PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Shifting Left with Ethical Hackers: A Q&A with GitLab

hackerone.com | vulnerability | #bug-bounty | #cloud | #cloud-security | #gitlab | #devsecops | #interview | #hackerone | #shift-left
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

GitLab's James Ritchey discusses shifting left across DevSecOps, how bug bounty findings improve product security, and how vulnerability patterns help focus internal security efforts in the cloud era.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · about.gitlab.com
Building AI security in the open
GitLab has joined the Open Secure AI Alliance to help advance transparent, adaptable approaches to securing AI systems.
blog · about.gitlab.com
Unblock agentic software delivery with governed code review
Client-side review helps the author move faster. Repo-side review on Duo Agent Platform certifies every merge request against rules you set once, at a flat $0.25 rate per review.
blog · about.gitlab.com
Connect your agents to your software lifecycle with the GitLab MCP server
Run GitLab workflows from your favorite AI application in fewer calls and with leaner context. The GitLab MCP server is now generally available.
Back