GitLab 13.0 Improves Security
Friday, 12 June 2020

The latest update to GitLab has been released with improvements to security and new options for collaboration. GitLab is a web-based repository manager for Git that supports concurrent devops and issue-tracking, with tools for software development, deployment, and project management.

The headline improvements to the new release start with security. The team has added the ability to scan REST APIs via DAST. Dynamic Application Security Testing (DAST) is a security testing method whereby an application is tested from the outside. GitLab's new support means the whole application can be scanned, not just the UI.


The GitLab team says:

"by supporting use of an OpenAPI specification as a guide for what URLs and REST endpoints need to be scanned, DAST helps secure an application’s entire attack surface and provides more insight into the potential vulnerabilities of any running application."

The next improvement to security is the ability to carry out a full commit history scan for secrets. Secret Detection was introduced in GitLab 11.9, and scans the commit history of changes in a merge request. Until now, it didn't scan the older git history, but now does, meaning you can identify historical secrets that might be hiding in your older git commit history. The new release also handles vulnerability objects differently, so you can export vulnerabilities from the security dashboard.

The improvements for collaborative development start with the addition of version control for snippets. To manage more complex projects, 13.0 allows you to view the epic hierarchy on your roadmap, view how your epics line up with your various milestones, and add a single or multiple milestones to your releases. You also get alerts if you close an issue with open blockers to "help you focus on critical path items".

Other improvements improve GitLab's Gitaly cluster for high availability Git storage to ensure there are always multiple warm replicas ready to take over if an outage occurs. There's also now a simple way to deploy to Amazon Web Services Elastic Container Service (ECS) using Auto DevOps.


More Information

GitLab Homepage

Related Articles

GitLab Goes Serverless

GitLab Adds Security Dashboards

GitLab Adds Auto DevOps

Microsoft Buys GitHub - Get Ready For a Bigger Devil

InkScape Moves To GitLab

GitHub Marketplace Now Accepts Free Apps and Offers Free Trials

GitHub Victim Of Its Own Success

Microsoft CodePlex Is Shutting Down 

Microsoft Mass Migration To GitHub 

GitHub Octoverse Reveals The State Of Open Source 

To be informed about new articles on I Programmer, sign up for our weekly newsletter, subscribe to the RSS feed and follow us on Twitter, Facebook or Linkedin.


Hydra Turns PostgreSQL Into A Column Store

Hydra is an open-source extension that adds columnar tables to Postgres for efficient analytical reporting. Version 1.0 is generally available.

Chatbots Hallucinate - Word Of The Year

The propensity of AI-powered chatbots to provide misinformation is referred to as "hallucinating" and is something that has come to popular attention - to such an extent that the verb "hallucinate" ha [ ... ]

More News




or email your comment to: