GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

Community driven content discussing all aspects of software development from DevOps to design patterns. In previous tutorials we explored how to perform a GitLab clone and pull files from a GitLab ...

GitLab 18.11 helps address those gaps with platform-native agents that have access to the code, pipelines, issues, and ...

In many organizations, software teams develop their own CI/CD pipelines to handle recurring tasks such as code checkout, testing, scanning, build and deployment. This individualized approach often ...

A critical GitLab vulnerability could allow an attacker to run a pipeline as another user. GitLab is a popular Git repository, second only to GitHub, with millions of active users. This week, it ...