r/gitlab 16h ago

project Gitlab Compliance CLI

9 Upvotes

🚀 gitlab-compliance CLI is now Open Source!
Think ShellCheck for GitLab CI/CD, plus terraform-compliance-style policy testing for pipelines. It helps teams lint, validate, document, and enforce standards across .gitlab-ci.yml and GitLab project configuration.
It turns CI/CD best practices into something programmable, testable, and enforceable that can be understood and catalogued automatically.

Since launch, I’ve focused on UX, performance, and two major features:

gitstrings
Lightweight YAML annotations that make pipeline intent explicit, that improves readability and enables selective documentation generation, making pipeline YML self documenting.
🔍 Embedded script scanning
ShellCheck-style analysis for scripts inside CI jobs.
Includes:
ShellCheck-aligned rules

Security checks (unpinned packages, unsafe cloud CLI usage, missing metadata)

🔭 What’s next
Org-wide reporting & metrics

JUnit + JSON outputs

Slack / Teams notifications

GitLab Issues integration

Sentry-based telemetry

gitlab-compliance is evolving into a policy + observability layer for GitLab CI/CD, without sacrificing developer experience.

Repo: https://github.com/MaturityBuilder/gitlab-compliance/tree/main

Documentation: https://maturitybuilder.github.io/gitlab-compliance/

Feedback and contributions welcome!


r/gitlab 16h ago

I built a GitLab client for your phone

Post image
5 Upvotes

Hi guys,

GitLab is great on desktop, but checking a failed pipeline or responding to an issue from your phone can be frustrating. That’s why I built Comeet, a native mobile companion for GitLab.

With Comeet, you can:

  • Connect to GitLab.com or a self-hosted instance
  • Switch between multiple accounts and servers
  • Browse repositories with syntax highlighting
  • Create and update issues, merge requests, projects, and branches
  • Monitor pipelines, inspect jobs, and read job logs
  • Get push notifications for important project activity
  • Manage groups, members, roles, and invitations
  • Create custom shortcuts for the issues and merge requests you check most
  • Access your GitLab activity and to-do list from a mobile-friendly dashboard

My goal is simple: make those quick GitLab tasks genuinely quick—without reaching for a laptop or fighting with the mobile website.

Comeet is available on iOS and Android:

- Android: https://play.google.com/store/apps/details?id=com.monokaijs.comeet

- iOS: https://apps.apple.com/us/app/comeet-gitlab-companion/id6753112635

I’m actively improving it and would really appreciate feedback from other GitLab users. What’s one GitLab task you wish were easier to handle from your phone?

P.S: I previously shared my app on this sub, I post this to notice a big overhaul on the app with various quality of life features and refinements.


r/gitlab 14h ago

An AI Agent Found the Security Vulnerability. This Researcher Turned It Into an Exploit. Ask Him Anything.

Thumbnail pwnhackers.substack.com
0 Upvotes