Sara Meadzinger

Jun 24, 2024 | about.gitlab.com | Sara Meadzinger |Amar Patel

Blog Security Prevent secret leaks in source code with GitLab Secret Push Protection Learn how adding Secret Push Protection, in Beta on GitLab.com and GitLab Dedicated, to a defense-in-depth detection strategy decreases the resources needed to remediate secret leaks. securitytutorialfeaturesDevSecOps platformproduct Secret Push Protection is now in Beta on GitLab.com and GitLab Dedicated. Secret Push Protection blocks secrets such as keys and API tokens from being pushed to GitLab.

May 13, 2024 | about.gitlab.com | Sara Meadzinger

Proxy-based dynamic application security testing was removed in GitLab 17.0 (May 16, 2024) and replaced with GitLab's proprietary DAST tool (formerly called “browser-based DAST”). DAST runs automated penetration tests to find vulnerabilities in your web applications as they are running. DAST automates a hacker’s approach, simulates real-world attacks, and can identify critical threats such as cross-site scripting, a SQL injection, and cross-site request forgery.