{"id":6012,"date":"2023-09-07T15:39:49","date_gmt":"2023-09-07T13:39:49","guid":{"rendered":"https:\/\/www.almtoolbox.com\/blog\/?p=6012"},"modified":"2023-09-11T10:46:33","modified_gmt":"2023-09-11T08:46:33","slug":"code-security-compliance-gitlab","status":"publish","type":"post","link":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/","title":{"rendered":"Code Security and Compliance using GitLab"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6945\" src=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2021\/03\/WhatsApp-Image-2023-09-07-at-17.33.57.jpeg\" alt=\"gitlab devsecops appsec by alm-toolbox\" width=\"592\" height=\"592\" srcset=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/WhatsApp-Image-2023-09-07-at-17.33.57.jpeg 1024w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/WhatsApp-Image-2023-09-07-at-17.33.57-300x300.jpeg 300w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/WhatsApp-Image-2023-09-07-at-17.33.57-150x150.jpeg 150w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/WhatsApp-Image-2023-09-07-at-17.33.57-768x768.jpeg 768w\" sizes=\"auto, (max-width: 592px) 100vw, 592px\" \/><\/p>\n<p>Besides version control and CI\/CD, <em><strong>GitLab<\/strong> <\/em>also offers a variety of security tests on your proprietary code (<span style=\"font-weight: 400;\">code <\/span>you develop) or external code you use (i.e. open source), as well as code compliance capabilities &#8211; to help you <span style=\"font-weight: 400;\">ensure that <\/span>you make proper and legal use of any open source libraries and code snippets.<\/p>\n<p>In fact in <em>GitLab<\/em> you can also run the tests on the code itself, and then see everything using a central <em>dashboard<\/em> that shows everything organized.<br \/>\n<span style=\"font-weight: 400;\">GitLab\u2019s dashboard <\/span>also allows you to execute certain actions on the results and findings, and actually share the information among all stakeholders (or whoever is allowed to watch it depending on the permissions).<\/p>\n<div id=\"attachment_6022\" style=\"width: 708px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2021\/03\/dashboard-group.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-6022\" class=\"wp-image-6022\" src=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2021\/03\/dashboard-group.png\" alt=\"gitlab security dashboard\" width=\"698\" height=\"438\" srcset=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group.png 2930w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group-300x188.png 300w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group-1024x642.png 1024w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group-150x94.png 150w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group-768x481.png 768w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group-1536x962.png 1536w, https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/2021\/03\/dashboard-group-2048x1283.png 2048w\" sizes=\"auto, (max-width: 698px) 100vw, 698px\" \/><\/a><p id=\"caption-attachment-6022\" class=\"wp-caption-text\">GitLab&#8217;s Security Dashboard (Group-Level view). Click to enlarge.<\/p><\/div>\n<p>The tests can be run from GitLab CI (the build-in CI\/CD tool that comes with GitLab) and can also be connected to other CI tools such as <em>Jenkins<\/em>.<\/p>\n<p>The tests can be run even if the code is in another SCM tool (such as git, GitHub, Bitbucket, etc.).<\/p>\n<p>Some of the tests are dynamic which means they do not run on the code itself but on the application or website that runs the code.<\/p>\n<p>The tests can be run from both a private GitLab server (self-hosted) or from the cloud \/ SaaS (e.g. gitlab dot com).<\/p>\n<h3>Here you can see an overview of the relevant security scan features:<\/h3>\n<p><em>Note: most of the features here require a GitLab Ultimate license. If you need a pricing quote contact us (our details are below).<\/em><\/p>\n<table>\n<tbody>\n<tr>\n<td>\n<h4><b>Feature<\/b><\/h4>\n<\/td>\n<td>\n<h4><b>Description<\/b><\/h4>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Container Scanning<\/span><\/td>\n<td>Run a security scan to ensure the Docker images for your application do not have any known vulnerabilities in the environment where your code is shipped.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Dependency List<\/span><\/td>\n<td>Identify components included in your project by accessing the Dependency List (also referred to as Bill of Materials or BOM) ,which is often requested by Security and Compliance teams.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Dependency Scanning<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Protect your application from vulnerabilities that affect dynamic dependencies by automatically detecting well-known security bugs in your included libraries.<\/span><\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Static Application Security Testing (SAST)<\/span><\/td>\n<td>Checking for vulnerable source code or well-known security bugs in the libraries that are included by the application. Results are then shown in the Merge Request and in the Pipeline view.<br \/>\nThis test supports the following code languages: \u00a0C\/C++, Apex, .NET, Java, Go, JS, Python, PHP, Swift, TypeScript, NodeJS and more.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Dynamic Application Security Testing (DAST)<\/span><\/td>\n<td>Ensure you are not exposed to web application vulnerabilities like broken authentication, cross-site scripting, or SQL injection.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Secret Detection<\/span><\/td>\n<td>Checking for unintentionally committed secrets and credentials in git code and history.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">API Fuzzing<\/span><\/td>\n<td>Test the APIs in your apps to find vulnerabilities and bugs that traditional QA processes miss.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Coverage Fuzzing<\/span><\/td>\n<td>Find security vulnerabilities and bugs in your app that traditional QA processes miss, supporting<br \/>\nC\/C++ , Go, Java, JS, Python and more code languages.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">Security Dashboard<\/span><\/td>\n<td>Gain visibility into top-priority fixes by identifying and tracking trends in security risk across your entire organization.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><span style=\"font-weight: 400;\">License Compliance<\/span><\/td>\n<td>Check that licenses of your dependencies are compatible with your application (e.g. GPL, BSD, Apache, MIT licenses etc.), and approve or deny them.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<h4><em>ALM-Toolbox is a Select and Focused partner of GitLab since 2016, and provides a variety of solutions on top of GitLab,<br \/>\nincluding managed services, consulting, selling licenses, support, implementing CI\/CD pipelines, HA \/ DR , DevSecOps, and more.<\/em><br \/>\n<em>Any questions? Need a quote?<br \/>\nContact us:<span class=\"\"> <a href=\"mailto:gitlab@almtoolbox.com\" target=\"_blank\" rel=\"noopener\">gitlab@almtoolbox.com<\/a> , 866-503-1471 (USA \/ Canada) or +31 85 064 4633 (International)<\/span><\/em><\/h4>\n<p>&nbsp;<\/p>\n<h6><\/h6>\n<h6><em>First release: December 2021<\/em><\/h6>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Besides version control and CI\/CD, GitLab also offers a variety of security tests on your proprietary code (code you develop) or external code you use (i.e. open source), as well as code compliance capabilities &#8211; to help you ensure that you make proper and legal use of any open source libraries and code snippets. In [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":6952,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,184,166,172],"tags":[441,340,341],"class_list":["post-6012","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops","category-devsecops","category-gitlab","category-gitlab-ci","tag-appsec","tag-code-security","tag-compliance"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Code Security and Compliance using GitLab - ALMtoolbox News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Code Security and Compliance using GitLab - ALMtoolbox News\" \/>\n<meta property=\"og:description\" content=\"Besides version control and CI\/CD, GitLab also offers a variety of security tests on your proprietary code (code you develop) or external code you use (i.e. open source), as well as code compliance capabilities &#8211; to help you ensure that you make proper and legal use of any open source libraries and code snippets. In [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\" \/>\n<meta property=\"og:site_name\" content=\"ALMtoolbox News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/almtoolbox.israel\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-07T13:39:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-11T08:46:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1970\" \/>\n\t<meta property=\"og:image:height\" content=\"992\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tamir Gefen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Dikla\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tamir Gefen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\"},\"author\":{\"name\":\"Tamir Gefen\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63\"},\"headline\":\"Code Security and Compliance using GitLab\",\"datePublished\":\"2023-09-07T13:39:49+00:00\",\"dateModified\":\"2023-09-11T08:46:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\"},\"wordCount\":592,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg\",\"keywords\":[\"appsec\",\"code security\",\"compliance\"],\"articleSection\":[\"DevOps\",\"DevSecOps\",\"GitLab\",\"GitLab CI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\",\"name\":\"Code Security and Compliance using GitLab - ALMtoolbox News\",\"isPartOf\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg\",\"datePublished\":\"2023-09-07T13:39:49+00:00\",\"dateModified\":\"2023-09-11T08:46:33+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg\",\"contentUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg\",\"width\":1970,\"height\":992,\"caption\":\"gitlab devsecops appsec alm-toolbox\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.almtoolbox.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Code Security and Compliance using GitLab\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#website\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/\",\"name\":\"ALMtoolbox News\",\"description\":\"All the news of ALMtoolbox\",\"publisher\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.almtoolbox.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#organization\",\"name\":\"ALMtoolbox\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png\",\"contentUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png\",\"width\":410,\"height\":190,\"caption\":\"ALMtoolbox\"},\"image\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/almtoolbox.israel\/\",\"https:\/\/www.linkedin.com\/company\/almtoolbox\/\",\"https:\/\/www.youtube.com\/user\/GoMidjets\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63\",\"name\":\"Tamir Gefen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g\",\"caption\":\"Tamir Gefen\"},\"sameAs\":[\"https:\/\/x.com\/Dikla\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Code Security and Compliance using GitLab - ALMtoolbox News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/","og_locale":"en_US","og_type":"article","og_title":"Code Security and Compliance using GitLab - ALMtoolbox News","og_description":"Besides version control and CI\/CD, GitLab also offers a variety of security tests on your proprietary code (code you develop) or external code you use (i.e. open source), as well as code compliance capabilities &#8211; to help you ensure that you make proper and legal use of any open source libraries and code snippets. In [&hellip;]","og_url":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/","og_site_name":"ALMtoolbox News","article_publisher":"https:\/\/www.facebook.com\/almtoolbox.israel\/","article_published_time":"2023-09-07T13:39:49+00:00","article_modified_time":"2023-09-11T08:46:33+00:00","og_image":[{"width":1970,"height":992,"url":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg","type":"image\/jpeg"}],"author":"Tamir Gefen","twitter_card":"summary_large_image","twitter_creator":"@Dikla","twitter_misc":{"Written by":"Tamir Gefen","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#article","isPartOf":{"@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/"},"author":{"name":"Tamir Gefen","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63"},"headline":"Code Security and Compliance using GitLab","datePublished":"2023-09-07T13:39:49+00:00","dateModified":"2023-09-11T08:46:33+00:00","mainEntityOfPage":{"@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/"},"wordCount":592,"commentCount":0,"publisher":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage"},"thumbnailUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg","keywords":["appsec","code security","compliance"],"articleSection":["DevOps","DevSecOps","GitLab","GitLab CI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/","url":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/","name":"Code Security and Compliance using GitLab - ALMtoolbox News","isPartOf":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage"},"image":{"@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage"},"thumbnailUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg","datePublished":"2023-09-07T13:39:49+00:00","dateModified":"2023-09-11T08:46:33+00:00","breadcrumb":{"@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#primaryimage","url":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg","contentUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2023\/09\/gitlab-superhero-banner1.jpg","width":1970,"height":992,"caption":"gitlab devsecops appsec alm-toolbox"},{"@type":"BreadcrumbList","@id":"https:\/\/www.almtoolbox.com\/blog\/code-security-compliance-gitlab\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.almtoolbox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Code Security and Compliance using GitLab"}]},{"@type":"WebSite","@id":"https:\/\/www.almtoolbox.com\/blog\/#website","url":"https:\/\/www.almtoolbox.com\/blog\/","name":"ALMtoolbox News","description":"All the news of ALMtoolbox","publisher":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.almtoolbox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.almtoolbox.com\/blog\/#organization","name":"ALMtoolbox","url":"https:\/\/www.almtoolbox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png","contentUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png","width":410,"height":190,"caption":"ALMtoolbox"},"image":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/almtoolbox.israel\/","https:\/\/www.linkedin.com\/company\/almtoolbox\/","https:\/\/www.youtube.com\/user\/GoMidjets"]},{"@type":"Person","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63","name":"Tamir Gefen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g","caption":"Tamir Gefen"},"sameAs":["https:\/\/x.com\/Dikla"]}]}},"_links":{"self":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts\/6012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/comments?post=6012"}],"version-history":[{"count":19,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts\/6012\/revisions"}],"predecessor-version":[{"id":6948,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts\/6012\/revisions\/6948"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/media\/6952"}],"wp:attachment":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/media?parent=6012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/categories?post=6012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/tags?post=6012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}