And if you have a moment while consuming all that PHP stuff: There is a severity 10.0 issue in #Gitlab you all should have fixed yesterday too.
#gitlab
28 posts · Last used 13d
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
https://www.darkreading.com/application-security/gitlab-email-addresses-supply-chain-attacks
#cybersecurity #gitlab
Boosted by @trending@homestead.social
WTF has #GitLab gone full bullshit with AI. You can only disable #GitlabDuo via an API request using e.g. CURL? And only on a self-hosted Community Edition, instance-wide, and if you're administrator of it? Honestly?
I'm so glad we left there half a year ago… Thank you so much, @Codeberg@social.anoxinon.de , for NOT going that road! 🤗
Learn why CISA added GitLab CVE-2026-85706 to the Known Exploited Vulnerabilities catalog. Discover how this CVSS 10 flaw allows remote secret extraction.
#GitLab #CVE202685706 #CISA #CyberSecurity #Vulnerability
New.
Rapid7: CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/ @Rapid7Official@infosec.exchange #infosec #GitLab #vulnerability
The latest GitLab patch release fixes 13 vulnerabilities, including CVE-2026-6267, a high-severity data exposure flaw. Update self-managed GitLab now.
#GitLab #CVE20266267 #DevSecOps #Vulnerability #PatchNow #InfoSec
#GitLab Users Urged to Patch After Research Reveals Critical RCE Chain
https://securityaffairs.com/196062/hacking/gitlab-users-urged-to-patch-after-research-reveals-critical-rce-chain.html
#securityaffairs #hacking
🤖 GitLab RCE PoC published: depthfirst researchers released working exploit code for a GitLab flaw (patched June 10). Any authenticated user who can push to a project can run commands as git on unpatched self-managed 18.11.3 servers.
🔗 https://thehackernews.com/2026/07/researcher-publishes-gitlab-rce-poc.html
#Exploit #GitLab #RCE #CyberSec
Replying to
Your sensitive code repositories and pipelines are, statistically speaking, sitting there. Update GitLab to the latest patched version immediately to close this remote code execution exposure.
Reward: Compliance notification delivered. Patch outcome: your problem.
#GitLab #RCE #ZeroDay #CyberSecurity #Vulnerability #PatchedOrPerish (2/2)
GitHub gehört Microsoft. Zeit für einen Ausweg.
GitHub gehört seit 2018 Microsoft, unterliegt dem US Cloud Act und lässt Copilot seit April 2026 standardmäßig mit deinem Code trainieren, wenn du nicht widersprichst. Codeberg ist die naheliegende Alternative: gemeinnützig, europäisch, ohne Konzern im Rücken. Reden wir drüber!
https://www.chrislo.de/blog/2026-07-12-12-49-32-github-gehoert-microsoft-zeit-fuer-einen-ausweg/
#chrislo #DigitaleUnabhängigkeit #ServerInfrastruktur #GitHub #Codeberg #GitLab #Microsoft #OpenSource #CloudAct #Copilot #SelfHosting
Replying to
Assuming the 'AI load' argument is true, moving to GitLab, Codeberg, etc. might not be the solution as with sufficient moves they'd face the same problem.
Also, the visibility and discovery/search possibilities get a lot harder.
Hence, federated forges and a fully distributed cross-forge search option that does not rely on a single point of failure is needed.
Now who's funding the remainder of the way to full forge federation for Forgejo?
Glancing over to
@sovtechfund@mastodon.social@nlnet@social.nlnet.nl @nlnetlabs@mastodon.social
2/2
#forgejo #federation #codeberg #gitlab #github #codeforge #opensource #fossfunding #opensourcefunding #nlnet #sovereigntech
GitHub gehört Microsoft. Zeit für einen Ausweg.
GitHub gehört seit 2018 Microsoft, unterliegt dem US Cloud Act und lässt Copilot seit April 2026 standardmäßig mit deinem Code trainieren, wenn du nicht widersprichst. Codeberg ist die naheliegende Alternative: gemeinnützig, europäisch, ohne Konzern im Rücken. Reden wir drüber!
https://www.chrislo.de/blog/2026-07-12-12-49-32-github-gehoert-microsoft-zeit-fuer-einen-ausweg/
#chrislo #DigitaleUnabhängigkeit #ServerInfrastruktur #GitHub #Codeberg #GitLab #Microsoft #OpenSource #CloudAct #Copilot #SelfHosting
Wrapped up coding a #saltstack state to deploy a #gitlab runner. After doing a #forgejo one earlier this week.
Looking forward to deploying it next week.
New #Blog: Migrating From Gitlab to Forgejo
Author: Ben Tasker
https://www.bentasker.co.uk/posts/blog/software-development/migrating-from-gitlab-to-forgejo.html?utm_source=rss
#forgejo #gitlab #migration #woodpecker-ci
Replying to
@forgejo@floss.social @heiseonline@social.heise.de @dzi@social.heise.de
In dem Kontext auch:
https://gitlab.opencode.de/open-code und
https://opencode.de/de existieren. Der Claim des letzteren ist "Die Plattform für Digitale Souveränität [/] openCode bringt Open Source in die deutsche Verwaltung. "
Es läuft auf ersterem GitLab.
GitLab ist solide Software, allerdings ein klassisches, börsengelistetes, erfolgreiches US OpenCore FOSS Unternehmen. Somit unter anderem erheblichem ROI Druck ausgesetzt.
Somit ist der "digitale Souveränität" Claim hier mindestens interessant.
Der offensichtlichst mögliche Ansatz hier wäre ja nun die Auswahl und finanzielle Unterstützung von Forgejo.
Das Projekt dürfte zu sehr wesentlichen Anteilen Deutsch oder Europäisch sein, ebenfalls ist die größte allgemein bekannte Instanz mit @Codeberg@social.anoxinon.de in Deutschland beheimatet.
Codeberg hat mittlerweile Strahlkraft weit über Deutschland hinaus entwickelt und wird mittlerweile international verwendet.
Es besteht der Eindruck dass sowohl Codeberg als auch Forgejo im wesentlichen ohne Gewinnerzielungsabsicht operieren.
Fragen an den Betreiber ZentisWZendis warum man sich hier nicht für Forgejo entschieden hat führten zu keinen wirklich überzeugenden Argumenten.
#forgejo #codeberg #digitalsovereignty #digitalautonomy #zendis #git #gitlab #opencore #opensource #foss
It would be cool to have some mini games in #GitLab, while you wait for the CI pipelines to finish. Something like Breakout, Space Invaders or Chrome's dino game.
How to Install #GitLab on #AlmaLinux #VPS Easily In this tutorial we are going to show you in detail how to install Gitlab on AlmaLinux VPS.
What is GitLab?
GitLab is open-source #software written in Ruby, Go and JavaScript operated by GitLab Inc. GitLab offers a wide range of features such as CI/CD (Continuous Integration, Continuous Delivery) which makes the work of ...
Continued 👉 https://blog.radwebhosting.com/how-to-install-gitlab-on-almalinux-vps-easily/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #dedicatedserver #rubyonrails #installguide #selfhosted #selfhosting #rubygems
Friends, my git forge has been moved to https://code.raphaelbastide.com a self-hosted #forgejo instance instead of #gitlab that is getting creepy. Repositories with contributors will remain mirrored, others removed. Some old stuff has been removed and not migrated. Let me know if you miss something. Thanks @forgejo@floss.social !
Uuugh, now I need to find a replacement for gitlab, since they're all-in on slop, too.
Software will be built by machines, directed by people. … The supply of deep technical problems is multiplying, and the engineers who can solve them will be among the scarcest and most valuable talent in the market. <
WHERE YOU GONNA GET THOSE ENGINEERS, GOODLIFE SCUM‽