|
Configure
|
|
|
Auto DevOps
|
Set up your app’s entire lifecycle.
|
|
ChatOps
|
Trigger CI jobs from chat, with results sent back to the channel.
|
|
Connect to cloud services
|
Connect to cloud providers using OpenID Connect (OIDC) to retrieve temporary credentials to access services or secrets.
|
|
Verify
|
|
|
CI services
|
Link Docker containers with your base image.
|
|
GitLab CI/CD for external repositories
|
Get the benefits of GitLab CI/CD combined with repositories in GitHub and Bitbucket Cloud.
|
|
Interactive Web Terminals
|
Open an interactive web terminal to debug the running jobs.
|
|
Review Apps
|
Configure GitLab CI/CD to preview code changes.
|
|
Unit test reports
|
Identify test failures directly on merge requests.
|
|
Using Docker images
|
Use GitLab and GitLab Runner with Docker to build and test applications.
|
|
Release
|
|
|
Auto Deploy
|
Deploy your application to a production environment in a Kubernetes cluster.
|
|
Building Docker images
|
Maintain Docker-based projects using GitLab CI/CD.
|
|
Canary Deployments
|
Ship features to only a portion of your pods and let a percentage of your user base to visit the temporarily deployed feature.
|
|
Deploy boards
|
Check the current health and status of each CI/CD environment running on Kubernetes.
|
|
Feature flags
|
Deploy your features behind Feature flags.
|
|
GitLab Pages
|
Deploy static websites.
|
|
GitLab Releases
|
Add release notes to Git tags.
|
|
Cloud deployment
|
Deploy your application to a main cloud provider.
|
|
Secure
|
|
|
Code Quality
|
Analyze your source code quality.
|
|
Container Scanning
|
Scan your container images for known vulnerabilities.
|
|
Coverage-guided fuzz testing
|
Test your application’s behavior by providing randomized input.
|
|
Dynamic Application Security Testing
|
Test your application’s runtime behavior for vulnerabilities.
|
|
Dependency Scanning
|
Analyze your dependencies for known vulnerabilities.
|
|
Infrastructure as Code scanning
|
Scan your IaC configuration files for known vulnerabilities.
|
|
License Scanning
|
Search your project dependencies for their licenses.
|
|
Secret Detection
|
Search your application’s source code for secrets.
|
|
Static Application Security Testing
|
Test your application’s source code for known vulnerabilities.
|
|
Web API fuzz testing
|
Test your application’s API behavior by providing randomized input.
|
|
Govern
|
|
|
Compliance frameworks
|
Enforce a GitLab CI/CD configuration on all projects in a group.
|
|
Scan execution policies
|
Enforce security scans run on a specified schedule or with the project pipeline.
|
|
Scan results policies
|
Enforce action based on results of a pipeline security scan.
|