Full security scanner coverage... Note
GitLab

Full security scanner coverage of your codebase in minutes

CI/CD platforms face scalability issues in securing code pipelines at scale as organizations grow. Manually configuring scanners across projects becomes unmanageable with increasing code velocity driven by AI. GitLab 19.0 introduces security configuration profiles to tackle this challenge. These profiles are centralized settings that define how and when security scanners run. This simplifies security by eliminating the need to set up scanners in each project's files. The profiles enable SAST, dependency scanning, and secret detection across projects from day one. These profiles automate scans on merge request and branch pipelines for SAST and dependency scanning. Secret detection also includes push protection to catch secrets in real-time. Benefits include standardized coverage, catching vulnerabilities before release, and preventing compromised dependencies. Security configuration profiles are easily implemented through GitLab's Security Inventory. They require GitLab Ultimate and can be applied to individual projects or entire groups. Both profile-based and legacy configurations can coexist during migration.