4 ms·
Would someone share some details on why SAST mentioned in this thread, for those who are not familar with the Gitlab architecture design and product decisions.
by zx8080 3y ago
Would someone share some details on why SAST mentioned in this thread, for those who are not familar with the Gitlab architecture design and product decisions. Thanks.
- tyingq 3y agoTheir product includes a static code analysis tool you can run in ci/cd pipelines, triggered by the existence of some files in your repo. It's the entry point for this exploit. Something the attacker abuses to get rights they shouldn't have. The victim doesn't have to use it at all.