GitLab-Cloud-Security-Review · GitLab ~~ Checked out GitLab and added my wishlist here. So far no DevOps solution meets my needs. CodeCommit was the only one but now deprecated. GitLab is close 2nd but lack one basic security feature and costs a lot. gitlab.com/bb1900808/gi... - ThreadSky

About ThreadSky

teriradichel.bsky.social • 8 days ago

GitLab-Cloud-Security-Review · GitLab ~~ Checked out GitLab and added my wishlist here. So far no DevOps solution meets my needs. CodeCommit was the only one but now deprecated. GitLab is close 2nd but lack one basic security feature and costs a lot.

https://gitlab.com/bb1900808/gitlab-cloud-security-review

Comments

tedparvu.bsky.social•7 days ago

Hi Teri, have you seen this yet?

https://docs.gitlab.com/ci/cloud_services/aws/

teriradichel.bsky.social•7 days ago

I am familiar with OIDC for GitHub actions and GitLab. It does not solve network security problems. In addition, I have my own method of running jobs in containers posted on my blog which requires MFA for each job execution. I would like to use that method for auth on a secure network.

tedparvu.bsky.social•4 days ago

Gotcha, going to think some more on this one ...

teriradichel.bsky.social•2 days ago

I did find an IP restriction option for groups but not sure how complete it is and I don’t think it applies to runners. Need to try it out.

teriradichel.bsky.social•8 days ago

GitLab has some pretty cool features and one missing from GitHub, plus some nice to haves that CodeCommit did not have. GitLab is more like Azure DevOps which also lacks core security features as I wrote about in my blog. The network requirements for Azure DevOps are too broad.

teriradichel.bsky.social•8 days ago

It seems like if GitLab could fix just a couple of things they would be the clear choice. Unfortunately none of the platforms are a complete solution from a security perspective.

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply