[{"data":1,"prerenderedAt":1004},["ShallowReactive",2],{"/de-de/blog/gitlab-duo-security-review-flow":3,"navigation-de-de":229,"banner-de-de":656,"footer-de-de":664,"blog-post-authors-de-de-Mark Settle":905,"blog-related-posts-de-de-gitlab-duo-security-review-flow":920,"blog-promotions-de-de":942,"next-steps-de-de":994},{"id":4,"title":5,"authors":6,"body":8,"category":207,"date":208,"description":209,"extension":210,"externalUrl":211,"featured":212,"heroImage":213,"meta":214,"navigation":215,"path":216,"seo":217,"slug":221,"stem":222,"tags":223,"template":227,"updatedDate":211,"__hash__":228},"blogPosts/de-de/blog/gitlab-duo-security-review-flow.md","GitLab Duo Security Review erkennt Logikfehler, die Scanner übersehen",[7],"Mark Settle",{"type":9,"value":10,"toc":199},"minimark",[11,15,18,23,26,40,46,52,55,59,62,65,70,79,83,87,95,98,101,135,147,150,154,157,166,187,190],[12,13,14],"p",{},"Statische Scanner sind stark darin, Schwachstellen zu erkennen, die einem bekannten Muster folgen, etwa ungeprüfte Query-Inputs, hartcodierte Secrets oder unsichere Deserialisierung. Schwierig wird es bei Fehlern in der Anwendungslogik, wo kein Muster zum Abgleich existiert – nur validen Code, der für die jeweilige Domäne das Falsche tut. Bleiben solche Fehler unentdeckt, treten sie erst spät zutage und werden teurer in der Behebung.",[12,16,17],{},"Security Review Flow, jetzt in der Public Beta, prüft Code-Änderungen so, wie es ein Security Engineer tun würde. Anstatt Signaturen abzugleichen, verfolgt der Flow die Absicht hinter dem Code, um Logikfehler vor der Produktion zu erkennen. Das ist ein wichtiger Schritt, um gefährliche Fehler aufzudecken, die Scanner meist übersehen.",[19,20,22],"h2",{"id":21},"wo-musterbasierte-scanner-blind-bleiben","Wo musterbasierte Scanner blind bleiben",[12,24,25],{},"Die schädlichsten Schwachstellen wirken Zeile für Zeile oft korrekt, verletzen aber einen Kontext, der im Code selbst nicht enthalten ist – etwa das Autorisierungsmodell, Regeln zur Sensibilität von Daten oder die vorgesehenen Workflows. Drei der häufigsten Schwachstellenklassen im Überblick:",[12,27,28,32,33,39],{},[29,30,31],"strong",{},"Zugriff und Autorisierung:"," Ob Nutzende eine Ressource lesen oder ändern dürfen, legt das Autorisierungsmodell fest, nicht ein Sprachkonstrukt. Broken Object Level Authorization (der Zugriff auf die Daten anderer Nutzender durch das Ändern einer ID) führt die ",[34,35,38],"a",{"href":36,"rel":37},"https://owasp.org/API-Security/editions/2023/en/0x11-t10/",[],"OWASP API Security Top 10"," seit 2019 an.",[12,41,42,45],{},[29,43,44],{},"Data Exposure:"," Ein Objekt zu serialisieren und zurückzugeben, ist gewöhnlicher, korrekt wirkender Code. Ob dabei Daten offengelegt werden, hängt davon ab, welche Felder sensibel sind und wer sie erhält – Fakten der jeweiligen Domäne, nicht der Syntax.",[12,47,48,51],{},[29,49,50],{},"Kontrollfluss und Workflow:"," Business-Logic- und Race-Condition-Fehler entstehen, wenn valide Operationen in falscher Reihenfolge ablaufen, unerwartet wiederholt werden oder manipuliert werden. Beispiele sind ein Checkout, der ohne Zahlung erreichbar ist, ein Status, der durch eine Race Condition erneut betreten wird, oder ein Parameter, der zur Preisänderung manipuliert wird.",[12,53,54],{},"Solche Fehler zu erkennen, erforderte bisher entweder manuelles Security Review, das sich über jede Merge Request (MR) hinweg nur teuer skalieren lässt, oder Penetration Testing und Bug Bounties, die zu spät greifen. Die Folge ist eine wachsende Lücke zwischen dem Tempo der Entwicklung und dem Umfang, in dem Security-Expertise angewendet werden kann.",[19,56,58],{"id":57},"security-expertise-in-jede-mr-einbringen","Security-Expertise in jede MR einbringen",[12,60,61],{},"Security Review Flow, ein Foundational Flow auf der GitLab Duo Agent Platform, schließt diese Lücke, indem er nachvollzieht, was der Code eigentlich leisten soll. Er erkennt genau die oben beschriebenen Fehlerklassen: Broken Object Level Authorization und Broken Function Level Authorization, fehlende Autorisierung bei zustandsändernden Operationen, Information Disclosure, Mass Assignment, Business-Logic-Fehler und Race Conditions in zustandsbehafteten Workflows.",[12,63,64],{},"Er ergänzt klassische Scanner und menschliche Analyse, statt sie zu ersetzen, und prüft Code genau zum Zeitpunkt der Änderung, wenn eine Korrektur am günstigsten ist. GitLabs eigenes Application-Security-Team hat Security Review Flow während der gesamten Entwicklung über interne MRs hinweg eingesetzt.",[12,66,67],{},[29,68,69],{},"Security Review Flow in Aktion:",[71,72],"iframe",{"src":73,"frameBorder":74,"allow":75,"referrerPolicy":76,"style":77,"title":78},"https://player.vimeo.com/video/1209923383?badge=0&autopause=0&player_id=0&app_id=58479","0","autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share","strict-origin-when-cross-origin","position:absolute;top:0;left:0;width:100%;height:100%;","19.2 Security Review Flow",[80,81],"script",{"src":82},"https://player.vimeo.com/api/player.js",[19,84,86],{"id":85},"so-funktioniert-es","So funktioniert es",[12,88,89,90,94],{},"Ist eine MR bereit, lässt sich ein Review von ",[91,92,93],"code",{},"Duo Security Review"," anfordern – genau wie von einer Person. Der Flow analysiert den Diff im Kontext: die Originaldateien, geänderte Zeilen, die MR-Diskussion und verwandten Code. Seine Reasoning-Logik ist auf Präzision optimiert, und ein unabhängiger Validierungsschritt prüft jeden Finding, um wahrscheinliche False Positives herauszufiltern.",[12,96,97],{},"Findings erscheinen als Diff-Threads an den relevanten Zeilen, ergänzt durch eine Zusammenfassung in einer internen Notiz. Bei öffentlichen Projekten bleiben sie auf die interne Notiz beschränkt, sodass keine Security-Details offengelegt werden.",[12,99,100],{},"Jedes Finding liefert den Kontext, der für das Review nötig ist:",[102,103,104,111,117,123,129],"ul",{},[105,106,107,110],"li",{},[29,108,109],{},"Vulnerability Type"," mit CWE-Referenz",[105,112,113,116],{},[29,114,115],{},"Severity",": Critical, High, Medium oder Low",[105,118,119,122],{},[29,120,121],{},"Tier",": Tier 1 (Exploitable), Tier 2 (Logic Flaw) oder Tier 3 (Design Issue)",[105,124,125,128],{},[29,126,127],{},"Eine verständliche Erklärung"," des Problems",[105,130,131,134],{},[29,132,133],{},"Ein Fix-Vorschlag",", sofern verfügbar",[12,136,137,138,142,143,146],{},"Die Severity bestimmt den Review-Status: Ein Critical- oder High-Finding setzt ihn auf ",[139,140,141],"em",{},"Request changes",", während Medium- oder Low-Findings zu ",[139,144,145],{},"Comment"," führen. Der Flow genehmigt nie – auch dann nicht, wenn er nichts findet –, die finale Entscheidung liegt immer bei einem Menschen.",[12,148,149],{},"Von dort aus lässt sich der Duo-Security-Review-Service-Account der jeweiligen Organisation in einem Kommentar-Thread erwähnen, um eine Frage zu stellen, die Behebung zu diskutieren oder ein Finding infrage zu stellen. Jedes Finding lässt sich auflösen, indem der Fix als Standard-MR-Suggestion übernommen, als False Positive verworfen oder das Risiko akzeptiert wird. Nach dem Commit der Fixes lässt sich ein neues Review anfordern, um die Änderungen zu prüfen.",[19,151,153],{"id":152},"den-ersten-security-review-flow-ausführen","Den ersten Security Review Flow ausführen",[12,155,156],{},"Security Review Flow befindet sich für die GitLab-Ultimate-Kundschaft in der Public Beta. Verfügbar ist der Flow auf GitLab.com, GitLab Self-Managed und GitLab Dedicated.",[12,158,159,160,165],{},"Der Einstieg gelingt über die ",[34,161,164],{"href":162,"rel":163},"https://docs.gitlab.com/ee/user/duo_agent_platform/flows/foundational_flows/security_review/",[],"Security-Review-Flow-Dokumentation",".",[12,167,168,169,174,175,180,181,186],{},"Der Zugang zu Security Review Flow lässt sich über eine ",[34,170,173],{"href":171,"rel":172},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/gitlab-duo-agent-platform/",[],"kostenlose Testversion der GitLab Duo Agent Platform"," erhalten. Bereits im GitLab-Ultimate-Abo? Die ",[34,176,179],{"href":177,"rel":178},"https://docs.gitlab.com/user/duo_agent_platform/turn_on_off/",[],"Duo Agent Platform aktivieren"," und die im Abonnement enthaltenen ",[34,182,185],{"href":183,"rel":184},"https://docs.gitlab.com/subscriptions/gitlab_credits/#included-credits",[],"GitLab Credits"," nutzen.",[12,188,189],{},"Die Kosten variieren je nach Komplexität des Diffs und dem gewählten Modell – ein Test an wenigen MRs empfiehlt sich, bevor der Flow breiter eingesetzt wird. Die Preisgestaltung kann zur allgemeinen Verfügbarkeit angepasst werden.",[12,191,192,193,198],{},"Feedback lässt sich im ",[34,194,197],{"href":195,"rel":196},"https://gitlab.com/gitlab-org/gitlab/-/work_items/600304",[],"Feature-Feedback-Issue"," teilen – so fließt es direkt in die Weiterentwicklung ein.",{"title":200,"searchDepth":201,"depth":201,"links":202},"",2,[203,204,205,206],{"id":21,"depth":201,"text":22},{"id":57,"depth":201,"text":58},{"id":85,"depth":201,"text":86},{"id":152,"depth":201,"text":153},"security","2026-07-16","KI-gestützte Security-Reasoning erkennt Autorisierungslücken, Business-Logic-Fehler und Race Conditions, während Code noch im Review ist.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1783980535/t3gez0gpayfndrhncunf.png",{},true,"/de-de/blog/gitlab-duo-security-review-flow",{"config":218,"title":219,"description":220},{"noIndex":212},"GitLab Duo Security Review: Logikfehler erkennen","GitLab Duo Security Review erkennt Autorisierungslücken, Logikfehler und Race Conditions, die klassische Scanner übersehen.","gitlab-duo-security-review-flow","de-de/blog/gitlab-duo-security-review-flow",[207,224,225,226],"AI","features","product","BlogPost","o1c3cVdS3zwU7jne9Kano-WqRARY3h3xMUjzVbNgSfc",{"logo":230,"freeTrial":235,"sales":240,"login":245,"items":250,"search":574,"minimal":608,"duo":626,"switchNav":635,"pricingDeployment":646},{"config":231},{"href":232,"dataGaName":233,"dataGaLocation":234},"/de-de/","gitlab logo","header",{"text":236,"config":237},"Kostenlose Testversion anfordern",{"href":238,"dataGaName":239,"dataGaLocation":234},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":241,"config":242},"Demo anfordern",{"href":243,"dataGaName":244,"dataGaLocation":234},"/de-de/sales/?contact-topic=request-demo","sales",{"text":246,"config":247},"Anmelden",{"href":248,"dataGaName":249,"dataGaLocation":234},"https://gitlab.com/users/sign_in/","sign in",[251,280,382,387,496,552],{"text":252,"config":253,"menu":255},"Plattform",{"dataNavLevelOne":254},"platform",{"type":256,"columns":257},"cards",[258,264,272],{"title":252,"description":259,"link":260},"Die intelligente Orchestrierungsplattform für DevSecOps",{"text":261,"config":262},"Die Plattform erkunden",{"href":263,"dataGaName":254,"dataGaLocation":234},"/de-de/platform/",{"title":265,"description":266,"link":267},"GitLab Duo Agent Platform","Agentische KI für den gesamten Software-Lebenszyklus",{"text":268,"config":269},"Lerne GitLab Duo kennen",{"href":270,"dataGaName":271,"dataGaLocation":234},"/de-de/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":273,"description":274,"link":275},"Warum GitLab?","Erfahre, warum sich Unternehmen für GitLab entscheiden",{"text":276,"config":277},"Mehr erfahren",{"href":278,"dataGaName":279,"dataGaLocation":234},"/de-de/why-gitlab/","why gitlab",{"text":281,"left":215,"config":282,"menu":284},"Produkt",{"dataNavLevelOne":283},"solutions",{"type":285,"link":286,"columns":290,"feature":361},"lists",{"text":287,"config":288},"Alle Lösungen anzeigen",{"href":289,"dataGaName":283,"dataGaLocation":234},"/de-de/solutions/",[291,316,339],{"title":292,"description":293,"link":294,"items":299},"Automatisierung","CI/CD und Automatisierung zur Beschleunigung der Bereitstellung",{"config":295},{"icon":296,"href":297,"dataGaName":298,"dataGaLocation":234},"AutomatedCodeAlt","/de-de/solutions/delivery-automation/","automated software delivery",[300,304,307,312],{"text":301,"config":302},"CI/CD",{"href":303,"dataGaLocation":234,"dataGaName":301},"/de-de/solutions/continuous-integration/",{"text":265,"config":305},{"href":270,"dataGaLocation":234,"dataGaName":306},"gitlab duo agent platform - product menu",{"text":308,"config":309},"Quellcodeverwaltung",{"href":310,"dataGaLocation":234,"dataGaName":311},"/de-de/solutions/source-code-management/","Source Code Management",{"text":313,"config":314},"Automatische Softwarebereitstellung",{"href":297,"dataGaLocation":234,"dataGaName":315},"Automated software delivery",{"title":317,"description":318,"link":319,"items":324},"Sicherheit","Entwickle Code schneller ohne Abstriche bei der Sicherheit",{"config":320},{"href":321,"dataGaName":322,"dataGaLocation":234,"icon":323},"/de-de/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[325,329,334],{"text":326,"config":327},"Anwendungssicherheitstests",{"href":321,"dataGaName":328,"dataGaLocation":234},"Application security testing",{"text":330,"config":331},"Schutz der Software-Lieferkette",{"href":332,"dataGaLocation":234,"dataGaName":333},"/de-de/solutions/supply-chain/","Software supply chain security",{"text":335,"config":336},"Software-Compliance",{"href":337,"dataGaName":338,"dataGaLocation":234},"/de-de/solutions/software-compliance/","software compliance",{"title":340,"link":341,"items":346},"Messung",{"config":342},{"icon":343,"href":344,"dataGaName":345,"dataGaLocation":234},"DigitalTransformation","/de-de/solutions/visibility-measurement/","visibility and measurement",[347,351,356],{"text":348,"config":349},"Sichtbarkeit und Messung",{"href":344,"dataGaLocation":234,"dataGaName":350},"Visibility and Measurement",{"text":352,"config":353},"Wertstrommanagement",{"href":354,"dataGaLocation":234,"dataGaName":355},"/de-de/solutions/value-stream-management/","Value Stream Management",{"text":357,"config":358},"Analysen und Einblicke",{"href":359,"dataGaLocation":234,"dataGaName":360},"/de-de/solutions/analytics-and-insights/","Analytics and insights",{"title":362,"type":285,"items":363},"GitLab für",[364,370,376],{"text":365,"config":366},"Enterprise",{"icon":367,"href":368,"dataGaLocation":234,"dataGaName":369},"Building","/de-de/enterprise/","enterprise",{"text":371,"config":372},"Kleinunternehmen",{"icon":373,"href":374,"dataGaLocation":234,"dataGaName":375},"Work","/de-de/small-business/","small business",{"text":377,"config":378},"Öffentlicher Sektor",{"icon":379,"href":380,"dataGaLocation":234,"dataGaName":381},"Organization","/de-de/solutions/public-sector/","public sector",{"text":383,"config":384},"Preise",{"href":385,"dataGaName":386,"dataGaLocation":234,"dataNavLevelOne":386},"/de-de/pricing/","pricing",{"text":388,"config":389,"menu":391},"Ressourcen",{"dataNavLevelOne":390},"resources",{"type":285,"link":392,"columns":396,"feature":485},{"text":393,"config":394},"Alle Ressourcen anzeigen",{"href":395,"dataGaName":390,"dataGaLocation":234},"/de-de/resources/",[397,430,452],{"title":398,"items":399},"Erste Schritte",[400,405,410,415,420,425],{"text":401,"config":402},"Installieren",{"href":403,"dataGaName":404,"dataGaLocation":234},"/de-de/install/","install",{"text":406,"config":407},"Kurzanleitungen",{"href":408,"dataGaName":409,"dataGaLocation":234},"/de-de/get-started/","quick setup checklists",{"text":411,"config":412},"Lernen",{"href":413,"dataGaLocation":234,"dataGaName":414},"https://university.gitlab.com/","learn",{"text":416,"config":417},"Produktdokumentation",{"href":418,"dataGaName":419,"dataGaLocation":234},"https://docs.gitlab.com/","product documentation",{"text":421,"config":422},"Best-Practice-Videos",{"href":423,"dataGaName":424,"dataGaLocation":234},"/de-de/getting-started-videos/","best practice videos",{"text":426,"config":427},"Integrationen",{"href":428,"dataGaName":429,"dataGaLocation":234},"/de-de/integrations/","integrations",{"title":431,"items":432},"Entdecken",[433,438,443,447],{"text":434,"config":435},"Kundenerfolge",{"href":436,"dataGaName":437,"dataGaLocation":234},"/de-de/customers/","customer success stories",{"text":439,"config":440},"Blog",{"href":441,"dataGaName":442,"dataGaLocation":234},"/de-de/blog/","blog",{"text":444,"config":445},"The Source",{"href":446,"dataGaName":442,"dataGaLocation":234},"/de-de/the-source/",{"text":448,"config":449},"Remote",{"href":450,"dataGaName":451,"dataGaLocation":234},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":453,"items":454},"Vernetzen",[455,460,465,470,475,480],{"text":456,"config":457},"GitLab-Services",{"href":458,"dataGaName":459,"dataGaLocation":234},"/de-de/services/","services",{"text":461,"config":462},"Beitragen",{"href":463,"dataGaName":464,"dataGaLocation":234},"https://contributors.gitlab.com","contribute",{"text":466,"config":467},"Community",{"href":468,"dataGaName":469,"dataGaLocation":234},"/community/","community",{"text":471,"config":472},"Forum",{"href":473,"dataGaName":474,"dataGaLocation":234},"https://forum.gitlab.com/","forum",{"text":476,"config":477},"Veranstaltungen",{"href":478,"dataGaName":479,"dataGaLocation":234},"/events/","events",{"text":481,"config":482},"Partner",{"href":483,"dataGaName":484,"dataGaLocation":234},"/de-de/partners/","partners",{"config":486,"title":489,"text":490,"link":491},{"background":487,"textColor":488},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":492,"config":493},"Aktuelle Nachrichten",{"href":494,"dataGaName":495,"dataGaLocation":234},"/de-de/whats-new/","whats new",{"text":497,"config":498,"menu":500},"Unternehmen",{"dataNavLevelOne":499},"company",{"type":285,"columns":501},[502],{"items":503},[504,509,515,517,522,527,532,537,542,547],{"text":505,"config":506},"Über",{"href":507,"dataGaName":508,"dataGaLocation":234},"/de-de/company/","about",{"text":510,"config":511,"footerGa":514},"Karriere",{"href":512,"dataGaName":513,"dataGaLocation":234},"/jobs/","jobs",{"dataGaName":513},{"text":476,"config":516},{"href":478,"dataGaName":479,"dataGaLocation":234},{"text":518,"config":519},"Geschäftsführung",{"href":520,"dataGaName":521,"dataGaLocation":234},"/company/team/e-group/","leadership",{"text":523,"config":524},"Handbuch",{"href":525,"dataGaName":526,"dataGaLocation":234},"https://handbook.gitlab.com/","handbook",{"text":528,"config":529},"Investor Relations",{"href":530,"dataGaName":531,"dataGaLocation":234},"https://ir.gitlab.com/","investor relations",{"text":533,"config":534},"Trust Center",{"href":535,"dataGaName":536,"dataGaLocation":234},"/de-de/security/","trust center",{"text":538,"config":539},"AI Transparency Center",{"href":540,"dataGaName":541,"dataGaLocation":234},"/de-de/ai-transparency-center/","ai transparency center",{"text":543,"config":544},"Newsletter",{"href":545,"dataGaName":546,"dataGaLocation":234},"/company/contact/#contact-forms","newsletter",{"text":548,"config":549},"Presse",{"href":550,"dataGaName":551,"dataGaLocation":234},"/press/","press",{"text":553,"config":554,"menu":555},"Kontakt",{"dataNavLevelOne":499},{"type":285,"columns":556},[557],{"items":558},[559,564,569],{"text":560,"config":561},"Vertrieb kontaktieren",{"href":562,"dataGaName":563,"dataGaLocation":234},"/de-de/sales/","talk to sales",{"text":565,"config":566},"Support-Portal",{"href":567,"dataGaName":568,"dataGaLocation":234},"https://support.gitlab.com","support portal",{"text":570,"config":571},"Kundenportal",{"href":572,"dataGaName":573,"dataGaLocation":234},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":575,"login":576,"suggestions":583},"Schließen",{"text":577,"link":578},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":579,"config":580},"gitlab.com",{"href":248,"dataGaName":581,"dataGaLocation":582},"search login","search",{"text":584,"default":585},"Vorschläge",[586,588,593,595,600,605],{"text":265,"config":587},{"href":270,"dataGaName":265,"dataGaLocation":582},{"text":589,"config":590},"Codevorschläge (KI)",{"href":591,"dataGaName":592,"dataGaLocation":582},"/de-de/solutions/code-suggestions/","Code Suggestions (AI)",{"text":301,"config":594},{"href":303,"dataGaName":301,"dataGaLocation":582},{"text":596,"config":597},"GitLab auf AWS",{"href":598,"dataGaName":599,"dataGaLocation":582},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":601,"config":602},"GitLab auf Google Cloud",{"href":603,"dataGaName":604,"dataGaLocation":582},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":273,"config":606},{"href":278,"dataGaName":607,"dataGaLocation":582},"Why GitLab?",{"freeTrial":609,"mobileIcon":614,"desktopIcon":619,"secondaryButton":622},{"text":610,"config":611},"Kostenlos testen",{"href":612,"dataGaName":239,"dataGaLocation":613},"https://gitlab.com/-/trials/new/","nav",{"altText":615,"config":616},"GitLab-Symbol",{"src":617,"dataGaName":618,"dataGaLocation":613},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":615,"config":620},{"src":621,"dataGaName":618,"dataGaLocation":613},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":398,"config":623},{"href":624,"dataGaName":625,"dataGaLocation":613},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":627,"mobileIcon":631,"desktopIcon":633},{"text":628,"config":629},"Mehr über GitLab Duo erfahren",{"href":270,"dataGaName":630,"dataGaLocation":613},"gitlab duo",{"altText":615,"config":632},{"src":617,"dataGaName":618,"dataGaLocation":613},{"altText":615,"config":634},{"src":621,"dataGaName":618,"dataGaLocation":613},{"button":636,"mobileIcon":641,"desktopIcon":643},{"text":637,"config":638},"/Option",{"href":639,"dataGaName":640,"dataGaLocation":613},"#contact","switch",{"altText":615,"config":642},{"src":617,"dataGaName":618,"dataGaLocation":613},{"altText":615,"config":644},{"src":645,"dataGaName":618,"dataGaLocation":613},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":647,"mobileIcon":652,"desktopIcon":654},{"text":648,"config":649},"Zurück zur Preisübersicht",{"href":385,"dataGaName":650,"dataGaLocation":613,"icon":651},"back to pricing","GoBack",{"altText":615,"config":653},{"src":617,"dataGaName":618,"dataGaLocation":613},{"altText":615,"config":655},{"src":621,"dataGaName":618,"dataGaLocation":613},{"title":657,"button":658,"config":662},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":276,"config":659},{"href":660,"dataGaName":661,"dataGaLocation":234},"/de-de/gitlab-orbit/","orbit",{"layout":663,"disabled":212},"release",{"data":665},{"text":666,"source":667,"edit":673,"contribute":678,"config":683,"items":688,"minimal":894},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":668,"config":669},"Quelltext der Seite anzeigen",{"href":670,"dataGaName":671,"dataGaLocation":672},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":674,"config":675},"Diese Seite bearbeiten",{"href":676,"dataGaName":677,"dataGaLocation":672},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":679,"config":680},"Beteilige dich",{"href":681,"dataGaName":682,"dataGaLocation":672},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":684,"facebook":685,"youtube":686,"linkedin":687},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[689,734,787,829,861],{"title":383,"links":690,"subMenu":705},[691,695,700],{"text":692,"config":693},"Tarife anzeigen",{"href":385,"dataGaName":694,"dataGaLocation":672},"view plans",{"text":696,"config":697},"Vorteile von Premium",{"href":698,"dataGaName":699,"dataGaLocation":672},"/de-de/pricing/premium/","why premium",{"text":701,"config":702},"Vorteile von Ultimate",{"href":703,"dataGaName":704,"dataGaLocation":672},"/de-de/pricing/ultimate/","why ultimate",[706],{"title":553,"links":707},[708,710,712,714,719,724,729],{"text":560,"config":709},{"href":562,"dataGaName":244,"dataGaLocation":672},{"text":565,"config":711},{"href":567,"dataGaName":568,"dataGaLocation":672},{"text":570,"config":713},{"href":572,"dataGaName":573,"dataGaLocation":672},{"text":715,"config":716},"Status",{"href":717,"dataGaName":718,"dataGaLocation":672},"https://status.gitlab.com/","status",{"text":720,"config":721},"Nutzungsbedingungen",{"href":722,"dataGaName":723,"dataGaLocation":672},"/terms/","terms of use",{"text":725,"config":726},"Datenschutzerklärung",{"href":727,"dataGaName":728,"dataGaLocation":672},"/de-de/privacy/","privacy statement",{"text":730,"config":731},"Cookie-Einstellungen",{"dataGaName":732,"dataGaLocation":672,"id":733,"isOneTrustButton":215},"cookie preferences","ot-sdk-btn",{"title":281,"links":735,"subMenu":744},[736,740],{"text":737,"config":738},"DevSecOps-Plattform",{"href":263,"dataGaName":739,"dataGaLocation":672},"devsecops platform",{"text":741,"config":742},"KI-unterstützte Entwicklung",{"href":270,"dataGaName":743,"dataGaLocation":672},"ai-assisted development",[745],{"title":746,"links":747},"Themen",[748,752,757,762,767,772,777,782],{"text":301,"config":749},{"href":750,"dataGaName":751,"dataGaLocation":672},"/de-de/topics/ci-cd/","cicd",{"text":753,"config":754},"GitOps",{"href":755,"dataGaName":756,"dataGaLocation":672},"/de-de/topics/gitops/","gitops",{"text":758,"config":759},"DevOps",{"href":760,"dataGaName":761,"dataGaLocation":672},"/de-de/topics/devops/","devops",{"text":763,"config":764},"Versionskontrolle",{"href":765,"dataGaName":766,"dataGaLocation":672},"/de-de/topics/version-control/","version control",{"text":768,"config":769},"DevSecOps",{"href":770,"dataGaName":771,"dataGaLocation":672},"/de-de/topics/devsecops/","devsecops",{"text":773,"config":774},"Cloud-nativ",{"href":775,"dataGaName":776,"dataGaLocation":672},"/de-de/topics/cloud-native/","cloud native",{"text":778,"config":779},"KI für das Programmieren",{"href":780,"dataGaName":781,"dataGaLocation":672},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":783,"config":784},"Agentische KI",{"href":785,"dataGaName":786,"dataGaLocation":672},"/de-de/topics/agentic-ai/","agentic ai",{"title":788,"links":789},"Lösungen",[790,793,795,800,804,807,810,813,815,817,819,824],{"text":326,"config":791},{"href":321,"dataGaName":792,"dataGaLocation":672},"Application Security Testing",{"text":313,"config":794},{"href":297,"dataGaName":298,"dataGaLocation":672},{"text":796,"config":797},"Agile Entwicklung",{"href":798,"dataGaName":799,"dataGaLocation":672},"/de-de/solutions/agile-delivery/","agile delivery",{"text":801,"config":802},"SCM",{"href":310,"dataGaName":803,"dataGaLocation":672},"source code management",{"text":301,"config":805},{"href":303,"dataGaName":806,"dataGaLocation":672},"continuous integration & delivery",{"text":352,"config":808},{"href":354,"dataGaName":809,"dataGaLocation":672},"value stream management",{"text":753,"config":811},{"href":812,"dataGaName":756,"dataGaLocation":672},"/de-de/solutions/gitops/",{"text":365,"config":814},{"href":368,"dataGaName":369,"dataGaLocation":672},{"text":371,"config":816},{"href":374,"dataGaName":375,"dataGaLocation":672},{"text":377,"config":818},{"href":380,"dataGaName":381,"dataGaLocation":672},{"text":820,"config":821},"Bildungswesen",{"href":822,"dataGaName":823,"dataGaLocation":672},"/de-de/solutions/education/","education",{"text":825,"config":826},"Finanzdienstleistungen",{"href":827,"dataGaName":828,"dataGaLocation":672},"/de-de/solutions/finance/","financial services",{"title":388,"links":830},[831,833,835,837,840,842,845,847,849,851,853,855,857,859],{"text":401,"config":832},{"href":403,"dataGaName":404,"dataGaLocation":672},{"text":406,"config":834},{"href":408,"dataGaName":409,"dataGaLocation":672},{"text":411,"config":836},{"href":413,"dataGaName":414,"dataGaLocation":672},{"text":416,"config":838},{"href":418,"dataGaName":839,"dataGaLocation":672},"docs",{"text":439,"config":841},{"href":441,"dataGaName":442,"dataGaLocation":672},{"text":843,"config":844},"Neuerungen",{"href":494,"dataGaName":495,"dataGaLocation":672},{"text":434,"config":846},{"href":436,"dataGaName":437,"dataGaLocation":672},{"text":448,"config":848},{"href":450,"dataGaName":451,"dataGaLocation":672},{"text":456,"config":850},{"href":458,"dataGaName":459,"dataGaLocation":672},{"text":461,"config":852},{"href":463,"dataGaName":464,"dataGaLocation":672},{"text":466,"config":854},{"href":468,"dataGaName":469,"dataGaLocation":672},{"text":471,"config":856},{"href":473,"dataGaName":474,"dataGaLocation":672},{"text":476,"config":858},{"href":478,"dataGaName":479,"dataGaLocation":672},{"text":481,"config":860},{"href":483,"dataGaName":484,"dataGaLocation":672},{"title":497,"links":862},[863,865,867,869,871,873,878,883,885,887,889],{"text":505,"config":864},{"href":507,"dataGaName":499,"dataGaLocation":672},{"text":510,"config":866},{"href":512,"dataGaName":513,"dataGaLocation":672},{"text":518,"config":868},{"href":520,"dataGaName":521,"dataGaLocation":672},{"text":523,"config":870},{"href":525,"dataGaName":526,"dataGaLocation":672},{"text":528,"config":872},{"href":530,"dataGaName":531,"dataGaLocation":672},{"text":874,"config":875},"Nachhaltigkeit",{"href":876,"dataGaName":877,"dataGaLocation":672},"/sustainability/","Sustainability",{"text":879,"config":880},"Vielfalt, Inklusion und Zugehörigkeit",{"href":881,"dataGaName":882,"dataGaLocation":672},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":533,"config":884},{"href":535,"dataGaName":536,"dataGaLocation":672},{"text":543,"config":886},{"href":545,"dataGaName":546,"dataGaLocation":672},{"text":548,"config":888},{"href":550,"dataGaName":551,"dataGaLocation":672},{"text":890,"config":891},"Transparenzerklärung zu moderner Sklaverei",{"href":892,"dataGaName":893,"dataGaLocation":672},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":895},[896,899,902],{"text":897,"config":898},"Terms",{"href":722,"dataGaName":723,"dataGaLocation":672},{"text":900,"config":901},"Cookies",{"dataGaName":732,"dataGaLocation":672,"id":733,"isOneTrustButton":215},{"text":903,"config":904},"Datenschutz",{"href":727,"dataGaName":728,"dataGaLocation":672},[906],{"id":907,"title":7,"body":211,"config":908,"content":910,"description":211,"extension":914,"meta":915,"navigation":215,"path":916,"seo":917,"stem":918,"__hash__":919},"blogAuthors/en-us/blog/authors/mark-settle.yml",{"template":909},"BlogAuthor",{"name":7,"config":911},{"headshot":912,"ctfId":913},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1779215794/fw131xublkzdvjdadd4q.png","marksettle","yml",{},"/en-us/blog/authors/mark-settle",{},"en-us/blog/authors/mark-settle","aur3jcqDyhashUtyXhd1W7N3ZrN09waCQv135AABEt4",[921,926,934],{"title":922,"description":923,"heroImage":213,"category":207,"date":208,"authors":924,"slug":925,"externalUrl":211},"Wenn ein Versions-Bump den Build bricht, behebt GitLab ihn","Auto-Remediation verwandelt verwundbare Dependencies in geprüfte, merge-bereite Fixes – nativ in GitLab und mit vollem Kontext.",[7],"dependency-scanning-auto-remediation",{"title":927,"description":928,"heroImage":929,"category":207,"date":930,"authors":931,"slug":933,"externalUrl":211},"Container Scanning in GitLab: fünf Methoden für sichere Container","Fünf Arten des Container Scannings in GitLab – von der Pipeline bis zur Laufzeit im Cluster – und wie sich jede aktivieren und kombinieren lässt.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1772721753/frfsm1qfscwrmsyzj1qn.png","2026-07-06",[932],"Fernando Diaz","complete-guide-to-gitlab-container-scanning",{"title":935,"description":936,"heroImage":937,"category":207,"date":938,"authors":939,"slug":941,"externalUrl":211},"Eine Ansicht für alle Schwachstellen, von Scanner-Abdeckung bis KI-Governance","Je mehr Code KI schreibt, desto wichtiger wird Sicherheit. GitLab vereint Scanner-Abdeckung, Erkennung und Behebung, mit KI-Governance für Agenten.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1781621337/mtjqzed2cqtef0frmor2.png","2026-06-18",[940],"Alisa Ho","one-vulnerability-view",{"promotions":943},[944,958,969,980],{"id":945,"categories":946,"header":948,"text":949,"button":950,"image":955},"ai-modernization",[947],"ai","Hält KI, was uns versprochen wurde?","Das Quiz dauert maximal 5 Minuten.",{"text":951,"config":952},"Ermittle deinen KI-Reifegrad",{"href":953,"dataGaName":954,"dataGaLocation":442},"/de-de/assessments/ai-modernization-assessment/","modernization assessment",{"config":956},{"src":957},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":959,"categories":960,"header":961,"text":949,"button":962,"image":966},"devops-modernization",[226,771],"Verwaltest du Tool-Chaos oder stellst du Innovationen bereit?",{"text":963,"config":964},"Ermittle deinen DevOps-Reifegrad",{"href":965,"dataGaName":954,"dataGaLocation":442},"/de-de/assessments/devops-modernization-assessment/",{"config":967},{"src":968},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":970,"categories":971,"header":972,"text":949,"button":973,"image":977},"security-modernization",[207],"Tauschst du Schnelligkeit gegen Sicherheit ein?",{"text":974,"config":975},"Ermittle deinen Sicherheitsreifegrad",{"href":976,"dataGaName":954,"dataGaLocation":442},"/de-de/assessments/security-modernization-assessment/",{"config":978},{"src":979},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":981,"paths":982,"header":985,"text":986,"button":987,"image":992},"github-azure-migration",[983,984],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Ist dein Team bereit für den Umzug von GitHub nach Azure?","GitHub stellt bereits auf Azure um. Finde heraus, was das für dich bedeutet.",{"text":988,"config":989},"Erfahre, wie GitLab im Vergleich zu GitHub abschneidet",{"href":990,"dataGaName":991,"dataGaLocation":442},"/de-de/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":993},{"src":968},{"header":995,"blurb":996,"button":997,"secondaryButton":1002},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":998,"config":999},"Kostenlosen Test starten",{"href":1000,"dataGaName":239,"dataGaLocation":1001},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":560,"config":1003},{"href":562,"dataGaName":244,"dataGaLocation":1001},1784563910802]