↓ Skip to main content
Romano Roth
  1. Tags/

Merge Request

GitLab DevSecOps Part 10: How to Do a Merge Request the Right Way

·5 mins
DevSecOps GitLab CI/CD DevOps Merge Request Code Review Branch Protection Vulnerability Management Shift Left
In the previous nine sessions Patrick Steger and I built a GitLab DevSecOps pipeline that runs SAST, secret detection, software composition analysis, container scanning and DAST. Useful — but only if it actually catches issues before they reach the default branch. In Part 10 we close that loop: we wire the pipeline into Merge Requests so every change is scanned, the deltas against the default branch are visible, and approvals are required when new high or critical vulnerabilities appear.