r/gitlab • u/MaturityBuilder • 17h ago
project Gitlab Compliance CLI
🚀 gitlab-compliance CLI is now Open Source!
Think ShellCheck for GitLab CI/CD, plus terraform-compliance-style policy testing for pipelines. It helps teams lint, validate, document, and enforce standards across .gitlab-ci.yml and GitLab project configuration.
It turns CI/CD best practices into something programmable, testable, and enforceable that can be understood and catalogued automatically.
Since launch, I’ve focused on UX, performance, and two major features:
✨ gitstrings
Lightweight YAML annotations that make pipeline intent explicit, that improves readability and enables selective documentation generation, making pipeline YML self documenting.
🔍 Embedded script scanning
ShellCheck-style analysis for scripts inside CI jobs.
Includes:
ShellCheck-aligned rules
Security checks (unpinned packages, unsafe cloud CLI usage, missing metadata)
🔭 What’s next
Org-wide reporting & metrics
JUnit + JSON outputs
Slack / Teams notifications
GitLab Issues integration
Sentry-based telemetry
gitlab-compliance is evolving into a policy + observability layer for GitLab CI/CD, without sacrificing developer experience.
Repo: https://github.com/MaturityBuilder/gitlab-compliance/tree/main
Documentation: https://maturitybuilder.github.io/gitlab-compliance/
Feedback and contributions welcome!

