DevSecOps Pipeline with GitLab with Najib

This hands-on session is tailored for developers, DevOps engineers, or security professionals who want to design and implement a secure CI/CD pipeline using GitLab CI.

We'll cover:

-Designing secure GitLab pipelines with .gitlab-ci.yml

-Integrating SAST, SCA, DAST, secret detection, and container scanning
-Automating security gates to block vulnerable code from merging
-Managing security policies, approvals, and compliance reporting
-Generating and managing SBOMs within GitLab pipelines

Best practices for using GitLab’s built-in security features vs. external tools (e.g., Coverity, BlackDuck)

Bring your own project or use a guided template to get started.