GitLab
Follow
New CIS GitLab Benchmark scanner boosts security and compliance
GitLab's CIS Benchmark scanner, gitlabcis, is an open-source Python CLI tool that audits a GitLab project against the Center for Internet Security (CIS) GitLab Benchmark and delivers recommendations as code formatted in YAML. The CIS GitLab Benchmark was introduced in April to improve security and offer hardening recommendations to GitLab's customers. The benchmark is available for download from the CIS website. To install and use the gitlabcis scanner, users can download and install it using pip via pypi or download the source code from the releases page. The scanner takes one positional argument (URL) and then options, and the full command line options can be found in the documentation. The scanner currently only accepts a project URL input and observes configuration at a project level, but it does support administrative controls. The GitLab scanner and product roadmap aim to address functionality gaps, including accepting instances or groups as input and incorporating the CIS GitLab Benchmark into the Compliance Adherence Report. The creation of the scanner allowed GitLab to contribute two features back into the product with the help of the community. The GitLab compliance team is working on incorporating the CIS GitLab Benchmark and other standards into the Compliance Adherence Report, which will allow customers real-time reviews of instances, groups, and projects across a wide set of standards. Users can contribute to the gitlabcis scanner project and learn more about the CIS GitLab Benchmark in the public project.