},"/de-de/assessments/devops-modernization-assessment/",{"config":1480},{"src":1481},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":1483,"categories":1484,"header":1485,"text":1462,"button":1486,"image":1490},"security-modernization",[715],"Tauschst du Schnelligkeit gegen Sicherheit ein?",{"text":1487,"config":1488},"Ermittle deinen Sicherheitsreifegrad",{"href":1489,"dataGaName":1467,"dataGaLocation":948},"/de-de/assessments/security-modernization-assessment/",{"config":1491},{"src":1492},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":1494,"paths":1495,"header":1498,"text":1499,"button":1500,"image":1505},"github-azure-migration",[1496,1497],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Ist dein Team bereit für den Umzug von GitHub nach Azure?","GitHub stellt bereits auf Azure um. Finde heraus, was das für dich bedeutet.",{"text":1501,"config":1502},"Erfahre, wie GitLab im Vergleich zu GitHub abschneidet",{"href":1503,"dataGaName":1504,"dataGaLocation":948},"/de-de/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":1506},{"src":1481},{"header":1508,"blurb":1509,"button":1510,"secondaryButton":1515},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1511,"config":1512},"Kostenlosen Test starten",{"href":1513,"dataGaName":745,"dataGaLocation":1514},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":1071,"config":1516},{"href":1073,"dataGaName":750,"dataGaLocation":1514},1786803724646]