One vulnerability view: From scanner coverage to AI governance
As AI writes more code, security must keep pace. GitLab is one platform for all scanner coverage, detection, and remediation, with AI governance over agents.
Read PostBrowse articles that include the security tag
Featured post
Recent posts
Security Labs
Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
GitLab’s Vulnerability Research team has uncovered a new Python supply chain attack targeting PyPI, deploying the Shai-Hulud worm to steal credentials from CI/CD systems.
Security
Reduce supply chain risk with SBOM-based dependency scanning
Detect transitive dependencies, trace how they entered your project, and prioritize them by real-world exposure.
Security
Full security scanner coverage of your codebase in minutes
Security configuration profiles lead to faster scanner rollouts. Learn how this new capability in GitLab 19.0 covers thousands of projects in minutes, no gaps.
Security
Manage CI/CD credentials with GitLab Secrets Manager
Each secret is scoped to its environment or branch and governed by the same controls you use for code. Join the public beta in GitLab 19.0.
Security
Harden your pipeline perimeter for the era of AI-assisted coding
The pipeline is now where humans, agents, and third-party code converge. Companies need a control plane that sees, enforces, and fixes every change.
Security
5 ways to fix misleading vulnerability severities with policy
Default CVSS scores don't reflect your actual risk. Use GitLab severity override policies to automate adjustments based on CVE, CWE, file path, and directory.
Security
Limit credential exposure with fine-grained personal access tokens
Explore tokens that carry only the permissions they need, and nothing more. Then join the beta program.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert