While manual code review processes may suffice for a small team, as DevSecOps teams scale, the processes create significant bottlenecks that impede software development velocity and quality. Often slow, inconsistent, and frequently failing to catch critical vulnerabilities, the manual approach leads to technical debt and increased security risks. To mitigate risks and drive innovation, organizations…

At GitLab we have a tradition: Every year, we invite a bug bounty hunter to join us for an AMA. This year, we met with Alexander Siyou Tan, also known as ahacker1, and did a deep dive into all aspects of bug bounty hunting. About Alexander (ahacker1) Alexander is passionate about hacking complex SaaS applications,…

Memory unsafe languages are those that do not handle any memory management on behalf of the developer. For example, when programming in C or C++, if you need memory during runtime, you will need to allocate and deallocate the memory yourself, running the risk of ending up with memory leaks in cases when you inadvertently…

Writing PHP application code and ensuring the application is running smoothly in production are often two different skills sets owned by two different engineers. GitLab aims to bridge the gap by enabling the engineer who has written the PHP application code to also deploy it into Google Cloud Platform with little effort. Whether you own…

The first part of our three-part series on test generation with GitLab Duo focused on how to automate code testing. Now, we will share the lessons we learned while using AI for test generation. Situations we encountered and how we handled them Overall, we were pleased with the results using GitLab Duo to generate tests…

GitLab is continuously translated by our global community of translators and proofreaders. Through Crowdin, they help make our product more accessible to the world by translating it into 78 languages. GitLab translation community members are volunteer translators, working professionals who are GitLab users, and even university students contributing to translators as part of their classroom…

It’s 9 a.m. somewhere, and a DevOps engineer is starting their day. They check their GitLab todo list to see any mentions or tasks assigned to them, collaborating with other stakeholders in their organization. These tasks can include: managing infrastructure maintaining the configuration of resources maintaining CI/CD pipelines automating processes for efficiency maintaining monitoring and…

This message from Sid Sijbrandij and Bill Staples was shared with GitLab team members earlier today. Sid: On today’s earnings call, I announced that I am stepping down as CEO and will remain Executive Chair of the Board. I also introduced GitLab’s new CEO, Bill Staples. As a Board, we routinely do succession planning. This…

In our November LinkedIn Live broadcast, we brought together field CTOs, developer advocates, and community leaders to discuss industry trends and showcase features making a difference in developer workflows. Here are 5 key highlights: 1. AI adoption trends from the field Our field CTOs shared insights on how organizations are embracing AI across their development…

We’re excited to announce GitLab Duo with Amazon Q, a joint offering that brings together GitLab’s comprehensive AI-powered DevSecOps platform with Amazon Q’s autonomous AI agents in a single, integrated solution. GitLab Duo with Amazon Q transforms software development by integrating powerful AI agents directly into your daily workflows. Instead of switching between multiple tools,…