[{"data":1,"prerenderedAt":1077},["ShallowReactive",2],{"/de-de/blog/secrets-manager-ga":3,"navigation-de-de":319,"banner-de-de":753,"footer-de-de":760,"blog-post-authors-de-de-Mark Settle":1017,"blog-related-posts-de-de-secrets-manager-ga":1032,"blog-share-wrapper-de-de":1057,"next-steps-de-de":1067},{"id":4,"title":5,"authors":6,"body":8,"category":297,"date":298,"description":299,"extension":300,"externalUrl":301,"faq":301,"featured":302,"heroImage":303,"meta":304,"navigation":302,"path":305,"seo":306,"slug":311,"stem":312,"tags":313,"template":317,"updatedDate":301,"__hash__":318},"blogPosts/de-de/blog/secrets-manager-ga.md","GitLab Secrets Manager: Secrets verwalten wie den eigenen Code",[7],"Mark Settle",{"type":9,"value":10,"toc":287},"minimark",[11,15,18,28,34,39,42,58,61,64,73,77,81,90,93,96,100,103,106,109,113,116,155,158,162,183,201,221,224,228,237,268],[12,13,14],"p",{},"Zugangsdaten entstehen oft in der lokalen Entwicklungsumgebung und werden dann in CI/CD-Variablen ohne Geltungsbereich kopiert, damit die Pipelines weiterlaufen. Dort als direkter Wert gespeichert statt als Verweis auf ein beschränktes Secret, erreicht ein Signaturschlüssel jeden Job der Pipeline, auch einen kompromittierten.",[12,16,17],{},"Ein separater Vault verringert dieses Risiko, verlangt aber, jede Änderung an Projektmitgliedschaften, geschützten Branches und Produktionsumgebungen dort nachzuziehen. Ist der Vault nicht mehr synchron, bricht eine Pipeline ab oder das Servicekonto eines Agenten behält Zugriffe, die es nicht mehr benötigt.",[12,19,20,21,27],{},"GitLab Secrets Manager verbessert die Sicherheit von Zugangsdaten ohne zweites Berechtigungsmodell. Er ist ab sofort in ",[22,23,26],"a",{"href":24,"rel":25},"https://docs.gitlab.com/releases/19/gitlab-19-5-released/",[],"GitLab 19.5"," für Premium und Ultimate auf GitLab.com und GitLab Self-Managed allgemein verfügbar. GitLab Dedicated folgt in Kürze. Der Secrets Manager basiert auf OpenBao und speichert Zugangsdaten für Build und Laufzeit unter denselben Berechtigungen und mit demselben Audit-Trail wie der Code. Plattform-Teams können Entwicklungsteams Secrets im Self-Service anbieten. Sicherheitsteams erhalten Zugangsdaten, die auf die Jobs beschränkt sind, die sie nutzen, und bei jedem Lesezugriff aus CI/CD zusätzlich die Pipeline- und Job-ID.",[29,30,31],"blockquote",{},[12,32,33],{},"\"Der GitLab Secrets Manager erlaubt uns, Secrets über CI/CD, Kubernetes und Infrastructure as Code hinweg zu zentralisieren, ohne mehrere Vaults aufzusetzen oder separate Integrationspunkte zu pflegen. Er stärkt zudem unsere Lieferkettensicherheit, weil er eingrenzt, welche Nutzer(innen) und Pipelines auf bestimmte Zugangsdaten zugreifen können.\" – Jeremy Nauta, Software Architect bei OneTrust",[35,36,38],"h2",{"id":37},"wie-der-secrets-manager-build-secrets-auf-einzelne-jobs-beschränkt","Wie der Secrets Manager Build-Secrets auf einzelne Jobs beschränkt",[12,40,41],{},"Agenten können Aktionen ausführen, mit denen niemand gerechnet hat. Sicherheitsteams müssen deshalb bei jedem Job davon ausgehen, dass seine Agenten alle Zugangsdaten nutzen, die sie erreichen können. Der Secrets Manager schränkt ein, was Agenten erreichen, und nutzt dafür den Kontext, den GitLab zu jedem Job bereits hat: das Projekt, den Branch, auf dem der Job läuft, ob dieser Branch geschützt ist, und die Zielumgebung.",[12,43,44,45,49,50,53,54,57],{},"Das Entwicklungsteam deklariert das Secret, das ein Job benötigt, mit dem Schlüsselwort ",[46,47,48],"code",{},"secrets:"," in der ",[46,51,52],{},".gitlab-ci.yml",". GitLab stellt den Wert nur Jobs bereit, die ihn deklarieren und in seinen Geltungsbereich fallen. Bedingungen für den Geltungsbereich akzeptieren Wildcards für Branch und Umgebung und lassen sich kombinieren. So kann eine einzige Regel einen geschützten Branch und eine Umgebung ",[46,55,56],{},"production/*"," voraussetzen, bevor ein Job die Zugangsdaten erhält.",[12,59,60],{},"Im Job schreibt GitLab den Wert in eine temporäre Datei und gibt nur deren Pfad weiter. Das senkt das Risiko, dass der Wert in Unterprozessen, Crash-Dumps oder Telemetriedaten auftaucht. In Job-Logs maskiert GitLab den Wert, und sobald der Job endet, wird er verworfen. Anders als eine CI/CD-Variable ist ein Secret in der Projektkonfiguration nie lesbar.\nOpenBao verschlüsselt Secrets im Ruhezustand mit AES-256-GCM, sodass eine Kopie der Secrets-Datenbank nur Chiffretext enthält. Jobs rufen Werte direkt aus OpenBao ab, mit kurzlebigen Tokens, die an die Identität des jeweiligen Jobs gebunden sind. Secrets im Klartext gelangen so nicht in die GitLab-Anwendung.",[12,62,63],{},"So gelingt der Einstieg in den Secrets Manager:",[65,66],"iframe",{"src":67,"frameBorder":68,"allow":69,"referrerPolicy":70,"style":71,"title":72},"https://player.vimeo.com/video/1233057442?title=0&byline=0&portrait=0&badge=0&autopause=0&player_id=0&app_id=58479","0","autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share","strict-origin-when-cross-origin","position:absolute;top:0;left:0;width:100%;height:100%;","Secret Manager GA v2",[74,75],"script",{"src":76},"https://player.vimeo.com/api/player.js",[35,78,80],{"id":79},"offengelegte-zugangsdaten-widerrufen-und-nachverfolgen","Offengelegte Zugangsdaten widerrufen und nachverfolgen",[12,82,83,84,89],{},"Als das npm-Paket axios kompromittiert wurde, riet eine ",[22,85,88],{"href":86,"rel":87},"https://www.sans.org/blog/axios-npm-supply-chain-compromise-malicious-packages-remote-access-trojan",[],"Sicherheitswarnung von SANS"," Teams, davon auszugehen, dass alle Umgebungsvariablen auf betroffenen Systemen exfiltriert wurden, und die Untersuchung auf CI/CD-Runner und Build-Infrastruktur auszuweiten. Incident-Response-Teams mussten herausfinden, welche Zugangsdaten jeder betroffene Job lesen konnte, wie sich der Zugriff unterbinden ließ und welche Ausführungen sie gelesen hatten.",[12,91,92],{},"Führt ein Job eine manipulierte Abhängigkeit aus, beschränkt sich die Offenlegung mit dem Secrets Manager auf die Secrets, die dieser Job deklariert hat und lesen durfte. Für die Bereinigung werden die offengelegten Zugangsdaten widerrufen und ersetzt, der Wert im Secrets Manager aktualisiert und genau dieser eine Job geprüft, während andere Pipelines weiterlaufen. Beim Anlegen eines Secrets schlägt der Secrets Manager vor, eine Erinnerung für die Rotation einzurichten. Dynamische Zugangsdaten folgen in Kürze und ermöglichen dann kurzlebigen Zugriff ohne manuelle Rotation.",[12,94,95],{},"GitLab streamt jedes Erstellen, Lesen, Aktualisieren und Löschen eines Secrets an die konfigurierten Ziele für Audit-Events und hält Änderungen im Audit-Trail fest. Jeder Lesezugriff aus einer Pipeline enthält die Pipeline- und Job-ID. Diese lassen sich dem Commit, der auslösenden Person und, sofern vorhanden, dem Merge Request zuordnen. Incident-Response- und Audit-Teams können einen Lesezugriff so auf die zugrunde liegende Änderung zurückführen, ohne Logs aus CI-System, Vault und Identity Provider abgleichen zu müssen. Audit-Events enthalten nie Secret-Werte.",[35,97,99],{"id":98},"secrets-mit-den-berechtigungen-des-codes-verwalten","Secrets mit den Berechtigungen des Codes verwalten",[12,101,102],{},"Je mehr Arbeit Agenten übernehmen, desto mehr Anfragen nach Pipelines und Servicekonten mit Zugangsdaten landen bei Plattform-Teams. Stauen sich diese Anfragen, greifen Teams auf weit gefasste Berechtigungen und gemeinsam genutzte Secrets zurück.",[12,104,105],{},"Der Secrets Manager nutzt den GitLab-Namespace als Isolationsgrenze. Projekte erben die Secrets der übergeordneten Gruppen, sodass gemeinsame Zugangsdaten nur einmal definiert werden. Owner vergeben Lese-, Schreib- und Löschrechte an bestimmte Personen oder Standardrollen, mit demselben Mitgliedschaftsmodell, das auch für den Code gilt. Wird eine Person oder das Servicekonto eines Agenten aus einem Projekt entfernt, endet auch der Zugriff dieser Identität auf die Secrets des Projekts.",[12,107,108],{},"Entwicklungsteams greifen über ihren bestehenden Projektzugriff auf Secrets zu. Funktioniert ein Verweis auf ein Secret nicht mehr, beheben sie ihn im selben Merge Request wie den Code, ohne zweites Repository, weitere Freigabe oder Zugriffsticket. Sind verwaltete Zugangsdaten nur eine Zeile entfernt, landen weniger Secrets in zu weit gefassten CI/CD-Variablen, lokalen Dateien oder im Repository.",[35,110,112],{"id":111},"ein-speicher-für-pipelines-und-laufzeit-workloads","Ein Speicher für Pipelines und Laufzeit-Workloads",[12,114,115],{},"Kubernetes, Terraform und Skripte erhalten oft eigene Secret-Speicher, jeweils mit eigenem Zugriffsmodell und eigenen Logs. Der Secrets Manager versorgt Laufzeit-Tools aus demselben Speicher wie die Pipelines, unter denselben Berechtigungen und mit demselben Audit-Trail:",[117,118,119,127,137,143],"ul",{},[120,121,122,126],"li",{},[123,124,125],"strong",{},"Kubernetes"," über den External Secrets Operator (ESO). ESO ruft das Secret in festgelegten Intervallen erneut ab und aktualisiert das Kubernetes Secret direkt. Ein rotierter Wert erreicht den Cluster so ohne Pipeline-Lauf.",[120,128,129,132,133,136],{},[123,130,131],{},"Terraform und OpenTofu."," Beide lesen ein Secret beim Plan- oder Apply-Schritt als Datenquelle und halten Zugangsdaten aus ",[46,134,135],{},".tfvars","-Dateien und CI/CD-Variablen heraus.",[120,138,139,142],{},[123,140,141],{},"OpenBao- und Vault-CLIs"," über die Vault-kompatible API. Teams behalten ihre bestehenden Skripte und richten sie auf den Secrets Manager aus.",[120,144,145,148,149,154],{},[123,146,147],{},"Weitere Laufzeit-Tools"," über die ",[22,150,153],{"href":151,"rel":152},"https://docs.gitlab.com/api/secrets_manager/",[],"Secrets-Manager-API",".",[12,156,157],{},"Jedes Laufzeit-Tool authentifiziert sich mit einem Servicekonto oder einem Zugriffstoken. Diese Identität benötigt eine Projektmitgliedschaft und eine explizite Leseberechtigung für das Secret. GitLab stellt dann ein separates, fünf Minuten gültiges Token aus, mit dem das Tool das Secret abruft.",[35,159,161],{"id":160},"wie-der-secrets-manager-die-lieferkettenkontrollen-von-gitlab-ergänzt","Wie der Secrets Manager die Lieferkettenkontrollen von GitLab ergänzt",[12,163,164,165,170,171,176,177,182],{},"Die ",[22,166,169],{"href":167,"rel":168},"https://about.gitlab.com/de-de/blog/transcend-india-announcements/",[],"Governed Software Factory"," von GitLab verbindet Code, Pipelines, Pakete und Secrets auf einer Plattform, mit einem Identitätsmodell und einer durchgängigen Aufzeichnung darüber, wie eine Änderung in die Produktion gelangt ist. ",[22,172,175],{"href":173,"rel":174},"https://about.gitlab.com/de-de/dependency-firewall/beta/",[],"Dependency Firewall"," entscheidet, welche Pakete in eine Pipeline aufgenommen werden, der Secrets Manager begrenzt, welche Zugangsdaten die Pipeline erreichen kann, und ",[22,178,181],{"href":179,"rel":180},"https://about.gitlab.com/de-de/blog/transcend-artifact-central/",[],"Artifact Central"," steuert, was ausgeliefert wird.",[12,184,185,186,191,192,196,197,200],{},"Im ",[22,187,190],{"href":188,"rel":189},"https://about.gitlab.com/gitlab-security-standard/",[],"GitLab Security Standard",", dem Framework von GitLab, mit dem Agenten schrittweise mehr Autonomie erhalten, unterstützt der Secrets Manager zwei der fünf Stufen. Bei ",[193,194,195],"em",{},"Authorize"," bindet er jeden Job an die Secrets, die seine Identität und sein Geltungsbereich zulassen. Bei ",[193,198,199],{},"Respond"," streamt er jedes CRUD-Event.",[12,202,203,208,209,214,215,220],{},[22,204,207],{"href":205,"rel":206},"https://docs.gitlab.com/user/application_security/secret_detection/secret_push_protection/",[],"Secret Push Protection"," blockiert Commits mit Zugangsdaten, bevor sie das Repository erreichen, und ",[22,210,213],{"href":211,"rel":212},"https://docs.gitlab.com/user/application_security/secret_detection/",[],"Secret Detection"," findet die Zugangsdaten, die bereits im Code und in der Historie liegen. Die ",[22,216,219],{"href":217,"rel":218},"https://about.gitlab.com/de-de/gitlab-duo-agent-platform/",[],"GitLab Duo Agent Platform"," sichtet die Funde dieser Scans vorab und markiert wahrscheinliche False Positives. So muss das Team nur bei tatsächlich offengelegten Zugangsdaten widerrufen, rotieren und prüfen.",[12,222,223],{},"Die bestehenden GitLab-Integrationen für HashiCorp Vault, AWS Secrets Manager, Azure Key Vault und Google Cloud Secret Manager funktionieren weiterhin parallel zum Secrets Manager. Die Migration kann daher im eigenen Tempo erfolgen.",[35,225,227],{"id":226},"erste-schritte","Erste Schritte",[12,229,230,231,236],{},"GitLab Secrets Manager ist ein kostenpflichtiges Add-on für Premium und Ultimate und wird über ",[22,232,235],{"href":233,"rel":234},"https://docs.gitlab.com/subscriptions/gitlab_credits/",[],"GitLab Credits"," abgerechnet: 1 Credit pro gespeichertem Secret und Monat sowie 1 Credit pro 2.500 Lesevorgängen. Für Air-Gapped-Umgebungen ist eine Enterprise-Lizenzvereinbarung verfügbar.",[117,238,239,256,265],{},[120,240,241,242,247,248,251,252,255],{},"Auf GitLab.com können Owner von Top-Level-Gruppen den ",[22,243,246],{"href":244,"rel":245},"https://docs.gitlab.com/ci/secrets/secrets_manager/secrets_manager_billing/#start-a-trial",[],"GitLab Secrets Manager kostenlos testen",", für 30 Tage oder 500 Evaluierungs-Credits, je nachdem, was zuerst endet. Dazu in der Top-Level-Gruppe ",[123,249,250],{},"Secure > Secrets Manager"," und anschließend ",[123,253,254],{},"Start 30-day trial"," auswählen.",[120,257,258,259,264],{},"Auf GitLab Self-Managed muss die Administration den ",[22,260,263],{"href":261,"rel":262},"https://docs.gitlab.com/administration/secrets_manager/",[],"Secrets Manager installieren und aktivieren"," und dabei die dokumentierten Empfehlungen zu Dimensionierung und Hochverfügbarkeit beachten.",[120,266,267],{},"Die Unterstützung für GitLab Dedicated folgt in Kürze.",[29,269,270,279],{},[12,271,272,273,278],{},"Welche Zugangsdaten zuerst umziehen sollten, zeigt das ",[22,274,277],{"href":275,"rel":276},"https://gitlab.com/guided-explorations/secrets-management/secret-audit-tool-for-variables",[],"Secret-Audit-Tool für CI/CD-Variablen",": Es markiert Variablen, die wahrscheinlich Zugangsdaten enthalten. Ein Migrations-Workflow für CI/CD-Variablen ist in Entwicklung.",[12,280,281,282,154],{},"Vorschläge oder Feedback? Gerne im ",[22,283,286],{"href":284,"rel":285},"https://gitlab.com/gitlab-org/gitlab/-/work_items/598100",[],"Feedback-Issue zum Secrets Manager",{"title":288,"searchDepth":289,"depth":289,"links":290},"",2,[291,292,293,294,295,296],{"id":37,"depth":289,"text":38},{"id":79,"depth":289,"text":80},{"id":98,"depth":289,"text":99},{"id":111,"depth":289,"text":112},{"id":160,"depth":289,"text":161},{"id":226,"depth":289,"text":227},"security","2026-10-15","Build-Secrets nur für die Jobs, die sie benötigen, und Laufzeit-Secrets aus demselben Speicher: Der Secrets Manager ist ab GitLab 19.5 allgemein verfügbar.","md",null,true,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1791993648/t2kod74bclspits5cc5o.png",{},"/de-de/blog/secrets-manager-ga",{"config":307,"description":309,"title":310},{"noIndex":308},false,"GitLab Secrets Manager beschränkt Build-Secrets auf die Jobs, die sie benötigen, und stellt Laufzeit-Secrets aus demselben Speicher bereit.","GitLab Secrets Manager: Zugangsdaten pro Job beschränken","secrets-manager-ga","de-de/blog/secrets-manager-ga",[314,315,316],"AI","product","features","BlogPost","hsbA2S0I9o_9XMEnZ941Cwn63R4VD3L4QvGNytuHgEI",{"logo":320,"freeTrial":325,"sales":330,"login":335,"items":340,"search":671,"minimal":705,"duo":723,"switchNav":732,"pricingDeployment":743},{"config":321},{"href":322,"dataGaName":323,"dataGaLocation":324},"/de-de/","gitlab logo","header",{"text":326,"config":327},"Kostenlose Testversion anfordern",{"href":328,"dataGaName":329,"dataGaLocation":324},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de&glm_content=default-saas-trial/","free trial",{"text":331,"config":332},"Demo anfordern",{"href":333,"dataGaName":334,"dataGaLocation":324},"/request-a-demo/","sales",{"text":336,"config":337},"Anmelden",{"href":338,"dataGaName":339,"dataGaLocation":324},"https://gitlab.com/users/sign_in/","sign in",[341,427,515,520,595,649],{"text":342,"left":302,"config":343,"menu":345},"Plattform",{"dataNavLevelOne":344},"platform",{"type":346,"link":347,"columns":351,"feature":416},"lists",{"text":348,"config":349},"Die Plattform erkunden",{"href":350,"dataGaName":344,"dataGaLocation":324},"/de-de/platform/",[352,375,398],{"title":353,"items":354},"Ausführung und Workflows",[355,360,365,370],{"text":356,"config":357},"CI/CD",{"href":358,"dataGaLocation":324,"dataGaName":359},"/de-de/solutions/continuous-integration/","ci/cd",{"text":361,"config":362},"Quellcodeverwaltung",{"href":363,"dataGaLocation":324,"dataGaName":364},"/de-de/solutions/source-code-management/","source code management",{"text":366,"config":367},"Agile Delivery",{"href":368,"dataGaLocation":324,"dataGaName":369},"/de-de/solutions/agile-delivery/","agile delivery",{"text":371,"config":372},"Artefaktverwaltung",{"href":373,"dataGaLocation":324,"dataGaName":374},"/de-de/artifact-central/","artifact management",{"title":376,"items":377},"Sicherheit und Governance",[378,383,388,393],{"text":379,"config":380},"Anwendungssicherheitstests",{"href":381,"dataGaLocation":324,"dataGaName":382},"/de-de/solutions/application-security-testing/","application security testing",{"text":384,"config":385},"Governance und Compliance",{"href":386,"dataGaLocation":324,"dataGaName":387},"/de-de/solutions/software-compliance/","governance and compliance",{"text":389,"config":390},"Secrets-Management",{"href":391,"dataGaLocation":324,"dataGaName":392},"/de-de/gitlab-secrets-manager/","secrets management",{"text":394,"config":395},"Lieferkettensicherheit",{"href":396,"dataGaLocation":324,"dataGaName":397},"/de-de/solutions/supply-chain/","supply chain security",{"title":399,"items":400},"Kontext und KI",[401,406,411],{"text":402,"config":403},"Agentische Orchestrierung",{"href":404,"dataGaLocation":324,"dataGaName":405},"/de-de/gitlab-duo-agent-platform/","agentic orchestration",{"text":407,"config":408},"Kontextgraph",{"href":409,"dataGaLocation":324,"dataGaName":410},"/de-de/gitlab-orbit/","context graph",{"text":412,"config":413},"Sichtbarkeit und Messung",{"href":414,"dataGaLocation":324,"dataGaName":415},"/de-de/solutions/visibility-measurement/","visibility and measurement",{"config":417,"title":420,"text":421,"link":422},{"background":418,"textColor":419},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1790185102/o7dn32anqcb6z8dgd3as.jpg')","#000","Warum GitLab","Eine Plattform für Schnelligkeit und Kontrolle im gesamten Software-Lebenszyklus.",{"text":423,"config":424},"Mehr erfahren",{"href":425,"dataGaName":426,"dataGaLocation":324},"/de-de/why-gitlab/","why gitlab",{"text":428,"left":302,"config":429,"menu":431},"Lösungen",{"dataNavLevelOne":430},"solutions",{"type":346,"link":432,"columns":436,"feature":506},{"text":433,"config":434},"Alle Lösungen anzeigen",{"href":435,"dataGaName":430,"dataGaLocation":324},"/de-de/solutions/",[437,455,473],{"title":438,"items":439},"Ergebnisse",[440,445,450],{"text":441,"config":442},"DevOps-Modernisierung",{"href":443,"dataGaLocation":324,"dataGaName":444},"/de-de/assessments/devops-modernization-assessment/","devops modernization",{"text":446,"config":447},"Sicherheitsmodernisierung",{"href":448,"dataGaLocation":324,"dataGaName":449},"/de-de/assessments/security-modernization-assessment/","security modernization",{"text":451,"config":452},"KI-Modernisierung",{"href":453,"dataGaLocation":324,"dataGaName":454},"/de-de/assessments/ai-modernization-assessment/","ai modernization",{"title":456,"items":457},"Nach Größe",[458,463,468],{"text":459,"config":460},"Große Unternehmen",{"href":461,"dataGaLocation":324,"dataGaName":462},"/de-de/enterprise/","enterprise",{"text":464,"config":465},"Kleine Unternehmen",{"href":466,"dataGaLocation":324,"dataGaName":467},"/de-de/small-business/","small business",{"text":469,"config":470},"Start-ups",{"href":471,"dataGaLocation":324,"dataGaName":472},"/de-de/solutions/startups/","startups",{"title":474,"items":475},"Branchen",[476,481,486,491,496,501],{"text":477,"config":478},"Finanzdienstleistungen",{"href":479,"dataGaLocation":324,"dataGaName":480},"/de-de/solutions/finance/","financial services",{"text":482,"config":483},"Öffentlicher Sektor",{"href":484,"dataGaLocation":324,"dataGaName":485},"/de-de/solutions/public-sector/","public sector",{"text":487,"config":488},"Telekommunikation",{"href":489,"dataGaLocation":324,"dataGaName":490},"/de-de/solutions/telecommunications/","telecommunications",{"text":492,"config":493},"Automobilindustrie",{"href":494,"dataGaLocation":324,"dataGaName":495},"/de-de/solutions/automotive/","automotive",{"text":497,"config":498},"Bildungswesen",{"href":499,"dataGaLocation":324,"dataGaName":500},"/de-de/solutions/education/","education",{"text":502,"config":503},"Luft- und Raumfahrt",{"href":504,"dataGaLocation":324,"dataGaName":505},"/de-de/solutions/aerospace/","aerospace",{"config":507,"title":508,"text":509,"link":510},{"background":418,"textColor":419},"GitLab-Sicherheitsstandard","Mehr dazu, wie du deine Software Factory stärkst und KI-Agenten Autonomie gewinnen lässt, ohne an Sicherheit einzubüßen.",{"text":511,"config":512},"Standard entdecken",{"href":513,"dataGaName":514,"dataGaLocation":324},"/gitlab-security-standard/","gitlab security standard",{"text":516,"config":517},"Preise",{"href":518,"dataGaName":519,"dataGaLocation":324,"dataNavLevelOne":519},"/de-de/pricing/","pricing",{"text":521,"config":522,"menu":524},"Ressourcen",{"dataNavLevelOne":523},"resources",{"type":346,"link":525,"columns":529,"feature":586},{"text":526,"config":527},"Alle Ressourcen anzeigen",{"href":528,"dataGaName":523,"dataGaLocation":324},"/de-de/resources/",[530,558],{"title":531,"items":532},"Entdecken",[533,538,543,548,553],{"text":534,"config":535},"Dokumentation",{"href":536,"dataGaName":537,"dataGaLocation":324},"https://docs.gitlab.com/","docs",{"text":539,"config":540},"GitLab University",{"href":541,"dataGaName":542,"dataGaLocation":324},"https://university.gitlab.com/","university",{"text":544,"config":545},"Demo-Reihe",{"href":546,"dataGaName":547,"dataGaLocation":324},"/de-de/gitlab-technical-demo-series/","demo series",{"text":549,"config":550},"Demo-Hub",{"href":551,"dataGaName":552,"dataGaLocation":324},"/de-de/demo-hub/","demo hub",{"text":554,"config":555},"Dienste",{"href":556,"dataGaName":557,"dataGaLocation":324},"/de-de/services/","services",{"title":559,"items":560},"Vernetzen",[561,566,571,576,581],{"text":562,"config":563},"Blog",{"href":564,"dataGaName":565,"dataGaLocation":324},"/de-de/blog/","blog",{"text":567,"config":568},"Community",{"href":569,"dataGaName":570,"dataGaLocation":324},"/community/","community",{"text":572,"config":573},"Kunden",{"href":574,"dataGaName":575,"dataGaLocation":324},"/de-de/customers/","customers",{"text":577,"config":578},"Partner",{"href":579,"dataGaName":580,"dataGaLocation":324},"/de-de/partners/","partners",{"text":582,"config":583},"Veranstaltungen",{"href":584,"dataGaName":585,"dataGaLocation":324},"/events/","events",{"config":587,"title":588,"text":589,"link":590},{"background":418,"textColor":419},"Neues bei GitLab","Über die neuesten Funktionen und Verbesserungen auf dem Laufenden bleiben.",{"text":591,"config":592},"Aktuelle Nachrichten",{"href":593,"dataGaName":594,"dataGaLocation":324},"/de-de/whats-new/","whats new",{"text":596,"config":597,"menu":599},"Unternehmen",{"dataNavLevelOne":598},"company",{"type":346,"columns":600},[601],{"items":602},[603,608,614,619,624,629,634,639,644],{"text":604,"config":605},"Über",{"href":606,"dataGaName":607,"dataGaLocation":324},"/de-de/company/","about",{"text":609,"config":610,"footerGa":613},"Karriere",{"href":611,"dataGaName":612,"dataGaLocation":324},"/jobs/","jobs",{"dataGaName":612},{"text":615,"config":616},"Presse",{"href":617,"dataGaName":618,"dataGaLocation":324},"/press/","press",{"text":620,"config":621},"Handbuch",{"href":622,"dataGaName":623,"dataGaLocation":324},"https://handbook.gitlab.com/","handbook",{"text":625,"config":626},"Geschäftsführung",{"href":627,"dataGaName":628,"dataGaLocation":324},"/company/team/e-group/","leadership",{"text":630,"config":631},"Investor Relations",{"href":632,"dataGaName":633,"dataGaLocation":324},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":635,"config":636},"Trust Center",{"href":637,"dataGaName":638,"dataGaLocation":324},"/de-de/security/","trust center",{"text":640,"config":641},"AI Transparency Center",{"href":642,"dataGaName":643,"dataGaLocation":324},"/de-de/ai-transparency-center/","ai transparency center",{"text":645,"config":646},"Newsletter",{"href":647,"dataGaName":648,"dataGaLocation":324},"/company/contact/#contact-forms","newsletter",{"text":650,"config":651,"menu":652},"Kontakt",{"dataNavLevelOne":598},{"type":346,"columns":653},[654],{"items":655},[656,661,666],{"text":657,"config":658},"Vertrieb kontaktieren",{"href":659,"dataGaName":660,"dataGaLocation":324},"/de-de/sales/","talk to sales",{"text":662,"config":663},"Support-Portal",{"href":664,"dataGaName":665,"dataGaLocation":324},"https://support.gitlab.com/hc/en-us","support portal",{"text":667,"config":668},"Kundenportal",{"href":669,"dataGaName":670,"dataGaLocation":324},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":672,"login":673,"suggestions":680},"Schließen",{"text":674,"link":675},"Um Repositorys und Projekte zu durchsuchen, melde dich an bei",{"text":676,"config":677},"gitlab.com",{"href":338,"dataGaName":678,"dataGaLocation":679},"search login","search",{"text":681,"default":682},"Vorschläge",[683,685,689,691,696,701],{"text":219,"config":684},{"href":404,"dataGaName":219,"dataGaLocation":679},{"text":686,"config":687},"Codevorschläge (KI)",{"href":404,"dataGaName":688,"dataGaLocation":679},"Code Suggestions (AI)",{"text":356,"config":690},{"href":358,"dataGaName":356,"dataGaLocation":679},{"text":692,"config":693},"GitLab auf AWS",{"href":694,"dataGaName":695,"dataGaLocation":679},"/de-de/partners/technology-partners/aws/","GitLab on AWS",{"text":697,"config":698},"GitLab auf Google Cloud",{"href":699,"dataGaName":700,"dataGaLocation":679},"/de-de/partners/technology-partners/google-cloud-platform/","GitLab on Google Cloud",{"text":702,"config":703},"Warum GitLab?",{"href":425,"dataGaName":704,"dataGaLocation":679},"Why GitLab?",{"freeTrial":706,"mobileIcon":711,"desktopIcon":716,"secondaryButton":719},{"text":707,"config":708},"Kostenlos testen",{"href":709,"dataGaName":329,"dataGaLocation":710},"https://gitlab.com/-/trials/new/","nav",{"altText":712,"config":713},"GitLab-Symbol",{"src":714,"dataGaName":715,"dataGaLocation":710},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":712,"config":717},{"src":718,"dataGaName":715,"dataGaLocation":710},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":227,"config":720},{"href":721,"dataGaName":722,"dataGaLocation":710},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/de-de/get-started/","get started",{"freeTrial":724,"mobileIcon":728,"desktopIcon":730},{"text":725,"config":726},"Mehr über GitLab Duo erfahren",{"href":404,"dataGaName":727,"dataGaLocation":710},"gitlab duo",{"altText":712,"config":729},{"src":714,"dataGaName":715,"dataGaLocation":710},{"altText":712,"config":731},{"src":718,"dataGaName":715,"dataGaLocation":710},{"button":733,"mobileIcon":738,"desktopIcon":740},{"text":734,"config":735},"/Option",{"href":736,"dataGaName":737,"dataGaLocation":710},"#contact","switch",{"altText":712,"config":739},{"src":714,"dataGaName":715,"dataGaLocation":710},{"altText":712,"config":741},{"src":742,"dataGaName":715,"dataGaLocation":710},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":744,"mobileIcon":749,"desktopIcon":751},{"text":745,"config":746},"Zurück zur Preisübersicht",{"href":518,"dataGaName":747,"dataGaLocation":710,"icon":748},"back to pricing","GoBack",{"altText":712,"config":750},{"src":714,"dataGaName":715,"dataGaLocation":710},{"altText":712,"config":752},{"src":718,"dataGaName":715,"dataGaLocation":710},{"title":754,"button":755,"config":758},"GitLab Orbit ist da: die Kontextebene für KI-Agenten",{"text":423,"config":756},{"href":409,"dataGaName":757,"dataGaLocation":324},"orbit",{"layout":759,"disabled":308},"release",{"data":761},{"text":762,"source":763,"edit":769,"contribute":774,"config":779,"items":784,"minimal":1006},"Git ist eine Marke von Software Freedom Conservancy und unsere Verwendung von „GitLab“ erfolgt unter Lizenz.",{"text":764,"config":765},"Quelltext der Seite anzeigen",{"href":766,"dataGaName":767,"dataGaLocation":768},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":770,"config":771},"Diese Seite bearbeiten",{"href":772,"dataGaName":773,"dataGaLocation":768},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":775,"config":776},"Beteilige dich",{"href":777,"dataGaName":778,"dataGaLocation":768},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":780,"facebook":781,"youtube":782,"linkedin":783},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[785,830,888,931,973],{"title":516,"links":786,"subMenu":801},[787,791,796],{"text":788,"config":789},"Tarife anzeigen",{"href":518,"dataGaName":790,"dataGaLocation":768},"view plans",{"text":792,"config":793},"Vorteile von Premium",{"href":794,"dataGaName":795,"dataGaLocation":768},"/de-de/pricing/premium/","why premium",{"text":797,"config":798},"Vorteile von Ultimate",{"href":799,"dataGaName":800,"dataGaLocation":768},"/de-de/pricing/ultimate/","why ultimate",[802],{"title":650,"links":803},[804,806,808,810,815,820,825],{"text":657,"config":805},{"href":659,"dataGaName":334,"dataGaLocation":768},{"text":662,"config":807},{"href":664,"dataGaName":665,"dataGaLocation":768},{"text":667,"config":809},{"href":669,"dataGaName":670,"dataGaLocation":768},{"text":811,"config":812},"Status",{"href":813,"dataGaName":814,"dataGaLocation":768},"https://status.gitlab.com/","status",{"text":816,"config":817},"Nutzungsbedingungen",{"href":818,"dataGaName":819,"dataGaLocation":768},"/terms/","terms of use",{"text":821,"config":822},"Datenschutzerklärung",{"href":823,"dataGaName":824,"dataGaLocation":768},"/de-de/privacy/","privacy statement",{"text":826,"config":827},"Cookie-Einstellungen",{"dataGaName":828,"dataGaLocation":768,"id":829,"isOneTrustButton":302},"cookie preferences","ot-sdk-btn",{"title":342,"links":831,"subMenu":845},[832,835,837,839,841,843],{"text":833,"config":834},"Plattform entdecken",{"href":350,"dataGaName":344,"dataGaLocation":768},{"text":402,"config":836},{"href":404,"dataGaName":405,"dataGaLocation":768},{"text":356,"config":838},{"href":358,"dataGaName":359,"dataGaLocation":768},{"text":407,"config":840},{"href":409,"dataGaName":410,"dataGaLocation":768},{"text":389,"config":842},{"href":391,"dataGaName":392,"dataGaLocation":768},{"text":420,"config":844},{"href":425,"dataGaName":426,"dataGaLocation":768},[846],{"title":847,"links":848},"Themen",[849,853,858,863,868,873,878,883],{"text":356,"config":850},{"href":851,"dataGaName":852,"dataGaLocation":768},"/de-de/topics/ci-cd/","cicd",{"text":854,"config":855},"GitOps",{"href":856,"dataGaName":857,"dataGaLocation":768},"/de-de/topics/gitops/","gitops",{"text":859,"config":860},"DevOps",{"href":861,"dataGaName":862,"dataGaLocation":768},"/de-de/topics/devops/","devops",{"text":864,"config":865},"Versionskontrolle",{"href":866,"dataGaName":867,"dataGaLocation":768},"/de-de/topics/version-control/","version control",{"text":869,"config":870},"DevSecOps",{"href":871,"dataGaName":872,"dataGaLocation":768},"/de-de/topics/devsecops/","devsecops",{"text":874,"config":875},"Cloud-nativ",{"href":876,"dataGaName":877,"dataGaLocation":768},"/de-de/topics/cloud-native/","cloud native",{"text":879,"config":880},"KI für das Programmieren",{"href":881,"dataGaName":882,"dataGaLocation":768},"/de-de/topics/devops/ai-for-coding/","ai for coding",{"text":884,"config":885},"Agentische KI",{"href":886,"dataGaName":887,"dataGaLocation":768},"/de-de/topics/agentic-ai/","agentic ai",{"title":428,"links":889},[890,892,894,896,898,900,902,904,906,908,911,914,916,919,923,927],{"text":441,"config":891},{"href":443,"dataGaName":444,"dataGaLocation":768},{"text":446,"config":893},{"href":448,"dataGaName":449,"dataGaLocation":768},{"text":451,"config":895},{"href":453,"dataGaName":454,"dataGaLocation":768},{"text":477,"config":897},{"href":479,"dataGaName":480,"dataGaLocation":768},{"text":482,"config":899},{"href":484,"dataGaName":485,"dataGaLocation":768},{"text":487,"config":901},{"href":489,"dataGaName":490,"dataGaLocation":768},{"text":492,"config":903},{"href":494,"dataGaName":495,"dataGaLocation":768},{"text":497,"config":905},{"href":499,"dataGaName":500,"dataGaLocation":768},{"text":502,"config":907},{"href":504,"dataGaName":505,"dataGaLocation":768},{"text":909,"config":910},"Enterprise",{"href":461,"dataGaName":462,"dataGaLocation":768},{"text":912,"config":913},"Kleinunternehmen",{"href":466,"dataGaName":467,"dataGaLocation":768},{"text":469,"config":915},{"href":471,"dataGaName":472,"dataGaLocation":768},{"text":854,"config":917},{"href":918,"dataGaName":857,"dataGaLocation":768},"/de-de/solutions/gitops/",{"text":920,"config":921},"Analyse der Softwarezusammensetzung (SCA)",{"href":396,"dataGaName":922,"dataGaLocation":768},"software composition analysis",{"text":924,"config":925},"Wertstrommanagement",{"href":414,"dataGaName":926,"dataGaLocation":768},"value stream management",{"text":928,"config":929},"Alle Lösungen",{"href":435,"dataGaName":930,"dataGaLocation":768},"all solutions",{"title":521,"links":932},[933,938,943,945,947,949,951,953,955,957,960,962,964,966,969],{"text":934,"config":935},"Installieren",{"href":936,"dataGaName":937,"dataGaLocation":768},"/de-de/install/","install",{"text":939,"config":940},"Kurzanleitungen",{"href":941,"dataGaName":942,"dataGaLocation":768},"/de-de/get-started/","quick setup checklists",{"text":534,"config":944},{"href":536,"dataGaName":537,"dataGaLocation":768},{"text":539,"config":946},{"href":541,"dataGaName":542,"dataGaLocation":768},{"text":544,"config":948},{"href":546,"dataGaName":547,"dataGaLocation":768},{"text":549,"config":950},{"href":551,"dataGaName":552,"dataGaLocation":768},{"text":554,"config":952},{"href":556,"dataGaName":557,"dataGaLocation":768},{"text":562,"config":954},{"href":564,"dataGaName":565,"dataGaLocation":768},{"text":567,"config":956},{"href":569,"dataGaName":570,"dataGaLocation":768},{"text":958,"config":959},"Kund(inn)en",{"href":574,"dataGaName":575,"dataGaLocation":768},{"text":577,"config":961},{"href":579,"dataGaName":580,"dataGaLocation":768},{"text":582,"config":963},{"href":584,"dataGaName":585,"dataGaLocation":768},{"text":645,"config":965},{"href":647,"dataGaName":648,"dataGaLocation":768},{"text":967,"config":968},"Neuerungen",{"href":593,"dataGaName":594,"dataGaLocation":768},{"text":970,"config":971},"Alle Ressourcen",{"href":528,"dataGaName":972,"dataGaLocation":768},"all resources",{"title":596,"links":974},[975,977,979,981,983,985,987,989,991,996,1001],{"text":604,"config":976},{"href":606,"dataGaName":598,"dataGaLocation":768},{"text":609,"config":978},{"href":611,"dataGaName":612,"dataGaLocation":768},{"text":615,"config":980},{"href":617,"dataGaName":618,"dataGaLocation":768},{"text":620,"config":982},{"href":622,"dataGaName":623,"dataGaLocation":768},{"text":625,"config":984},{"href":627,"dataGaName":628,"dataGaLocation":768},{"text":630,"config":986},{"href":632,"dataGaName":633,"dataGaLocation":768},{"text":635,"config":988},{"href":637,"dataGaName":638,"dataGaLocation":768},{"text":640,"config":990},{"href":642,"dataGaName":643,"dataGaLocation":768},{"text":992,"config":993},"Nachhaltigkeit",{"href":994,"dataGaName":995,"dataGaLocation":768},"/sustainability/","Sustainability",{"text":997,"config":998},"Vielfalt, Inklusion und Zugehörigkeit",{"href":999,"dataGaName":1000,"dataGaLocation":768},"/de-de/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":1002,"config":1003},"Transparenzerklärung zu moderner Sklaverei",{"href":1004,"dataGaName":1005,"dataGaLocation":768},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":1007},[1008,1011,1014],{"text":1009,"config":1010},"Terms",{"href":818,"dataGaName":819,"dataGaLocation":768},{"text":1012,"config":1013},"Cookies",{"dataGaName":828,"dataGaLocation":768,"id":829,"isOneTrustButton":302},{"text":1015,"config":1016},"Datenschutz",{"href":823,"dataGaName":824,"dataGaLocation":768},[1018],{"id":1019,"title":7,"body":301,"config":1020,"content":1022,"description":301,"extension":1026,"meta":1027,"navigation":302,"path":1028,"seo":1029,"stem":1030,"__hash__":1031},"blogAuthors/en-us/blog/authors/mark-settle.yml",{"template":1021},"BlogAuthor",{"name":7,"config":1023},{"headshot":1024,"ctfId":1025},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1779215794/fw131xublkzdvjdadd4q.png","marksettle","yml",{},"/en-us/blog/authors/mark-settle",{},"en-us/blog/authors/mark-settle","aur3jcqDyhashUtyXhd1W7N3ZrN09waCQv135AABEt4",[1033,1041,1049],{"title":1034,"description":1035,"heroImage":1036,"category":297,"date":1037,"authors":1038,"slug":1040,"externalUrl":301},"Sicherheitsrisiken der gesamten Organisation in einem Dashboard","Für Unternehmen mit vielen Top-Level-Gruppen fasst GitLab jetzt Schwachstellen und einen einheitlichen Risikowert für die gesamte Organisation zusammen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-10-08",[1039],"Alisa Ho","security-risk-in-one-dashboard",{"title":1042,"description":1043,"heroImage":1044,"category":297,"date":1045,"authors":1046,"slug":1048,"externalUrl":301},"Dependency Firewall: riskante Pakete vor dem Build stoppen","GitLab Dependency Firewall hält schädliche und anfällige Pakete automatisch aus dem Build fern, damit Teams und Agenten mit geprüften Abhängigkeiten arbeiten.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1791198675/kmajkudog4fj3xc6qfyb.png","2026-10-06",[1039,1047],"Amit Shalem","transcend-dependency-firewall",{"title":1050,"description":1051,"heroImage":1052,"category":297,"date":1053,"authors":1054,"slug":1056,"externalUrl":301},"Die Software Factory maschinenschnell sichern","Das Fundament für agentische Softwareentwicklung muss mit den KI-Modellen wachsen und den Weg von der Erkennung zur verifizierten Behebung verkürzen.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-09-18",[1055],"Chaim Mazal","securing-the-software-factory-at-machine-speed",{"header":1058,"text":1059,"button":1063,"disclaimer":1066},"Kostenlose 30-tägige\n\nGitLab-Testversion starten\n",[1060,1061,1062],"GitLab Duo Agent Platform nutzen","Unsere fortschrittlichsten Funktionen ausprobieren","Komplexe Aufgaben mit KI automatisieren",{"text":707,"config":1064},{"href":1065,"dataGaName":329,"dataGaLocation":565},"https://gitlab.com/-/trials/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/blog/","Keine Kreditkarte erforderlich.",{"header":1068,"blurb":1069,"button":1070,"secondaryButton":1075},"Beginne noch heute, schneller zu entwickeln","Entdecke, was dein Team mit der intelligenten Orchestrierungsplattform für DevSecOps erreichen kann.\n",{"text":1071,"config":1072},"Kostenlosen Test starten",{"href":1073,"dataGaName":329,"dataGaLocation":1074},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/de-de/","feature",{"text":657,"config":1076},{"href":659,"dataGaName":334,"dataGaLocation":1074},1792176279594]