by Ned Dickert | Oct 6, 2026 | Uncategorized
AI Agents in High Compliance DevSecOps: Permissions, Human Review, and the Token Bill The story is familiar now, the dev team deployed a couple AI agents to triage a pipeline or help on a new feature. The results were good enough that the team got the green light to...
by Ned Dickert | Sep 28, 2026 | Uncategorized
Building Compliance into your Processes: DevSecOps in Government, Healthcare, and Finance Software teams in regulated industries used to treat compliance as the last stop before release. This was fine when release schedules were measured in months. Now that the SDLC...
by Kleber Pauta | Sep 14, 2026 | Uncategorized
The GitLab Features You’re Paying For and (Probably) Not Using Most organizations running GitLab Premium or Ultimate use a fraction of what they license. While Git hosting, merge requests, and CI/CD, are core features, everything else sits switched off, quietly...
by Michael Brown | Sep 4, 2026 | Uncategorized
Why Your GitLab Pipelines Are Slow and What It’s Costing You Slow pipelines get treated as a nuisance, but they are really a line item. Every wasted minute burns compute and developer attention at the same time, which stacks up costs quickly. Where the time...
by Michael Brown | Aug 24, 2026 | Uncategorized
Who Owns Your Uptime? GitLab.com vs. Self-Managed Availability gets discussed as if it were a property of the vendor. It’s usually a question of who holds the levers when something breaks, and the answer changes completely depending on how you deploy GitLab. On...
by Ned Dickert | Aug 17, 2026 | Uncategorized
Harness Engineering Follow Up: Our Mini (Unscientific) Experiment A couple weeks ago we wrote this blog post about harness engineering. The gist is that the governance around an AI model is becoming more important than the model itself (please read the full post for...
