GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

Looking at GitLab CI/CD under the hood. What “security built into the pipeline” actually means. How teams manage and act on findings at scale. GitLab DevSecOps is an integrated system that unifies ...