26 matches found
Let's Dance: InsightAppSec and tCell Bring New DevSecOps Improvements in Q1
To the left, to the left, to the right, right — the CI/CD Pipeline is on the move. DevSecOps is all about adding security across the application lifecycle. A popular approach to application security is to shift left, which means moving security earlier in the software development lifecycle SDLC...
GitLab CI Configuration Detected
GitLab is a popular Git-based Source Code Management system SCM provided by GitLab Inc. as both a cloud and an on-premise service. GitLab has Continuous Integration and Continuous Development CI/CD capabilities offering automatic builds, tests and deployments through a configuration file named...
CVE-2019-5463
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...
GitLab: Last build status and coverage leaked to unauthorized users
GitLab CI supports creating badges for the latest build/coverage on a certain branches. However, with restricted access, where users do not have access to pipelines, users still have access to the build/coverage status of any branch. This access works for different configurations: 1. For public...
