Blog
Automating NIST 800-53: How to Turn Compliance Checklists into GitLab Pipeline Gates
Automating NIST 800-53: How to Turn Compliance Checklists into GitLab Pipeline GatesThe gap...
One Policy, Multiple Clouds: Avoiding Security Drift in Federal Multi-Cloud Deployments
One Policy, Multiple Clouds: Avoiding Security Drift in Federal Multi-Cloud DeploymentsWhen an...
SBOMs: From “Audit Requirement” to “Actionable Data”
SBOMs: From "Audit Requirement" to "Actionable Data"A few years ago, the conversation was “What is...
The Benefit of Integrating GitLab and Anchore
The Benefit of Integrating GitLab and AnchoreModern CI/CD is not just about shipping your code...
Why A 9.8 CVSS Score May Not Matter: Reducing Risks And Unnecessary Alerts Using JFrog Xray and GitLab’s Dependency Scanning
Why A 9.8 CVSS Score May Not Matter: Reducing Risks And Unnecessary Alerts Using JFrog Xray and...
Beyond Distroless: Automating the Lifecycle of Hardened Base Images in High-Compliance Environments
Beyond Distroless: Automating the Lifecycle of Hardened Base Images in High-Compliance...