GitLab on widerin

Gitlab Security Products with Java and Gradle

Sun, 08 Mar 2020 00:00:00 +0000

GitLab security products have been constantly improving support for different build tools and programming languages.

My recent contribution to License compliance allows now to inject commands SETUP_CMD environment variable to the core to bypass the package manager auto-detection and make use of the ./gradlew Gradle wrapper script.

For example:

include:
- template: Security/License-Scanning.gitlab-ci.yml
variables:
SETUP_CMD: sh my-custom-install-script.sh

In this example, my-custom-install-script.sh is a shell script at the root directory of your project.

Gitlab License Management with Java 11

Fri, 21 Dec 2018 00:00:00 +0000

If built-in License Management functionality does not support the programming language requirements you have, you can customize the License Management docker image.

This guide shows you how to use License Management with OpenJDK 11 or later.

License Management definition

License Management helps you find what licenses your project uses in its dependencies and decide for each of then whether to allow it or forbid it.

License Compliance report under pipelines

GitLab SAST and Java 11

Wed, 19 Dec 2018 00:00:00 +0000

If built-in Static Application Security Testing functionality does not support the programming language requirements you have, you can customize the analyzer docker images in [GitLab]’s sast pipeline job.

This guide shows you how to use SAST with OpenJDK 11 or later.

SAST definition

Static Application Security Testing provides you information if

your application is vulnerable by using an external library in a specific version which is known to be vulnerable or
your code has a potentially dangerous attribute in a class, or unsafe code that can lead to unintended code execution.

Project Security Dashboard

Continuous integration with GitLab and Docker

Tue, 11 Oct 2016 00:00:00 +0000

I’ve given a talk about continuous integration with GitLab and Docker on Developer Meetup VlbgWebDev. The Meetup takes place every second Tuesday every Month and i’ve met some old colleagues there.

It was a nice Meetup with lots of discussions, that’s why i published my sample code to GitLab and my slides to Speakerdeck. First intention was to do some Pyramid demo but after I’ve heard there are some Flask people, I’ve added Flask demos as well :-)

GitLab as OAuth provider for Weblate

Thu, 28 Apr 2016 00:00:00 +0000

Weblate is built on Django and you can use a lot of authentication plugins. After my contribution to django-allauth and the backporting work of glensc and omab to django-social-auth it’s very easy to integrate [GitLab]’s authentication provider with Weblate

GitLab

All you have to do on GitLab is configuration through webinterface. Go to https://gitlab.com/profile/applications and register a new application.

Name: Weblate
Redirect URI: `https://weblate.yourdomain.tld/accounts/complete/GitLab/``

After registering your new application you’ll get your Application Key and Secret. You’ll need this later for configuration

Maintaining manual gitlab installation with ansible

Sun, 03 Jan 2016 00:00:00 +0000

A long time ago we started using GitLab. It was a greate step forward and definitly the right decision to switch from SVN to a distributed version control system. If you want to try GitLab you should definitly install it using GitLab Omnibus distribution.

Manual installation

But this long time ago there was no omnibus installation available so we installed GitLab with a manual git checkout. Their monthly release cycle brought some upgrade effort every month - there was an upgrade tool available which was marked as discontinued - so i started to write some anisble scripts to handle the upgrade process.