GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

GitLab addressed arbitrary pipeline execution vulnerabilities multiple times this year, including CVE-2024-6678 last month, CVE-2024-6385 in July, and CVE-2024-5655 in June, all rated critical.

Before the two GitLab concepts, Job Templates and GitLab Components are used, a "naive" test and build pipeline will first illustrate the procedure. The Maven CLI tool with the command mvn test is ...

GitLab has upgraded its Community and Enterprise editions to fix a critical vulnerability which allowed malicious actors to run pipeline jobs as any other platform user. In its patch release notes ...

Today GitLab, the single application for the entire DevOps lifecycle, announced that it has enhanced its 13.0 product release with a hardened container image in continued support of the U.S ...

News. GrammaTech Partners with GitLab to Add Shift-Left Capabilities to the CI/CD Pipeline. By John K. Waters; March 11, 2021; App security testing tools provider GrammaTech today announced a ...

Dotscience’s integration with GitLab, one of the most popular DevOps platforms, enables data science and ML teams to customize and hand off the model build stage to a GitLab pipeline, enabling ...