Security Risk Management
⚠️ Deprecated: This content has moved to the Security Compliance Adoption Delivery Kit. This page is no longer maintained.
Information security professionals face a daunting task when first adopting GitLab Application Security Testing, whether coming from other scanning software or entering the world of automated security testing for the first time. The workload can overwhelm them. We break it into two distinct phases:
Bulk Triage Phase
Handling vulnerabilities that appear in the Vulnerability Report when scanners are first run on a project
Continuous Security Phase
Handling vulnerabilities that appear after bulk triage has completed, whether because of code changes or newly understood vulnerabilities
Other resources
Issues within AppSec SME channel (GitLab team only)