Gitlab Server

Gitlab Server is a self-hosted version of GitLab installed on an organization's own infrastructure, providing Git repository management, CI/CD pipelines, and collaboration tools without relying on GitLab's cloud-hosted SaaS offering.

Usage of Gitlab Server in Delivery Shield

• Delivery Shield integrates with self-managed GitLab Server instances to scan source code and pipelines hosted on your organization's own infrastructure.

• Supports SCM scanning and MR (merge request) gating for on-prem GitLab repositories, with findings contributing to the application's overall security score.

To Integrate Gitlab Server:

1. Navigate to Setup > Integrations.

2. In the Source panel, click Gitlab Server.

3. The Gitlab Server integration page is displayed. Click +New Account.

1. In the popup that appears, enter the following details:

1. Enter the Account Name, Host URL and Token values of your Gitlab Server account.

2. Select the Teams and the corresponding Environments from the dropdown for which you want the integration to be available. The integration will be available for the selected teams and environment only.

   You can select up to 5 teams for the integration to be displayed.

   • An example is given below for reference:

   

   • In the example above,

     • if Team 1, Team 2, and Team 3 are selected, only applications associated with these teams can access the integration. Any applications belonging to other teams, such as Team 4, will not have access to this account.

     • Even if the user who created this account is also an admin for Team 4, the integration account remains restricted and is not available for Team 4.

     • Access to the account is strictly limited to the specified Teams and Environments selected during account creation.

   • For Organization Admins:

     • When an Organization Admin creates an account without selecting specific Teams and Environments, the account will be universally applicable, granting access to all teams and all environments by default.

   • For Team Admins with Multiple Teams:

     • If a Team Admin who manages multiple teams creates an account without specifying particular Teams and Environments, the account will only be accessible to the teams for which the logged-in user holds admin privileges.

3. Click Save. The tool is integrated in the source stage.

4. Once the integration is successful, a success popup message appears at the top right corner of the page. The Gitlab Server integrator is connected and account is listed under Gitlab Server integrator.

To Edit the Values

1. You can edit the entered values by clicking the Edit option.

1. Enter the new URL and token value and click Update.

The new values get updated.