4 ms·
It doesn’t though. I need a secure, maintainable, audited, backed-up solution which would pass a SOC2 audit.
by jahewson 5y ago
It doesn’t though. I need a secure, maintainable, audited, backed-up solution which would pass a SOC2 audit.
- hedora 5y agoAny soc2 auditor (or other security auditor) that will sign off on self-hosted gitlab, but not self-hosted git should have their accreditation pulled! Git's attack surface and trusted computing base are a subset of gitlab's. Even if gitlab security were perfect, it would still be no better than git.