Topics tagged security

Topic	Replies	Views	Activity
What's the deal with all the critical vulnerabilities lately? Community feedback , security	5	76	September 29, 2026
Gitlab-secrets.json compromised after CVE-2026-85706 Self-managed security	3	304	September 17, 2026
Proposal: Security-Only Backports for the Final Release of the Previous Major Version Community release , security	1	86	September 16, 2026
Orbit and API networking access General api , security	3	372	July 9, 2026
Orbit Tracer Security Agent - GitLab Duo Agent That Reduces Vulnerability Analysis from 4+ Hours to Minutes DevSecOps ci , security , automation , ai-powered , gitlab-duo	0	204	June 24, 2026
Pentest scan says "Cookie without HttpOnly flag set" for /admin/usage_trends Self-managed security	2	306	May 20, 2026
Pentest scan says “OPTIONS method is enabled” for /api/v4/usage_data/track_event Self-managed security	2	219	May 20, 2026
Enforce Secret Push Protection on sub-group level Self-managed security	0	134	May 15, 2026
Encryption at rest of variables in database GitLab CI/CD postgresql , env-vars , security	4	637	April 30, 2026
Multiple CVEs nginx < 1.29.7 (Gitlab Omnibus v18.10.1-ee) Community security , cve	4	924	April 29, 2026
X-XSS- Protection is set to 0 in collect_events end point Self-managed api , security	3	595	April 17, 2026
How to prevent downstream .gitlab-ci.yml being modified by developers (role)? GitLab CI/CD pipelines , security	1	259	April 2, 2026
Removing project from security montoring with more than 100 projects set How to Use GitLab security	4	257	February 11, 2026
Semgrep.sarif: no such file or directory Error on Autoscaler executor DevSecOps security , sast	0	418	January 14, 2026
Again, locked due to an excessive number of unsuccessful sign in attempts Community security	3	665	December 29, 2025
Account GITLAB has been locked due to an excessive number of unsuccessful sign in attempts' has been received General security	2	1931	December 22, 2025
Disabling GraphQL Introspection How to Use GitLab api , security	4	2205	December 12, 2025
(SOLVED) Security issue? Getting strange "Unlock instructions" emails, are user emails leaked? Self-managed security	8	1126	December 10, 2025
Posting a comment with preformatted HTML code renders that HTML during submission General security	1	414	November 18, 2025
SAST jobs are not being executed GitLab CI/CD ci , pipelines , security , sast	0	451	October 10, 2025
How to extend expiration of access tokens Self-managed security	11	35349	October 9, 2025
The status of issues changed from False positive to Needs triage automatically DevSecOps security , sast	0	221	October 4, 2025
Backups running slow in podman container gitlab-ee:18.2.4-ee.0; messages on host from permissive SEClinux Oralce Linux Self-managed docker , backup , security	0	96	September 8, 2025
Pentest report showing Excessive exposed headers and allowed http methods for graphql endpoint Self-managed api , security	1	259	September 2, 2025
It shouldn't be possible to change password without 2FA How to Use GitLab 2fa , security	0	91	August 25, 2025
Secret Detection started to fail today due to token appearing in .git/config How to Use GitLab ci , pipelines , security	3	564	August 6, 2025
Turn-off "Unknown sign-in from new location"? How to Use GitLab security	4	6667	August 4, 2025
How to setup user to audit all projects' settings (approval rules)? How to Use GitLab api , security	0	114	July 17, 2025
Reporting malicious repository Community security	0	132	June 21, 2025
Developer docs or information on how to create a new secrets provider? DevSecOps pipelines , security , integration	0	412	May 3, 2025