gitlab-security

4 ms·

1.
by gitlab-security 7y ago
Thank you for your post and questions. We would welcome you to apply for a role at GitLab that looks interesting to you. Our guideline for security researchers is that if you are a GitLab employee, you would not be eligible for a bounty awa
2.
by gitlab-security 7y ago
Thank you for your feedback and suggestions. Unfortunately, for each of these proposals, we're likely to have users asking us why we are restricting and/or blocking access. A better defense-in-depth strategy would be to scan each
3.
by gitlab-security 7y ago
To provide additional context, on GitLab.com, we maintain two weeks' backups. The last time we restored a single project repo, it was a significant effort that utilized many hours of an SRE's time to complete.
4.
by gitlab-security 7y ago
Confirming the previous poster's comment on GitLab Pages domain ownership verification functionality, which was rolled out in February of 2018. https://about.gitlab.com/2018/02/05/gitlab-pages-custom-doma
5.
by gitlab-security 8y ago
Thank you for your feedback and comment. The message is generated by our automation capability. We want to keep hackers engaged by making sure they know that the issue is successfully submitted. We usually review the report sooner than prom
6.
by gitlab-security 8y ago
Thank you for the feedback. One of our core values is transparency. Very few companies are as transparent as GitLab. We take our users' data security extremely seriously. Since total CVE count is only one metric to measure the security
7.
by gitlab-security 8y ago
The monthly security release for GitLab was today, and this release was coordinated with the Git security release. https://about.gitlab.com/2018/05/29/security-release-gitlab-... In addition to our recently i
8.
by gitlab-security 9y ago
We apologize that you haven't received an email notification. We've sent email notifications to as many customers as possible, but obviously did not get everyone. Rest assured that when domain verification rolls out, there will be
9.
by gitlab-security 9y ago
This is a good suggestion, and we have created an issue to implement this https://gitlab.com/gitlab-org/gitlab-ce/issues/43186 . Thank you for the constructive feedback.