4 ms·
Depending on how many thousands of $ per year, it would probably be cheaper and more reliable to self-host GitLab. It's better in terms of organisational struct
by sofixa 5mo ago
Depending on how many thousands of $ per year, it would probably be cheaper and more reliable to self-host GitLab. It's better in terms of organisational structure (you can have one, including access and secret inheritance), and (personal view) Gitlab-CI is better than GitHub Actions because it doesn't push you towards a JavaScript/NPM style dependency hell. And it's actually fairly easy to self-hosted, with options from a single machine with an omnibus package that handles everything to a full blown autoscaling Kubernetes deployment.
- hsbauauvhabzb 5mo agoSounds good until you see their cvedetails page
- sofixa 5mo agoI mean, the GitHub Actions supply chain risks and attacks definitely compensate for any GitLab security vulnerabilities you can think of.
- user43928 5mo ago[dead]
- lazystone 5mo agoHide it behind VPN, so it's not accessible from outside.
- hsbauauvhabzb 5mo agoNow patching becomes a responsibility, unless your organisation is willing to run knowingly vulnerable software.
- PunchyHamster 5mo agoWhen you own it you can just limit it into vpn-ed company users, that significantly cuts down on the area that can be hit