DEVOPSdigest

GitLab announces the next iteration of its single application with its 14 release.

This release enables global businesses to advance their adoption of modern DevOps by replacing disparate technologies and toolchains with a single DevOps platform that is configured to work by default. With the product innovation leading up to this release and additional functionality being shipped each month, GitLab is furthering its commitment to bringing the most advanced DevOps platform to businesses.

“With the rise of remote work and increased focus on digital transformation, businesses today are grappling with siloed teams and pressure to deliver secure software at extraordinary speeds to compete within the market,” said Scott Williamson, Chief Product Officer at GitLab Inc. “With the product innovation leading up to GitLab 14 and our product plans for the future, we will continue to work to push the industry forward by providing a modern DevOps Platform in a single application so companies can bring together their teams in one place enabling them to innovate and accelerate their software development processes.”

As businesses transition to modern DevOps practices, the pivot from complex toolchains to a single DevOps platform is becoming more of a reality. GitLab’s consistent and efficient developer and operator experience leads to a simplified and more predictable software development lifecycle. GitLab allows teams to use one tool for source code management (SCM), continuous integration (CI), and continuous delivery (CD) making teams more efficient and productive with streamlined collaboration.

Key focus areas and development features include:

- Pipeline Editor: Lowers the CI/CD barrier to entry for novices and accelerates power users with visual authoring and versioning, continuous validation, and pipeline visualization.

- GitLab Kubernetes Agent: Enables secure, cloud-native GitOps. GitLab also meets customers where they are, supporting GitOps with agent-based and agentless approaches, and for deployments anywhere, regardless of whether infrastructure is cloud-native.

Instrumenting systems to surface meaningful metrics is difficult and time-consuming; many businesses struggle to find the metrics that map their DevOps investments to business results. With GitLab’s CI/CD dashboard, deployment frequency charts, and monitoring, organizations gain confidence in their ability to drive both team performance and competitive advantage, with visibility on lead time for changes, change failure rate, deployment frequency, time to restore service (collectively known as the DORA4 metrics), and supporting value stream analytics that identifies and breaks down bottlenecks.

New and upcoming metrics and reporting features include:

- Value Stream Analytics: Identify inefficiencies and their root causes in workflows, helping users move the needle on DORA metrics. GitLab’s transparent product roadmap prioritizes actionable analytics to optimize users’ value stream and DevOps return on investment (ROI).

- Deployment Frequency Charts and Monitoring: Enables development teams to monitor the efficiency of deployments over time, find bottlenecks, and know when to make improvements with deployment frequency charts

- CI/CD Dashboard: Measure the efficiency of your development lifecycle with new charts showing lead time for changes — from code commit to production — built into the GitLab CI/CD Dashboard.

To stay competitive, businesses need to be able to deliver modern applications quickly while also not compromising on security and compliance best practices. Development teams must collaborate closely with their security team counterparts in order to find, triage, and address security vulnerabilities early in the DevOps lifecycle. Built-in application security testing and compliance frameworks enable businesses to mitigate risk while maintaining development velocity. GitLab’s modern DevOps Platform empowers development teams to efficiently create secure code, security teams to have better visibility into their security risk, and compliance teams to have auditability from the first line of code written to applications deployed in production.

New and upcoming security and compliance features include:

- Fuzz Testing: GitLab has shifted fuzz testing left into the heart of developers’ CI/CD workflow, through acquisitions of Fuzzit and Peach Tech, adding both coverage-guided and behavioral fuzz testing to its application security testing capabilities. This enables developers to discover software defects that may lead to exploitable vulnerabilities missed by traditional testing practices.

- Security Dashboards and Vulnerability Reports: GitLab’s Vulnerability Management has evolved into comprehensive Security Dashboards and Vulnerability Reports streamlining organizational overhead of security risk management enabling collaboration between development and security teams while increasing DevOps efficiency and velocity.

- Modern vulnerability scanning: To continue to provide the latest techniques in application security scanning, GitLab has partnered with the Semgrep and Trivy communities to provide greater access to the open source security community. These partnerships will increase the depth of GitLab’s shift left security approach while also empowering GitLab users to connect to the broader community helping everyone be more secure.

- Compliance pipeline configurations: For organizations needing to implement compliance requirements in their DevOps workflow, GitLab provides the ability to enforce even more separation of duties by setting up immutable pipeline definitions for their specific compliance framework needs.