Depthfirst disclosed a high‑severity GitLab vulnerability where any authenticated user can execute arbitrary commands as the git system user by pushing a crafted Jupyter notebook, leveraging two memory‑corruption bugs in the Oj gem, with a full PoC released for affected versions.
This guide walks through configuring a local Docker/Compose environment that provides accessible Harbor, GitLab (with a shared Runner), and Jenkins, demonstrates a push/pull test on Harbor, runs a minimal GitLab CI pipeline, and validates a simple Jenkins pipeline, while covering prerequisites, host configuration, installation steps, verification, troubleshooting, and cleanup.
This article explains the fundamental concepts of CI/CD, clarifies the distinction between Continuous Integration, Continuous Delivery and Continuous Deployment, describes pipeline components such as stages and jobs, outlines common triggers, artifacts, caches and secrets, and shows how tools like GitLab, Jenkins and Harbor fit together in a complete delivery workflow.
An anonymous researcher with a legitimate MSRC account publicly released multiple Windows 0‑day exploits after his reports were ignored, leading to swift bans on GitHub and GitLab, sparking a heated debate over platform policies, coordinated disclosure failures, and the broader breakdown of the bug‑bounty ecosystem.
This article details the design and implementation of an AI‑powered automated code‑review system for GitLab Merge Requests, covering background problems, layered architecture, diff parsing, prompt engineering, comment management, rate‑limiting, concurrency control, and the measurable improvements achieved.
This tutorial walks through integrating the AI Hub client with a TypeScript‑based code review engine, adding a UI button in a Vue component, handling loading states, previewing MergeRequest data, and wiring the backend calls to GitLab and the AI model, complete with code snippets and screenshots.
This article details a complete, cloud‑native CI/CD solution for Kubernetes that supports over 500 services, multiple languages, and hundreds of daily deployments, covering environment analysis, tool selection, architecture design, standards, implementation steps for CI and CD, and practical code snippets.
Go lint tools, especially Golangci‑lint, provide static code analysis to catch style and correctness issues; this guide explains what lint is, shows common lint warnings, demonstrates installation, configuration, CI integration with GitLab, and practical tips for rolling it out across a development team.
This guide walks you through building an efficient CI/CD pipeline using Jenkins and Docker, covering benefits, architecture design, Maven‑based Docker image creation, Alibaba Cloud registry integration, custom Jenkins Docker image setup, permission handling, GitLab webhook configuration, and deployment automation with scripts.
This article explains how to construct and manage various context data—such as historical review feedback, code diffs, file types, developer experience, commit messages, business scenarios, framework knowledge, and Git logs—to improve the quality of AI‑driven code reviews, and provides a concrete TypeScript implementation with modular context providers, prompt engineering, and integration with GitLab and OpenAI APIs.
This article provides a comprehensive overview of GitLab—including its origins, key features, and evolution—followed by detailed, step‑by‑step instructions for installing, configuring, and accessing GitLab on Rocky Linux, covering repository management, CI/CD pipelines, and Kubernetes integration.
This comprehensive DevOps training course covers theory, Jenkins, GitLab CI/CD, build tools, artifact management, SonarQube, Nexus, Docker/Kubernetes, VM deployment, Jira automation, and advanced extensions, providing step‑by‑step video tutorials for each topic.
This article explains how to replace a naïve push‑based GitOps workflow with a centralized, permission‑controlled deployment pipeline using GitLab CI, detailing the architecture, advantages such as improved security and maintainability, and providing complete YAML examples for both service and central pipelines.
This article explains advanced GitLab CI/CD configuration strategies that let teams move the .gitlab-ci.yml file out of each project and manage pipelines centrally at the project, group, and instance levels, reducing duplication and simplifying maintenance.
This article explains why GitLab's built‑in SAST focuses solely on security, distinguishes it from code‑quality analysis, and provides two practical ways—using the official Code‑Quality template and integrating custom linters—to add comprehensive code‑quality checks into your CI/CD pipelines.
This article explores GitLab's built‑in Auto DevOps feature, detailing how including the Auto‑DevOps template in .gitlab-ci.yml automatically creates a full CI/CD pipeline with build, test, review, security scanning, and deployment stages, and explains how each stage works and can be customized.
The article explains GitLab SAST’s standardized JSON report format, walks through the meaning of the scan metadata and the vulnerabilities array, and shows that an empty vulnerabilities list together with a success status simply indicates a clean, successful static analysis run.
In GitLab CI/CD pipelines, SAST and Dependency Scanning are independent, complementary security mechanisms—one inspects your own source code while the other checks third‑party libraries—so enabling both provides a comprehensive defense against vulnerabilities.
This guide explains why GitLab CI jobs lack git‑push rights by default, describes the minimal‑permission security model of CI_JOB_TOKEN, and provides a step‑by‑step solution using Project Access Tokens to securely enable write access for automated pipelines.
This article walks through designing and implementing an AI code review tool using Node.js, GitLab webhooks, and large language models, covering prompt engineering, diff augmentation, token management, response parsing, and automated comment posting to streamline the review process.
This guide walks through installing GitLab CE, configuring its URL and email settings, managing services, applying Chinese localization, creating projects via HTTP and SSH, adding remote repositories, and handling users and groups, providing complete hands‑on instructions for DevOps teams.
This article walks through using GitLab's Discussions API to write AI‑generated code review comments at specific lines or blocks, covering the required API endpoint, parameter extraction from merge requests, diff parsing with regular expressions, TypeScript implementation, and the end‑to‑end workflow that integrates OpenAI suggestions back into GitLab.
This guide explains why backing up GitLab as a pure Git repository is useful, compares the git clone --mirror method with GitLab's built‑in Rake backup, details how to back up critical configuration files, and offers practical automation tips for a robust, multi‑layered backup strategy.
The team built a low‑cost AI‑powered code‑review assistant that injects line‑level comments into GitLab merge requests, using LLMs via Feishu, iterating quickly through MVP and optimization phases, achieving 64 integrations, 150+ daily comments, feedback‑driven prompt refinement, and demonstrating high ROI for small‑to‑medium teams while outlining future IDE and rule‑based extensions.
This article provides a comprehensive overview of GitLab, covering its origins, key features, core DevOps capabilities, and step‑by‑step instructions for installing and configuring GitLab on Rocky Linux, including required system specs, repository setup, package installation, and post‑install verification.
This article explains how to create a YAML configuration for CI/CD, store it in a GitLab repository, set up GitLab webhooks and the Jenkins Generic Webhook Trigger plugin, and configure a Jenkins Pipeline to read the YAML and execute conditional build, test, and SonarQube stages.
This article provides a comprehensive overview of essential DevOps engineering tools and practices—including Jira release management, GitLab Gitflow workflow, Jenkins CI/CD pipelines, Maven/Gradle/MSBuild build tools, unit testing frameworks, and SonarQube quality analysis—illustrated with enterprise‑level case studies to demonstrate their real‑world impact.
This tutorial walks through upgrading Git on a GitLab server, using the Commit API to fetch recent changes, invoking an AI model for automated code review, posting the review as a commit comment, and notifying the team via a Feishu custom‑bot webhook.
This step‑by‑step guide walks you through AWS EKS core concepts, cluster provisioning with eksctl, kubectl configuration, node monitoring, taints and tolerations, GitLab deployment via Helm, persistent storage with EBS, optional object storage, Istio service‑mesh installation, and troubleshooting API server access issues.
This tutorial shows how to modify a GitLab CI pipeline to fetch changed files via the Merge Request API, extract the diff with jq, build a JSON request for the glm‑4‑flash model, and use AI to review code changes, including prompt engineering and result interpretation.
This tutorial walks through creating a personal GitLab access token, testing the GitLab API, configuring CI variables, importing a sample project, triggering a merge‑request pipeline, sending changed files to a Zhipu AI model, and writing the AI's review back into the merge request as comments.
This article walks you through GitLab's core features, architecture diagram, installation via Tsinghua mirrors, detailed configuration, service management commands, Chinese localization steps, project creation over HTTP and SSH, and remote repository handling, providing a comprehensive DevOps reference.
The article examines the emerging field of AI‑assisted code review, outlining the drawbacks of manual reviews, describing how large language models can automate the process, presenting step‑by‑step implementation details—including GitLab integration and notification via Feishu—and summarizing the technical skills readers can acquire.
This guide walks you through configuring GitLab to use an external MinIO object store and CertManager for TLS certificates, covering credential setup, bucket creation, Helm chart adjustments, secret management, and verification steps to achieve a secure, efficient cloud‑native deployment.
GitLab announced that it will discontinue GitLab.com accounts for users in mainland China, Hong Kong, and Macau, offering a 60‑day migration window to the locally‑operated JiHu platform, sparking concerns about data integrity, compliance motives, and the broader impact on the Chinese open‑source ecosystem.
GitLab announced that it will cease providing GitLab.com accounts to users in mainland China, Macau and Hong Kong, offering a 60‑day migration window to the locally‑operated JiHu platform and prompting widespread discussion about data integrity, compliance, and the future of open‑source development in the region.
GitLab.com will stop service for China regions, and Alibaba Cloud Codeup offers both a three‑click web import and a CLI tool for bulk migration, providing detailed steps, configuration examples, and AI‑enhanced code management to ensure a smooth transition of your code assets.
This guide walks through installing GitLab CE on an M1 MacBook using an ARM Docker image, configuring ports, setting up SSH access, creating a sample project, and registering a GitLab Runner for CI/CD pipelines, all with step‑by‑step commands and code snippets.
This article provides a comprehensive overview of Git, GitLab, and GitHub, explaining their core functionalities, typical scenarios, and key distinctions to help developers and DevOps engineers choose the right version‑control solution for their projects.
This guide explains what Hacktoberfest is, why developers should join, the step‑by‑step process to register, find suitable projects, make code, documentation or design contributions, submit pull requests, track progress, and succeed with the new 2024 updates and tips.
Nova is an AI-powered code review system integrated with GitLab CI and SonarQube, offering full-project context, multi-language support, extensibility for models and search methods, easy Docker deployment, safety filters, and aims to improve review precision and provide customizable audit prompts.
This guide walks you through constructing a complete GitOps‑based CI/CD pipeline using GitLab, GitLab Runner on Kubernetes, Maven, SonarQube, Harbor, Argo CD, and Kustomize, covering code commit, build, test, image publishing, automated deployments, and advanced rollout strategies such as blue‑green and canary releases.
This article explains how to use Jenkins to automatically pull a front‑end Angular project from a GitLab repository, install the required Node.js and npm versions, build the static files, compress them, and deploy the resulting package to a Linux server with backup and verification steps.
The article describes Vivo's Engineering Efficiency team's VCR platform, built on GitLab and Gerrit, detailing the design and implementation of code‑review plugins, challenges faced, architectural integration, customization techniques, and future directions toward automated and AI‑enhanced code review.
This guide walks through setting up a complete CI/CD environment on three CentOS 7.6 machines—GitLab, Jenkins, and Tomcat—covering installation, configuration, plugin management, Maven integration, SonarQube scanning, and automated deployment of a Java web application.
GitLab introduces its Duo Chat AI assistant for streamlined development while also previewing the upcoming jQuery 4.0 release and promoting JavaScript "Naked Day," offering developers insights into new tools, security practices, and upcoming web standards.
The author recounts six years at GitLab, detailing the challenges of scaling a rapidly growing remote company, building performance monitoring tools and a database load balancer, confronting cultural and management issues, and sharing hard‑won lessons on scalability, deployment speed, product strategy, and remote work dynamics.
This article explains how to incorporate the SQLE SQL auditing tool into a DevOps workflow using GitLab, GitLab‑Runner, and Docker, detailing environment setup, CI/CD configuration, and automated scanning to ensure compliance and reduce production risks.
The article presents a practical permission‑management strategy for a large‑scale front‑end monorepo that merges Git‑hook validation with GitLab’s protected branches and role‑based access, defines a clear directory hierarchy, outlines workflow controls, and explores extensions such as fine‑grained ACLs and file‑access logging to prevent unauthorized file changes.
This step‑by‑step tutorial explains CI/CD concepts, shows how to install and register a GitLab Runner, configure a .gitlab-ci.yml file with dev and test stages, and demonstrates pushing code to trigger automated builds, tests, and deployments for a front‑end project.
The article explains the recent SaaS policy change that limits free GitLab usage to 90 days, outlines the steps to export personal access tokens and import projects from JihuLab.com to GitLab.com, and confirms that the migrated repositories retain full history and issue data.
This article explains the background, challenges, core concepts, automation techniques, toolchain, process improvements, and practical implementation steps of continuous integration (CI) for traditional enterprises, highlighting benefits such as higher software quality, faster feedback, reduced risk, and more efficient team collaboration.
This article describes Huolala's journey from a legacy PHP codebase to a Java‑centric microservice architecture, the common misconceptions and difficulties of unit testing, and the design of an automated CI/CD pipeline that integrates Tekton, SonarQube, GitLab Runner, JUnit5, and Mockito to enforce coverage gates and improve code quality.
This guide explains how to generate, add, and test distinct SSH keys for GitHub and GitLab, configure a SSH config file to use the appropriate key for each host, and includes all necessary commands and screenshots for a smooth setup.
To keep ahead of hackers and fraud, a global cybersecurity firm replaced its fragmented cron‑based build, test, and release processes with a unified Jenkins CI/CD pipeline, integrating GitLab, Docker, and monitoring tools, thereby automating deployments, improving visibility, and streamlining DevSecOps across multiple projects.
This guide explains how to obtain a GitLab access token, download a Go-based cloning tool, configure its parameters, and run it to automatically fetch all groups and projects from a GitLab instance, with full source code examples for customization.
This article outlines a comprehensive, lightweight CI/CD automation solution built on DevOps principles, detailing the evolution from traditional deployment to containerized workflows, the design of a multi‑project, plug‑in task system, and practical implementation steps using GitLab CI, Docker, and Go.
This informal blog recounts a developer’s hands‑on journey from puzzling over the buzzword “containerization” to building an automated GitLab‑CI, Docker, and Kubernetes pipeline, highlighting practical benefits, challenges, and the humorous “mop‑up” moments that make the transition both enlightening and entertaining.
This guide explains how to set up a self‑hosted GitLab server on an Ubuntu virtual machine using Docker and Docker‑Compose, covering environment preparation, Docker image retrieval, compose file creation, container launch, password reset, and basic GitLab usage such as user registration, project creation, SSH key configuration, and code cloning.
This article provides a detailed tutorial on designing CI/CD pipelines using Jenkins, GitLab webhooks, and GitOps practices, covering single- and multi-application workflow designs, Jenkinsfile configurations for build, test, SonarQube scanning, Docker image creation, and Kubernetes deployment with Helm.
The 2023 GitLab DevSecOps survey of over 5,000 IT leaders, CISOs, and developers across multiple industries reveals heightened security focus, growing AI/ML use in testing, and persistent tool‑chain management obstacles that hinder productivity and compliance efforts.
This article explains why efficiency matters in software delivery, introduces CI/CD concepts and tools like Jenkins and GitLab, details installing GitLab Runner, walks through pipeline configuration with key YAML keywords, and emphasizes that mastering DevOps principles and tools dramatically improves development productivity.
This guide walks through registering Bytebase Cloud, configuring GitOps for database SQL review with GitLab, testing the workflow, and examining the CI/CD script that automatically reviews SQL changes, while also discussing practical considerations and feedback from the experience.
This article explains how GitLab CI/CD can be configured to run cross‑project pipelines, enabling automated testing and deployment of microservices by adding bridge jobs, specifying downstream branches, and passing variables, while illustrating the process with code examples and pipeline visualizations.
This article walks through creating a GitLab code‑review bot that leverages the ChatGPT API, detailing request handling with Axios, constructing prompts, interacting with both ChatGPT and GitLab APIs, and posting automated review comments back to merge requests.
A stored XSS vulnerability (CVE-2023-0050) in affected GitLab CE/EE versions allows attackers to execute arbitrary JavaScript via crafted Kroki diagrams, with a broad impact and remediation requiring upgrades to version 15.7.8 or later.
This guide explains why traditional DBA tasks are tedious, introduces Bytebase as a reliable database CI/CD platform, and provides step‑by‑step instructions for deploying Bytebase and PostgreSQL on Kubernetes, configuring GitLab integration, managing users, instances, projects, environments, and performing schema changes and data operations.
The 2023 DevOps training course offers live weekend sessions covering foundational DevOps theory, Jenkins pipelines, GitLab CI/CD, Argo CD, Terraform infrastructure, Kubernetes deployment, and related tools, with detailed module breakdowns and a year‑long video replay archive.
This article explains what a Jenkins Pipeline is, outlines its role in CI/CD and DevOps, and provides step‑by‑step instructions for creating pipeline jobs using both inline Pipeline Script and SCM‑based Jenkinsfile approaches, including sample code and GitLab trigger configuration.
This guide walks through deploying a Spring application using Docker Compose, Jenkins, GitLab, and Maven, covering password retrieval, plugin installation, GitLab host configuration, access token creation, Jenkins setup, Maven build commands, and verification of the generated JAR file.
This guide explains how to set up Jenkins and GitLab containers using Docker Compose, including the required compose files, startup commands, and steps to retrieve initial passwords for accessing the services.
This guide explains how to configure and run GitLab secret detection to scan a repository for exposed credentials such as passwords, API keys, JWTs, and private keys, using custom rules, test files, pipeline execution, and result analysis.
Elon Musk announced his resignation as Twitter CEO following a poll, while Google’s Sundar Pichai highlighted AI’s broader impact and unveiled Google Lens handwriting recognition, Linux integrated Zstd 1.5.2 into kernel 6.2, GitLab released a Web IDE beta, and PHP 8.2 introduced readonly classes and new types.
This guide explains how to set up SSH keys on Jenkins and a GitLab repository so Jenkins can securely pull code, detailing the required public‑key addition to the repo, private‑key credential configuration in Jenkins, and a test job to verify the pull.
This article provides a step‑by‑step guide to seamlessly integrate Bytebase’s SQL review feature into GitHub and GitLab CI/CD pipelines, covering prerequisite setup, configuring the SQL review CI, and verifying automatic SQL script checks on merge requests.
The advisory details a GitLab CE/EE vulnerability (CVE‑2022‑2882) that allows authenticated attackers to modify integration URLs and steal GitHub integration access tokens, lists affected versions across community and enterprise editions, and recommends upgrading to specific patched releases.
This article outlines how our team overhauled the CI/CD pipeline, migrated from Jenkins to GitLab CI, introduced Kubernetes‑based execution, automated branch management via Jira integration, restructured artifact storage with JFrog, and built an in‑house SCA solution, all to boost development efficiency, reduce manual errors, and secure software delivery.
The article describes how Beetle’s development workflow was improved by using GitLab webhooks to automatically publish JAR packages, trigger compilation, deployment, and CI checks, while notifying users via enterprise WeChat, thereby reducing manual steps and waiting time for developers and testers.
GitLab’s onboarding handbook bans Windows on company devices, mandates macOS or Linux for security, outlines reasons for the restriction, and lists approved Apple and Dell hardware models along with guidelines for personal or rented equipment, emphasizing privacy, compliance, and timely delivery.
Alibaba Cloud reports slowing internet demand but rising industrial digitalization, while Python hits a historic market‑share high and GitLab bans Windows and prunes idle projects, together highlighting evolving trends in cloud strategy, programming language popularity, and open‑source platform security.
Learn how to securely self‑host a GitLab instance on an Ubuntu server using Docker, covering dependency installation, SSH port configuration, Docker volume setup, compose file creation, container deployment, and accessing the web interface, with alternative deployment methods for troubleshooting.
This article evaluates whether the distributed databases CockroachDB and YugabyteDB can replace PostgreSQL as the backend for GitLab, detailing the test environment, migration steps, functional checks across core GitLab features, observed errors, and a final comparison of compatibility and stability.
This article evaluates GitLab's compatibility with two PostgreSQL‑compatible distributed databases, CockroachDB and YugabyteDB, by setting up identical environments, running the GitLab setup process, documenting failures and successes, and drawing conclusions about extension support, index compatibility, and overall feasibility.
This comprehensive guide explores the origins, evolution, and classification of software testing, outlines automation tools and conditions, discusses agile and DevOps integration, and provides practical step‑by‑step best practices for continuous testing using GitLab in early‑stage companies.
An in‑depth analysis reveals that JiHu, the GitLab‑backed joint venture in China, claims local decision‑making but is actually controlled by GitLab through majority equity, consolidated financial reporting, and restrictive security policies, raising serious governance and national‑security concerns.
This comprehensive guide walks you through installing, configuring, and upgrading the cloud‑native continuous delivery platform Zadig—including MySQL setup, Helm chart deployment, GitLab integration, environment and pipeline management, and optional SonarQube code scanning—providing practical commands and screenshots for end‑to‑end implementation.
Arm Open Source announced the migration of dozens of its open‑source projects from GitHub to GitLab, citing greater cost‑effectiveness, reduced vendor lock‑in, enhanced security, and the ability to self‑host an enterprise‑grade, open‑source platform that aligns with Arm’s architecture and growth plans.
This guide demonstrates how to configure GitLab and Jenkins to trigger a pipeline automatically after a merge request is merged, using Jenkins' Generic Webhook plugin, including job setup, webhook URL generation, GitLab project configuration, data analysis, and pipeline script examples.
This guide walks through setting up the GitLab CE repository, installing GitLab, generating SSL certificates, configuring GitLab and Nginx for HTTPS, and verifying access on a CentOS server using command‑line operations.
This guide explains how to retrieve and change the temporary GitLab root password generated during a Terraform deployment, outlines two recovery methods—including using the password‑reset feature and directly updating the password through the GitLab Rails console with example code.
This guide explains how to use the GitLab API together with simple Bash scripts to automatically retrieve a list of projects, extract their SSH URLs, and perform bulk cloning and updating of repositories, providing a practical semi‑automated solution for managing many GitLab projects at once.
This guide walks through installing GitLab on a CentOS server, configuring its external URL, setting up admin credentials, performing basic GitLab operations such as disabling auto‑registration, creating projects, configuring SSH keys, testing repository cloning, and configuring webhooks and backup management.
This article explains how to use Tekton Trigger to automatically start PipelineRuns from GitLab webhook events, covering the core components, CRD definitions, installation steps, and detailed configurations of TriggerTemplate, TriggerBinding, EventListener, ServiceAccount, Ingress, and secret management, enabling fully automated CI/CD on Kubernetes.
The article covers DJI’s denial of aiding Russia, the latest features in GitLab 14.9, the official launch of React 18 with its new concurrent capabilities, and a developer’s creative project that prints GitHub issues using a Raspberry Pi‑connected receipt printer.
This article provides a detailed guide to structuring GitLab CI/CD pipelines for Java projects, covering job templates for building, testing, code analysis, artifact handling, and Kubernetes deployment, along with variable definitions, workflow rules, and stage configurations to enable flexible and automated DevOps workflows.
This guide explains how to configure Go 1.13+ to work with private GitLab repositories by using environment variables such as GOPRIVATE, GONOPROXY, and GONOSUMDB, covering common errors with go get, proxy settings, and checksum verification.
The article describes Vivo’s plugin management platform for activity components, built with a Midway Node.js backend, Vue.js frontend, and MySQL, which automates component extraction, Markdown documentation, GitLab hook‑driven NPM package retrieval, and AST‑based export parsing to provide a reusable library that has already saved over 20 person‑days of development effort.
This tutorial walks you through installing KubeSphere, deploying GitLab Community Edition via Helm, configuring a minimal GitLab setup, creating a sample NodeJS project, disabling Auto DevOps, writing a Jenkinsfile, and linking GitLab with KubeSphere DevOps to run both scripted and graphical CI/CD pipelines, plus optional SSH access.
This guide demonstrates how to integrate GitLab and Jenkins with Kubernetes to achieve automated, multi-environment deployments, covering project configuration, Dockerfile creation, build scripts, Jenkins pipeline setup, Kubernetes resources, and best practices for scaling, rolling updates, and service management in a production-grade cloud native architecture.
This guide introduces GitLab CI/CD by explaining pipelines, jobs, stages, runner registration, and SSH‑based deployment, providing a complete example .gitlab-ci.yml and Docker‑based runner setup for beginners who want to automate build, test, and release processes.
