HNGlance

Top Best New Show

Security testing of Gitlab self-hosted deployments

https://github.com/kulkansecurity/GitLab-Security-Checklist

by laserspeed • 11 months ago

3 3 11 months ago

GI

Related Stories

Loading related stories...

Comments

3

laserspeed2• 11 months ago

A checklist to help pentesters and auditors assess Self-Hosted GitLab instances. Checks include misconfigurations and weaknesses that could lead to privilege escalation and code or secrets theft/abuse. It's a first version focused on Authentication, CI/CD Runners, CI/CD Variables and Project configurations.

gkoos• 11 months ago

Good start, covers the big GitLab pitfalls (auth, runners, vars, project config). The the fun part to be added: runner isolation/cleanup, built-in scans (SAST/dep/secret), logging/audit trails, push-rules (signed commits), and secret management practices. Solid so far tho.

laserspeed2• 11 months ago

Agreed! Those are indeed some nice pointers to add.

Source preview

github.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms