[{"data":1,"prerenderedAt":790},["ShallowReactive",2],{"/en-us/blog/a-community-driven-advisory-database":3,"navigation-en-us":38,"banner-en-us":466,"footer-en-us":483,"Mark Art-Dinesh Bolkensteyn-Isaac Dawson-Julian Thome":728,"next-steps-en-us":769,"footer-source-/en-us/blog/a-community-driven-advisory-database/":784},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"seo":8,"content":16,"config":28,"_id":31,"_type":32,"title":33,"_source":34,"_file":35,"_stem":36,"_extension":37},"/en-us/blog/a-community-driven-advisory-database","blog",false,"",{"title":9,"description":10,"ogTitle":9,"ogDescription":10,"noIndex":6,"ogImage":11,"ogUrl":12,"ogSiteName":13,"ogType":14,"canonicalUrls":12,"schema":15},"Community-driven advisory database for dependencies launched","The advisory data can be readily adopted, adapted, and exchanged. Learn more here.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749668354/Blog/Hero%20Images/handshake.png","https://about.gitlab.com/blog/a-community-driven-advisory-database","https://about.gitlab.com","article","\n                        {\n        \"@context\": \"https://schema.org\",\n        \"@type\": \"Article\",\n        \"headline\": \"Introducing a community-driven advisory database for third-party software dependencies\",\n        \"author\": [{\"@type\":\"Person\",\"name\":\"Mark Art\"},{\"@type\":\"Person\",\"name\":\"Dinesh Bolkensteyn\"},{\"@type\":\"Person\",\"name\":\"Isaac Dawson\"},{\"@type\":\"Person\",\"name\":\"Julian Thome\"}],\n        \"datePublished\": \"2022-02-16\",\n      }",{"title":17,"description":10,"authors":18,"heroImage":11,"date":23,"body":24,"category":25,"tags":26},"Introducing a community-driven advisory database for third-party software dependencies",[19,20,21,22],"Mark Art","Dinesh Bolkensteyn","Isaac Dawson","Julian Thome","2022-02-16","GitLab provides a [Dependency\nScanning](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/)\n\nfeature that can automatically detect vulnerabilities in your software\n\ndependencies. Dependency Scanning covers various programming languages and\n\nrelies on the [GitLab Advisory\nDatabase](https://gitlab.com/gitlab-org/security-products/gemnasium-db),\nthat\n\nis\n\n[updated](https://gitlab.com/gitlab-org/security-products/gemnasium-db/activity)\n\non a periodic basis by the\n\n[Vulnerability\nResearch](https://handbook.gitlab.com/handbook/engineering/development/sec/secure/vulnerability-research/)\n\nteam at GitLab. The GitLab Advisory Database covers security advisories in\nsoftware packages that have a CVE identifier, as well as malicious packages\nmarked as such by their ecosystem\n([example](https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/master/npm/lodahs/CVE-2019-19771.yml)).\nThe database is an essential part of\n\nthe Dependency Scanning feature, which is\n\n[available](https://about.gitlab.com/pricing/) in GitLab Ultimate\nself-managed\n\nand GitLab Ultimate SaaS.\n\n\nAs of recently, GitLab also provides a _free and open-source_ version of the\n\ndatabase, the [GitLab Advisory Database (Open Source\nEdition)](https://gitlab.com/gitlab-org/advisories-community), a\ntime-delayed\n\n(+30 days) clone of the [GitLab Advisory\nDatabase](https://gitlab.com/gitlab-org/security-products/gemnasium-db).\n\n\nIn the spirit of\n\n[Collaboration](https://handbook.gitlab.com/handbook/values/#collaboration) and\n\n[Transparency](https://handbook.gitlab.com/handbook/values/#transparency), two\nof\n\nthe [GitLab core values](https://handbook.gitlab.com/handbook/values/), we\nshare\n\nthe database with the open-source community in a format that is\n\n[well-documented](https://gitlab.com/gitlab-org/security-products/gemnasium-db#yaml-schema)\n\nand can be easily parsed. The advisory data can be readily adopted, adapted,\nand\n\nexchanged. For example, links to proof of concepts or write-ups, or any\nother\n\ndirectly related information that will benefit the community, can be added\nto\n\nthe `urls` array:\n\n\n```yaml\n\nurls:\n  - \"https://hackerone.com/reports/1104077\"\n  - \"https://nvd.nist.gov/vuln/detail/CVE-2021-28965\"\n  - \"https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/\"\n```\n\n\nAdditionally, in our advisories we use [Common Weakness\nEnumeration](https://cwe.mitre.org/index.html)\n\nin conjunction with [Common Vulnerability Scoring\nSystem](https://www.first.org/cvss/) as a standard means\n\nof [communicating\nvulnerabilities](https://handbook.gitlab.com/handbook/engineering/development/sec/secure/products/metrics/),\nas well as their impact/severity, internally and externally.\n\n\nThe [GitLab Advisory\nDatabase](https://gitlab.com/gitlab-org/security-products/gemnasium-db) is\nintegrated\n\ninto GitLab [Dependency\nScanning](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/).\nOnce\n\nan existing advisory is modified or a new advisory is created, the\ninformation included in the advisory will appear\n\nin the [Vulnerability\nPages](https://docs.gitlab.com/ee/user/application_security/vulnerabilities/)\n\nwhere findings/vulnerabilities originating from all [security\nscanners](/stages-devops-lifecycle/secure/),\n\nincluding Dependency Scanning, can be managed at a central place.\n\n\nThe open-source database has recently been integrated into\n\n[Trivy](https://github.com/aquasecurity/trivy), a free and open-source\nsolution\n\nfor [container\nscanning](https://docs.gitlab.com/ee/user/application_security/container_scanning/).\n\nWe are very grateful for [community\ncontributions](https://gitlab.com/gitlab-org/security-products/gemnasium-db#credits)\n\nto the [GitLab Advisory\nDatabase](https://gitlab.com/gitlab-org/security-products/gemnasium-db).\n\nOur community has aided us by suggesting improvements to our data or by\n creating entirely new advisories, allowing everyone to benefit from their\n contributions.\n\nAt GitLab, [everyone can contribute](https://handbook.gitlab.com/handbook/company/mission/).\n\nThe [Vulnerability\nResearch](https://handbook.gitlab.com/handbook/engineering/development/sec/secure/vulnerability-research/)\n\nteam at GitLab has made it easy to contribute to both databases.\n\n\nCommunity contributions can be made available in\n\n[advisories-community](https://gitlab.com/gitlab-org/advisories-community)\n\ninstantaneously by means of the [`community-sync`\nflag](https://gitlab.com/gitlab-org/security-products/gemnasium-db#advisory-headers),\n\nwhich has been introduced recently. Using this synchronization, you can make\n\nthe same contribution appear in both databases at the time of a Merge\nRequest\n\n(within one hour after the merge).\n\n\nWe have also used this flag to make the advisories concerning the recent\n\n[log4Shell](/blog/updates-and-actions-to-address-logj-in-gitlab/)\n\nvulnerabilities available to the community immediately after these were made\npublic.\n\nEven though the open-source version of the database is time-delayed,\nparticular\n\nvulnerabilities that have the potential to become widespread and cause\n\ndisruptions to the entire Internet, are pushed into the open-source version\n\nof the GitLab security advisory database.\n\n\nCover image by [Charles Deluvio](https://unsplash.com/@charlesdeluvio) on\n[Unsplash](https://unsplash.com/photos/AT5vuPoi8vc)\n\n{: .note}\n","security",[25,27],"collaboration",{"slug":29,"featured":6,"template":30},"a-community-driven-advisory-database","BlogPost","content:en-us:blog:a-community-driven-advisory-database.yml","yaml","A Community Driven Advisory Database","content","en-us/blog/a-community-driven-advisory-database.yml","en-us/blog/a-community-driven-advisory-database","yml",{"_path":39,"_dir":40,"_draft":6,"_partial":6,"_locale":7,"data":41,"_id":462,"_type":32,"title":463,"_source":34,"_file":464,"_stem":465,"_extension":37},"/shared/en-us/main-navigation","en-us",{"logo":42,"freeTrial":47,"sales":52,"login":57,"items":62,"search":393,"minimal":424,"duo":443,"pricingDeployment":452},{"config":43},{"href":44,"dataGaName":45,"dataGaLocation":46},"/","gitlab logo","header",{"text":48,"config":49},"Get free trial",{"href":50,"dataGaName":51,"dataGaLocation":46},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":53,"config":54},"Talk to sales",{"href":55,"dataGaName":56,"dataGaLocation":46},"/sales/","sales",{"text":58,"config":59},"Sign in",{"href":60,"dataGaName":61,"dataGaLocation":46},"https://gitlab.com/users/sign_in/","sign in",[63,107,204,209,314,374],{"text":64,"config":65,"cards":67,"footer":90},"Platform",{"dataNavLevelOne":66},"platform",[68,74,82],{"title":64,"description":69,"link":70},"The most comprehensive AI-powered DevSecOps Platform",{"text":71,"config":72},"Explore our Platform",{"href":73,"dataGaName":66,"dataGaLocation":46},"/platform/",{"title":75,"description":76,"link":77},"GitLab Duo (AI)","Build software faster with AI at every stage of development",{"text":78,"config":79},"Meet GitLab Duo",{"href":80,"dataGaName":81,"dataGaLocation":46},"/gitlab-duo/","gitlab duo ai",{"title":83,"description":84,"link":85},"Why GitLab","10 reasons why Enterprises choose GitLab",{"text":86,"config":87},"Learn more",{"href":88,"dataGaName":89,"dataGaLocation":46},"/why-gitlab/","why gitlab",{"title":91,"items":92},"Get started with",[93,98,103],{"text":94,"config":95},"Platform Engineering",{"href":96,"dataGaName":97,"dataGaLocation":46},"/solutions/platform-engineering/","platform engineering",{"text":99,"config":100},"Developer Experience",{"href":101,"dataGaName":102,"dataGaLocation":46},"/developer-experience/","Developer experience",{"text":104,"config":105},"MLOps",{"href":106,"dataGaName":104,"dataGaLocation":46},"/topics/devops/the-role-of-ai-in-devops/",{"text":108,"left":109,"config":110,"link":112,"lists":116,"footer":186},"Product",true,{"dataNavLevelOne":111},"solutions",{"text":113,"config":114},"View all Solutions",{"href":115,"dataGaName":111,"dataGaLocation":46},"/solutions/",[117,142,165],{"title":118,"description":119,"link":120,"items":125},"Automation","CI/CD and automation to accelerate deployment",{"config":121},{"icon":122,"href":123,"dataGaName":124,"dataGaLocation":46},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[126,130,134,138],{"text":127,"config":128},"CI/CD",{"href":129,"dataGaLocation":46,"dataGaName":127},"/solutions/continuous-integration/",{"text":131,"config":132},"AI-Assisted Development",{"href":80,"dataGaLocation":46,"dataGaName":133},"AI assisted development",{"text":135,"config":136},"Source Code Management",{"href":137,"dataGaLocation":46,"dataGaName":135},"/solutions/source-code-management/",{"text":139,"config":140},"Automated Software Delivery",{"href":123,"dataGaLocation":46,"dataGaName":141},"Automated software delivery",{"title":143,"description":144,"link":145,"items":150},"Security","Deliver code faster without compromising security",{"config":146},{"href":147,"dataGaName":148,"dataGaLocation":46,"icon":149},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[151,155,160],{"text":152,"config":153},"Application Security Testing",{"href":147,"dataGaName":154,"dataGaLocation":46},"Application security testing",{"text":156,"config":157},"Software Supply Chain Security",{"href":158,"dataGaLocation":46,"dataGaName":159},"/solutions/supply-chain/","Software supply chain security",{"text":161,"config":162},"Software Compliance",{"href":163,"dataGaName":164,"dataGaLocation":46},"/solutions/software-compliance/","software compliance",{"title":166,"link":167,"items":172},"Measurement",{"config":168},{"icon":169,"href":170,"dataGaName":171,"dataGaLocation":46},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[173,177,181],{"text":174,"config":175},"Visibility & Measurement",{"href":170,"dataGaLocation":46,"dataGaName":176},"Visibility and Measurement",{"text":178,"config":179},"Value Stream Management",{"href":180,"dataGaLocation":46,"dataGaName":178},"/solutions/value-stream-management/",{"text":182,"config":183},"Analytics & Insights",{"href":184,"dataGaLocation":46,"dataGaName":185},"/solutions/analytics-and-insights/","Analytics and insights",{"title":187,"items":188},"GitLab for",[189,194,199],{"text":190,"config":191},"Enterprise",{"href":192,"dataGaLocation":46,"dataGaName":193},"/enterprise/","enterprise",{"text":195,"config":196},"Small Business",{"href":197,"dataGaLocation":46,"dataGaName":198},"/small-business/","small business",{"text":200,"config":201},"Public Sector",{"href":202,"dataGaLocation":46,"dataGaName":203},"/solutions/public-sector/","public sector",{"text":205,"config":206},"Pricing",{"href":207,"dataGaName":208,"dataGaLocation":46,"dataNavLevelOne":208},"/pricing/","pricing",{"text":210,"config":211,"link":213,"lists":217,"feature":301},"Resources",{"dataNavLevelOne":212},"resources",{"text":214,"config":215},"View all resources",{"href":216,"dataGaName":212,"dataGaLocation":46},"/resources/",[218,251,273],{"title":219,"items":220},"Getting started",[221,226,231,236,241,246],{"text":222,"config":223},"Install",{"href":224,"dataGaName":225,"dataGaLocation":46},"/install/","install",{"text":227,"config":228},"Quick start guides",{"href":229,"dataGaName":230,"dataGaLocation":46},"/get-started/","quick setup checklists",{"text":232,"config":233},"Learn",{"href":234,"dataGaLocation":46,"dataGaName":235},"https://university.gitlab.com/","learn",{"text":237,"config":238},"Product documentation",{"href":239,"dataGaName":240,"dataGaLocation":46},"https://docs.gitlab.com/","product documentation",{"text":242,"config":243},"Best practice videos",{"href":244,"dataGaName":245,"dataGaLocation":46},"/getting-started-videos/","best practice videos",{"text":247,"config":248},"Integrations",{"href":249,"dataGaName":250,"dataGaLocation":46},"/integrations/","integrations",{"title":252,"items":253},"Discover",[254,259,263,268],{"text":255,"config":256},"Customer success stories",{"href":257,"dataGaName":258,"dataGaLocation":46},"/customers/","customer success stories",{"text":260,"config":261},"Blog",{"href":262,"dataGaName":5,"dataGaLocation":46},"/blog/",{"text":264,"config":265},"Remote",{"href":266,"dataGaName":267,"dataGaLocation":46},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"text":269,"config":270},"TeamOps",{"href":271,"dataGaName":272,"dataGaLocation":46},"/teamops/","teamops",{"title":274,"items":275},"Connect",[276,281,286,291,296],{"text":277,"config":278},"GitLab Services",{"href":279,"dataGaName":280,"dataGaLocation":46},"/services/","services",{"text":282,"config":283},"Community",{"href":284,"dataGaName":285,"dataGaLocation":46},"/community/","community",{"text":287,"config":288},"Forum",{"href":289,"dataGaName":290,"dataGaLocation":46},"https://forum.gitlab.com/","forum",{"text":292,"config":293},"Events",{"href":294,"dataGaName":295,"dataGaLocation":46},"/events/","events",{"text":297,"config":298},"Partners",{"href":299,"dataGaName":300,"dataGaLocation":46},"/partners/","partners",{"backgroundColor":302,"textColor":303,"text":304,"image":305,"link":309},"#2f2a6b","#fff","Insights for the future of software development",{"altText":306,"config":307},"the source promo card",{"src":308},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758208064/dzl0dbift9xdizyelkk4.svg",{"text":310,"config":311},"Read the latest",{"href":312,"dataGaName":313,"dataGaLocation":46},"/the-source/","the source",{"text":315,"config":316,"lists":318},"Company",{"dataNavLevelOne":317},"company",[319],{"items":320},[321,326,332,334,339,344,349,354,359,364,369],{"text":322,"config":323},"About",{"href":324,"dataGaName":325,"dataGaLocation":46},"/company/","about",{"text":327,"config":328,"footerGa":331},"Jobs",{"href":329,"dataGaName":330,"dataGaLocation":46},"/jobs/","jobs",{"dataGaName":330},{"text":292,"config":333},{"href":294,"dataGaName":295,"dataGaLocation":46},{"text":335,"config":336},"Leadership",{"href":337,"dataGaName":338,"dataGaLocation":46},"/company/team/e-group/","leadership",{"text":340,"config":341},"Team",{"href":342,"dataGaName":343,"dataGaLocation":46},"/company/team/","team",{"text":345,"config":346},"Handbook",{"href":347,"dataGaName":348,"dataGaLocation":46},"https://handbook.gitlab.com/","handbook",{"text":350,"config":351},"Investor relations",{"href":352,"dataGaName":353,"dataGaLocation":46},"https://ir.gitlab.com/","investor relations",{"text":355,"config":356},"Trust Center",{"href":357,"dataGaName":358,"dataGaLocation":46},"/security/","trust center",{"text":360,"config":361},"AI Transparency Center",{"href":362,"dataGaName":363,"dataGaLocation":46},"/ai-transparency-center/","ai transparency center",{"text":365,"config":366},"Newsletter",{"href":367,"dataGaName":368,"dataGaLocation":46},"/company/contact/","newsletter",{"text":370,"config":371},"Press",{"href":372,"dataGaName":373,"dataGaLocation":46},"/press/","press",{"text":375,"config":376,"lists":377},"Contact us",{"dataNavLevelOne":317},[378],{"items":379},[380,383,388],{"text":53,"config":381},{"href":55,"dataGaName":382,"dataGaLocation":46},"talk to sales",{"text":384,"config":385},"Support portal",{"href":386,"dataGaName":387,"dataGaLocation":46},"https://support.gitlab.com","support portal",{"text":389,"config":390},"Customer portal",{"href":391,"dataGaName":392,"dataGaLocation":46},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":394,"login":395,"suggestions":402},"Close",{"text":396,"link":397},"To search repositories and projects, login to",{"text":398,"config":399},"gitlab.com",{"href":60,"dataGaName":400,"dataGaLocation":401},"search login","search",{"text":403,"default":404},"Suggestions",[405,407,411,413,417,421],{"text":75,"config":406},{"href":80,"dataGaName":75,"dataGaLocation":401},{"text":408,"config":409},"Code Suggestions (AI)",{"href":410,"dataGaName":408,"dataGaLocation":401},"/solutions/code-suggestions/",{"text":127,"config":412},{"href":129,"dataGaName":127,"dataGaLocation":401},{"text":414,"config":415},"GitLab on AWS",{"href":416,"dataGaName":414,"dataGaLocation":401},"/partners/technology-partners/aws/",{"text":418,"config":419},"GitLab on Google Cloud",{"href":420,"dataGaName":418,"dataGaLocation":401},"/partners/technology-partners/google-cloud-platform/",{"text":422,"config":423},"Why GitLab?",{"href":88,"dataGaName":422,"dataGaLocation":401},{"freeTrial":425,"mobileIcon":430,"desktopIcon":435,"secondaryButton":438},{"text":426,"config":427},"Start free trial",{"href":428,"dataGaName":51,"dataGaLocation":429},"https://gitlab.com/-/trials/new/","nav",{"altText":431,"config":432},"Gitlab Icon",{"src":433,"dataGaName":434,"dataGaLocation":429},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":431,"config":436},{"src":437,"dataGaName":434,"dataGaLocation":429},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":439,"config":440},"Get Started",{"href":441,"dataGaName":442,"dataGaLocation":429},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/compare/gitlab-vs-github/","get started",{"freeTrial":444,"mobileIcon":448,"desktopIcon":450},{"text":445,"config":446},"Learn more about GitLab Duo",{"href":80,"dataGaName":447,"dataGaLocation":429},"gitlab duo",{"altText":431,"config":449},{"src":433,"dataGaName":434,"dataGaLocation":429},{"altText":431,"config":451},{"src":437,"dataGaName":434,"dataGaLocation":429},{"freeTrial":453,"mobileIcon":458,"desktopIcon":460},{"text":454,"config":455},"Back to pricing",{"href":207,"dataGaName":456,"dataGaLocation":429,"icon":457},"back to pricing","GoBack",{"altText":431,"config":459},{"src":433,"dataGaName":434,"dataGaLocation":429},{"altText":431,"config":461},{"src":437,"dataGaName":434,"dataGaLocation":429},"content:shared:en-us:main-navigation.yml","Main Navigation","shared/en-us/main-navigation.yml","shared/en-us/main-navigation",{"_path":467,"_dir":40,"_draft":6,"_partial":6,"_locale":7,"title":468,"button":469,"image":474,"config":478,"_id":480,"_type":32,"_source":34,"_file":481,"_stem":482,"_extension":37},"/shared/en-us/banner","is now in public beta!",{"text":470,"config":471},"Try the Beta",{"href":472,"dataGaName":473,"dataGaLocation":46},"/gitlab-duo/agent-platform/","duo banner",{"altText":475,"config":476},"GitLab Duo Agent Platform",{"src":477},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1753720689/somrf9zaunk0xlt7ne4x.svg",{"layout":479},"release","content:shared:en-us:banner.yml","shared/en-us/banner.yml","shared/en-us/banner",{"_path":484,"_dir":40,"_draft":6,"_partial":6,"_locale":7,"data":485,"_id":724,"_type":32,"title":725,"_source":34,"_file":726,"_stem":727,"_extension":37},"/shared/en-us/main-footer",{"text":486,"source":487,"edit":493,"contribute":498,"config":503,"items":508,"minimal":716},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":488,"config":489},"View page source",{"href":490,"dataGaName":491,"dataGaLocation":492},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":494,"config":495},"Edit this page",{"href":496,"dataGaName":497,"dataGaLocation":492},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":499,"config":500},"Please contribute",{"href":501,"dataGaName":502,"dataGaLocation":492},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":504,"facebook":505,"youtube":506,"linkedin":507},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[509,556,609,653,682],{"title":205,"links":510,"subMenu":525},[511,515,520],{"text":512,"config":513},"View plans",{"href":207,"dataGaName":514,"dataGaLocation":492},"view plans",{"text":516,"config":517},"Why Premium?",{"href":518,"dataGaName":519,"dataGaLocation":492},"/pricing/premium/","why premium",{"text":521,"config":522},"Why Ultimate?",{"href":523,"dataGaName":524,"dataGaLocation":492},"/pricing/ultimate/","why ultimate",[526],{"title":527,"links":528},"Contact Us",[529,532,534,536,541,546,551],{"text":530,"config":531},"Contact sales",{"href":55,"dataGaName":56,"dataGaLocation":492},{"text":384,"config":533},{"href":386,"dataGaName":387,"dataGaLocation":492},{"text":389,"config":535},{"href":391,"dataGaName":392,"dataGaLocation":492},{"text":537,"config":538},"Status",{"href":539,"dataGaName":540,"dataGaLocation":492},"https://status.gitlab.com/","status",{"text":542,"config":543},"Terms of use",{"href":544,"dataGaName":545,"dataGaLocation":492},"/terms/","terms of use",{"text":547,"config":548},"Privacy statement",{"href":549,"dataGaName":550,"dataGaLocation":492},"/privacy/","privacy statement",{"text":552,"config":553},"Cookie preferences",{"dataGaName":554,"dataGaLocation":492,"id":555,"isOneTrustButton":109},"cookie preferences","ot-sdk-btn",{"title":108,"links":557,"subMenu":565},[558,562],{"text":559,"config":560},"DevSecOps platform",{"href":73,"dataGaName":561,"dataGaLocation":492},"devsecops platform",{"text":131,"config":563},{"href":80,"dataGaName":564,"dataGaLocation":492},"ai-assisted development",[566],{"title":567,"links":568},"Topics",[569,574,579,584,589,594,599,604],{"text":570,"config":571},"CICD",{"href":572,"dataGaName":573,"dataGaLocation":492},"/topics/ci-cd/","cicd",{"text":575,"config":576},"GitOps",{"href":577,"dataGaName":578,"dataGaLocation":492},"/topics/gitops/","gitops",{"text":580,"config":581},"DevOps",{"href":582,"dataGaName":583,"dataGaLocation":492},"/topics/devops/","devops",{"text":585,"config":586},"Version Control",{"href":587,"dataGaName":588,"dataGaLocation":492},"/topics/version-control/","version control",{"text":590,"config":591},"DevSecOps",{"href":592,"dataGaName":593,"dataGaLocation":492},"/topics/devsecops/","devsecops",{"text":595,"config":596},"Cloud Native",{"href":597,"dataGaName":598,"dataGaLocation":492},"/topics/cloud-native/","cloud native",{"text":600,"config":601},"AI for Coding",{"href":602,"dataGaName":603,"dataGaLocation":492},"/topics/devops/ai-for-coding/","ai for coding",{"text":605,"config":606},"Agentic AI",{"href":607,"dataGaName":608,"dataGaLocation":492},"/topics/agentic-ai/","agentic ai",{"title":610,"links":611},"Solutions",[612,614,616,621,625,628,632,635,637,640,643,648],{"text":152,"config":613},{"href":147,"dataGaName":152,"dataGaLocation":492},{"text":141,"config":615},{"href":123,"dataGaName":124,"dataGaLocation":492},{"text":617,"config":618},"Agile development",{"href":619,"dataGaName":620,"dataGaLocation":492},"/solutions/agile-delivery/","agile delivery",{"text":622,"config":623},"SCM",{"href":137,"dataGaName":624,"dataGaLocation":492},"source code management",{"text":570,"config":626},{"href":129,"dataGaName":627,"dataGaLocation":492},"continuous integration & delivery",{"text":629,"config":630},"Value stream management",{"href":180,"dataGaName":631,"dataGaLocation":492},"value stream management",{"text":575,"config":633},{"href":634,"dataGaName":578,"dataGaLocation":492},"/solutions/gitops/",{"text":190,"config":636},{"href":192,"dataGaName":193,"dataGaLocation":492},{"text":638,"config":639},"Small business",{"href":197,"dataGaName":198,"dataGaLocation":492},{"text":641,"config":642},"Public sector",{"href":202,"dataGaName":203,"dataGaLocation":492},{"text":644,"config":645},"Education",{"href":646,"dataGaName":647,"dataGaLocation":492},"/solutions/education/","education",{"text":649,"config":650},"Financial services",{"href":651,"dataGaName":652,"dataGaLocation":492},"/solutions/finance/","financial services",{"title":210,"links":654},[655,657,659,661,664,666,668,670,672,674,676,678,680],{"text":222,"config":656},{"href":224,"dataGaName":225,"dataGaLocation":492},{"text":227,"config":658},{"href":229,"dataGaName":230,"dataGaLocation":492},{"text":232,"config":660},{"href":234,"dataGaName":235,"dataGaLocation":492},{"text":237,"config":662},{"href":239,"dataGaName":663,"dataGaLocation":492},"docs",{"text":260,"config":665},{"href":262,"dataGaName":5,"dataGaLocation":492},{"text":255,"config":667},{"href":257,"dataGaName":258,"dataGaLocation":492},{"text":264,"config":669},{"href":266,"dataGaName":267,"dataGaLocation":492},{"text":277,"config":671},{"href":279,"dataGaName":280,"dataGaLocation":492},{"text":269,"config":673},{"href":271,"dataGaName":272,"dataGaLocation":492},{"text":282,"config":675},{"href":284,"dataGaName":285,"dataGaLocation":492},{"text":287,"config":677},{"href":289,"dataGaName":290,"dataGaLocation":492},{"text":292,"config":679},{"href":294,"dataGaName":295,"dataGaLocation":492},{"text":297,"config":681},{"href":299,"dataGaName":300,"dataGaLocation":492},{"title":315,"links":683},[684,686,688,690,692,694,696,700,705,707,709,711],{"text":322,"config":685},{"href":324,"dataGaName":317,"dataGaLocation":492},{"text":327,"config":687},{"href":329,"dataGaName":330,"dataGaLocation":492},{"text":335,"config":689},{"href":337,"dataGaName":338,"dataGaLocation":492},{"text":340,"config":691},{"href":342,"dataGaName":343,"dataGaLocation":492},{"text":345,"config":693},{"href":347,"dataGaName":348,"dataGaLocation":492},{"text":350,"config":695},{"href":352,"dataGaName":353,"dataGaLocation":492},{"text":697,"config":698},"Sustainability",{"href":699,"dataGaName":697,"dataGaLocation":492},"/sustainability/",{"text":701,"config":702},"Diversity, inclusion and belonging (DIB)",{"href":703,"dataGaName":704,"dataGaLocation":492},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":355,"config":706},{"href":357,"dataGaName":358,"dataGaLocation":492},{"text":365,"config":708},{"href":367,"dataGaName":368,"dataGaLocation":492},{"text":370,"config":710},{"href":372,"dataGaName":373,"dataGaLocation":492},{"text":712,"config":713},"Modern Slavery Transparency Statement",{"href":714,"dataGaName":715,"dataGaLocation":492},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":717},[718,720,722],{"text":542,"config":719},{"href":544,"dataGaName":545,"dataGaLocation":492},{"text":547,"config":721},{"href":549,"dataGaName":550,"dataGaLocation":492},{"text":552,"config":723},{"dataGaName":554,"dataGaLocation":492,"id":555,"isOneTrustButton":109},"content:shared:en-us:main-footer.yml","Main Footer","shared/en-us/main-footer.yml","shared/en-us/main-footer",[729,741,750,760],{"_path":730,"_dir":731,"_draft":6,"_partial":6,"_locale":7,"content":732,"config":736,"_id":738,"_type":32,"title":19,"_source":34,"_file":739,"_stem":740,"_extension":37},"/en-us/blog/authors/mark-art","authors",{"name":19,"config":733},{"headshot":734,"ctfId":735},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659488/Blog/Author%20Headshots/gitlab-logo-extra-whitespace.png","55KCfyNmgPaJRmBZhiN7k5",{"template":737},"BlogAuthor","content:en-us:blog:authors:mark-art.yml","en-us/blog/authors/mark-art.yml","en-us/blog/authors/mark-art",{"_path":742,"_dir":731,"_draft":6,"_partial":6,"_locale":7,"content":743,"config":746,"_id":747,"_type":32,"title":20,"_source":34,"_file":748,"_stem":749,"_extension":37},"/en-us/blog/authors/dinesh-bolkensteyn",{"name":20,"config":744},{"headshot":734,"ctfId":745},"EpylYWgjPmFOL5NX3Zxmk",{"template":737},"content:en-us:blog:authors:dinesh-bolkensteyn.yml","en-us/blog/authors/dinesh-bolkensteyn.yml","en-us/blog/authors/dinesh-bolkensteyn",{"_path":751,"_dir":731,"_draft":6,"_partial":6,"_locale":7,"content":752,"config":756,"_id":757,"_type":32,"title":21,"_source":34,"_file":758,"_stem":759,"_extension":37},"/en-us/blog/authors/isaac-dawson",{"name":21,"config":753},{"headshot":754,"ctfId":755},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749669814/Blog/Author%20Headshots/idawson-headshot.jpg","idawson",{"template":737},"content:en-us:blog:authors:isaac-dawson.yml","en-us/blog/authors/isaac-dawson.yml","en-us/blog/authors/isaac-dawson",{"_path":761,"_dir":731,"_draft":6,"_partial":6,"_locale":7,"content":762,"config":765,"_id":766,"_type":32,"title":22,"_source":34,"_file":767,"_stem":768,"_extension":37},"/en-us/blog/authors/julian-thome",{"name":22,"config":763},{"headshot":7,"ctfId":764},"jthome",{"template":737},"content:en-us:blog:authors:julian-thome.yml","en-us/blog/authors/julian-thome.yml","en-us/blog/authors/julian-thome",{"_path":770,"_dir":40,"_draft":6,"_partial":6,"_locale":7,"header":771,"eyebrow":772,"blurb":773,"button":774,"secondaryButton":778,"_id":780,"_type":32,"title":781,"_source":34,"_file":782,"_stem":783,"_extension":37},"/shared/en-us/next-steps","Start shipping better software faster","50%+ of the Fortune 100 trust GitLab","See what your team can do with the intelligent\n\n\nDevSecOps platform.\n",{"text":48,"config":775},{"href":776,"dataGaName":51,"dataGaLocation":777},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":53,"config":779},{"href":55,"dataGaName":56,"dataGaLocation":777},"content:shared:en-us:next-steps.yml","Next Steps","shared/en-us/next-steps.yml","shared/en-us/next-steps",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"seo":785,"content":786,"config":789,"_id":31,"_type":32,"title":33,"_source":34,"_file":35,"_stem":36,"_extension":37},{"title":9,"description":10,"ogTitle":9,"ogDescription":10,"noIndex":6,"ogImage":11,"ogUrl":12,"ogSiteName":13,"ogType":14,"canonicalUrls":12,"schema":15},{"title":17,"description":10,"authors":787,"heroImage":11,"date":23,"body":24,"category":25,"tags":788},[19,20,21,22],[25,27],{"slug":29,"featured":6,"template":30},1761814396958]