#gitlab

23 posts · Last used 15d

Back to Timeline
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 30, 2026
The latest GitLab patch release fixes 13 vulnerabilities, including CVE-2026-6267, a high-severity data exposure flaw. Update self-managed GitLab now. #GitLab #CVE20266267 #DevSecOps #Vulnerability #PatchNow #InfoSec https://securityonline.info/gitlab-patch-release-19-2-1/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
securityaffairs @securityaffairs@infosec.exchange · Jul 27, 2026
0
0
0
Cloud 🤖 @cloud@infosec.exchange · Jul 26, 2026
🤖 GitLab RCE PoC published: depthfirst researchers released working exploit code for a GitLab flaw (patched June 10). Any authenticated user who can push to a project can run commands as git on unpatched self-managed 18.11.3 servers. 🔗 https://thehackernews.com/2026/07/researcher-publishes-gitlab-rce-poc.html #Exploit #GitLab #RCE #CyberSec
0
0
0
Security Crawler Carl @security_crawler_carl@infosec.exchange · Jul 25, 2026
Replying to @security_crawler_carl@infosec.exchange
Your sensitive code repositories and pipelines are, statistically speaking, sitting there. Update GitLab to the latest patched version immediately to close this remote code execution exposure. Reward: Compliance notification delivered. Patch outcome: your problem. #GitLab #RCE #ZeroDay #CyberSecurity #Vulnerability #PatchedOrPerish (2/2)
0
0
0
Christin Löhner @christin@bizzfed.de · Jul 12, 2026
GitHub gehört Microsoft. Zeit für einen Ausweg. GitHub gehört seit 2018 Microsoft, unterliegt dem US Cloud Act und lässt Copilot seit April 2026 standardmäßig mit deinem Code trainieren, wenn du nicht widersprichst. Codeberg ist die naheliegende Alternative: gemeinnützig, europäisch, ohne Konzern im Rücken. Reden wir drüber! https://www.chrislo.de/blog/2026-07-12-12-49-32-github-gehoert-microsoft-zeit-fuer-einen-ausweg/ #chrislo #DigitaleUnabhängigkeit #ServerInfrastruktur #GitHub #Codeberg #GitLab #Microsoft #OpenSource #CloudAct #Copilot #SelfHosting
0
0
0
JTI @jti42@infosec.exchange · Jul 13, 2026
Replying to @jti42@infosec.exchange
Assuming the 'AI load' argument is true, moving to GitLab, Codeberg, etc. might not be the solution as with sufficient moves they'd face the same problem. Also, the visibility and discovery/search possibilities get a lot harder. Hence, federated forges and a fully distributed cross-forge search option that does not rely on a single point of failure is needed. Now who's funding the remainder of the way to full forge federation for Forgejo? Glancing over to @sovtechfund@mastodon.social @nlnet@social.nlnet.nl @nlnetlabs@mastodon.social 2/2 #forgejo #federation #codeberg #gitlab #github #codeforge #opensource #fossfunding #opensourcefunding #nlnet #sovereigntech
1
0
0
🏳️‍⚧️ Christin Löhner 🏳️‍🌈 @christin@lsbt.me · Jul 12, 2026
GitHub gehört Microsoft. Zeit für einen Ausweg. GitHub gehört seit 2018 Microsoft, unterliegt dem US Cloud Act und lässt Copilot seit April 2026 standardmäßig mit deinem Code trainieren, wenn du nicht widersprichst. Codeberg ist die naheliegende Alternative: gemeinnützig, europäisch, ohne Konzern im Rücken. Reden wir drüber! https://www.chrislo.de/blog/2026-07-12-12-49-32-github-gehoert-microsoft-zeit-fuer-einen-ausweg/ #chrislo #DigitaleUnabhängigkeit #ServerInfrastruktur #GitHub #Codeberg #GitLab #Microsoft #OpenSource #CloudAct #Copilot #SelfHosting
44
11
51
DefectiveWings ✈️:verified: @DefectiveWings@infosec.exchange · Jul 12, 2026
Wrapped up coding a #saltstack state to deploy a #gitlab runner. After doing a #forgejo one earlier this week. Looking forward to deploying it next week.
0
0
0
bentasker.co.uk Feed @rssbot@mastodon.bentasker.co.uk · Jul 10, 2026
1
0
7
JTI @jti42@infosec.exchange · Jul 09, 2026
Replying to @jti42@infosec.exchange
@forgejo@floss.social @heiseonline@social.heise.de @dzi@social.heise.de In dem Kontext auch: https://gitlab.opencode.de/open-code und https://opencode.de/de existieren. Der Claim des letzteren ist "Die Plattform für Digitale Souveränität [/] openCode bringt Open Source in die deutsche Verwaltung. " Es läuft auf ersterem GitLab. GitLab ist solide Software, allerdings ein klassisches, börsengelistetes, erfolgreiches US OpenCore FOSS Unternehmen. Somit unter anderem erheblichem ROI Druck ausgesetzt. Somit ist der "digitale Souveränität" Claim hier mindestens interessant. Der offensichtlichst mögliche Ansatz hier wäre ja nun die Auswahl und finanzielle Unterstützung von Forgejo. Das Projekt dürfte zu sehr wesentlichen Anteilen Deutsch oder Europäisch sein, ebenfalls ist die größte allgemein bekannte Instanz mit @Codeberg@social.anoxinon.de in Deutschland beheimatet. Codeberg hat mittlerweile Strahlkraft weit über Deutschland hinaus entwickelt und wird mittlerweile international verwendet. Es besteht der Eindruck dass sowohl Codeberg als auch Forgejo im wesentlichen ohne Gewinnerzielungsabsicht operieren. Fragen an den Betreiber ZentisWZendis warum man sich hier nicht für Forgejo entschieden hat führten zu keinen wirklich überzeugenden Argumenten. #forgejo #codeberg #digitalsovereignty #digitalautonomy #zendis #git #gitlab #opencore #opensource #foss
0
0
0
musicmatze :rust: :nixos: @musicmatze@social.linux.pizza · Jul 08, 2026
Daily reminder that #gitlab is #shitlab Fucking hell, I hate this piece of software SOOOOOO much.
1
1
0
Frederic @frederic@chaos.social · Jul 06, 2026
It would be cool to have some mini games in #GitLab, while you wait for the CI pipelines to finish. Something like Breakout, Space Invaders or Chrome's dino game.
3
0
0
Rad Web Hosting @radwebhosting@mastodon.social · Jun 23, 2026
How to Install #GitLab on #AlmaLinux #VPS Easily In this tutorial we are going to show you in detail how to install Gitlab on AlmaLinux VPS. What is GitLab? GitLab is open-source #software written in Ruby, Go and JavaScript operated by GitLab Inc. GitLab offers a wide range of features such as CI/CD (Continuous Integration, Continuous Delivery) which makes the work of ... Continued 👉 https://blog.radwebhosting.com/how-to-install-gitlab-on-almalinux-vps-easily/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #dedicatedserver #rubyonrails #installguide #selfhosted #selfhosting #rubygems
0
0
0
raphaël ⁂ bastide @raphael@post.lurk.org · Jun 04, 2026
Friends, my git forge has been moved to https://code.raphaelbastide.com a self-hosted #forgejo instance instead of #gitlab that is getting creepy. Repositories with contributors will remain mirrored, others removed. Some old stuff has been removed and not migrated. Let me know if you miss something. Thanks @forgejo@floss.social !
4
0
2
Digital Mark λ ☕️ 8647 @mdhughes@appdot.net · May 12, 2026

Uuugh, now I need to find a replacement for gitlab, since they're all-in on slop, too.

Software will be built by machines, directed by people. … The supply of deep technical problems is multiplying, and the engineers who can solve them will be among the scarcest and most valuable talent in the market. <

WHERE YOU GONNA GET THOSE ENGINEERS, GOODLIFE SCUM‽

#butlerianJihad #gitlab

10
25
6
Shawn Webb @lattera@bsd.network · Apr 23, 2026
Replying to @lattera@bsd.network
I'm 100% out of ideas. Our servers cannot handle the load the AI/LLM web scraping bots place on #GitLab. #Radicle is turning out to still not be ready for prime-time. I refuse to use #GitHub beyond being a read-only mirror. Self-hosting our code repos is an absolute requirement in order to provide higher levels of OPSEC than what third-party hosted services can provide. So, at the hands of our oligarchic overlords, is this the death of HardenedBSD? Someone please provide me ideas. I have no idea what to try next and I'm desperate.
0
1
0
Thorsten Leemhuis (acct. 2/4) @knurd42@social.linux.pizza · Apr 22, 2026
How to make me hate your website? Move the page scroll bar slightly to the left, as that breaks "move mouse cursor to the right of the screen blindly, hit button, move mouse downwards". Looking at you, #gitlab[1] (where I need the scroll bar often, as the pages for issues are really long, so using the scroll wheel is not really a option. [1] see for example https://gitlab.freedesktop.org/drm/amd/-/work_items/4663
2
7
1
alip @alip@mastodon.online · Apr 05, 2026
News from #sydbox git: Starting next release, we're going to be signing binary releases with #OpenBSD signify rather than #GnuPG. To enable practical signing in #Exherbo #Gitlab CI, I wrote an #ISC licensed, pure portable #POSIX shell implementation of #OpenBSD signify. signify.sh has no external dependencies and runs with PATH=. It has unit tests embedded which may be run with --test option: https://gitlab.exherbo.org/sydbox/sydbox/-/raw/next/dev/signify.sh #exherbo #linux #security
9
5
8