Skip to main content

GitLab

What is GitLab?

GitLab is a web-based DevSecOps platform (software development lifecycle management) that provides a single application for source code management, Continuous Integration and Continuous Deployment (CI/CD), security scanning, and collaborative software delivery.

  • Single-application DevSecOps platform covering source code management, CI/CD, security, and collaboration (DevSecOps platform)
  • Git-based repository hosting with branching, merge requests, code review, and approvals (source code management)
  • Integrated CI/CD pipelines with runners, jobs, and deployment automation (continuous integration and continuous delivery)
  • Built-in security and compliance features such as code scanning, dependency scanning, and policy controls (application security and compliance)
  • Project management, issue tracking, and planning boards for development workflows (application lifecycle and project management)
Show more

More About GitLab

GitLab is a DevSecOps platform (software development lifecycle management) that unifies source code management, Continuous Integration (CI) and delivery, security, and collaboration in a single web-based application. It is designed to support the entire software delivery lifecycle from planning and coding through testing, security validation, deployment, and monitoring. GitLab is built around the Git Version Control System (VCS) (source control) and provides a user interface, APIs, and automation tools that align with modern software delivery practices.

At its core, GitLab provides Git repository hosting, branching, and merge workflows (source code management). Developers work with repositories using Git while GitLab adds features for merge requests, inline code review, approvals, and protected branches. Access controls and permissions (identity and access management) are integrated with groups, projects, and role-based permissions, enabling enterprises to structure repositories and teams according to organizational boundaries and compliance requirements.

GitLab includes integrated CI/CD (continuous integration and continuous delivery) through GitLab CI/CD pipelines, which use YAML-based configuration files stored in the repository. Pipelines define stages, jobs, and environments, and can build, test, and deploy applications to various targets such as virtual machines, Kubernetes clusters, and cloud services (deployment automation). GitLab Runners execute jobs on shared or dedicated infrastructure, and artifacts and registries support container images and build outputs (artifact and container management).

The platform incorporates built-in security features (application security) including Static Application Security Testing (SAST), dependency scanning, container scanning, and secret detection, depending on the edition and configuration. Policy management and compliance features (governance and compliance) allow organizations to define rules for approvals, code ownership, and audit trails. These capabilities support regulated environments and organizations that require traceability and standardized processes.

GitLab also provides planning and collaboration tools (project and work management) such as issues, boards, epics, milestones, and wikis. These tools connect planning work items directly to code changes and CI/CD pipelines, enabling traceability from requirements through deployment. Integrations and APIs (integration platform) allow GitLab to interoperate with external systems including chat tools, incident management platforms, and monitoring solutions, as well as to automate workflows using webhooks and Representational State Transfer (REST) and GraphQL APIs.

Enterprises deploy GitLab in different models, including a self-managed installation on their own infrastructure or consumption as a Software-as-a-Service (SaaS) service hosted by GitLab (deployment options). GitLab supports integration with identity providers using Single Sign-On (SSO) and Security Assertion Markup Language (SAML) (identity and access management) and can integrate with Kubernetes clusters for environment management and deployment (container orchestration integration). In enterprise contexts, GitLab is positioned as a DevSecOps platform that consolidates tooling for version control, CI/CD, security, and planning into one managed system, supporting governance, auditability, and standardized software delivery practices.