Security Policies

Mon, 01 Jan 0001 00:00:00 +0000

You can automate vulnerability management and enforce requirements on merge requests, security scans, and pipeline execution with policies.

Merge Request Approval Policies

GitLab enforces security requirements at the merge request level, not at the pipeline level. When a policy is triggered, GitLab automatically adds required approvers to the MR — the pipeline itself continues to pass, but the merge is blocked until the required approvals are obtained.

Security-Policies on Software Factory

Security Policies

Merge Request Approval Policies