🚀 Introducing GitLab CI/CD Component

SafeDep Team

• Mar 31, 2025 • 1 min read

Announcing the new GitLab CI/CD Component, available in GitLab CI Catalog for seamless integration of vet in GitLab CI. Protect against vulnerable and malicious packages in your GitLab projects. This integration enables GitLab users to easily integrate vet with their GitLab CI pipelines. This integration protects GitLab projects from vulnerable and malicious packages in the dependency tree.

TL;DR

Usage

Features

Scan all dependencies and report vulnerabilities to GitLab security dashboard

GitLab Security Dashboard Vulnerability List

Integrates with SafeDep Cloud to protect against malicious open source packages through active code analysis

GitLab Security Dashboard

Support

Report bugs and feature requests to GitHub issues
Start feature discussions at GitHub discussions

gitlab
cicd
integration
malware

Author

SafeDep Team

safedep.io

The Latest from SafeDep blogs

Follow for the latest updates and insights on open source security & engineering

Announcements

Contributing to SafeDep Open Source Projects during Hacktoberfest 2025

Learn how to contribute to SafeDep open source projects during Hacktoberfest 2025 and help secure the open source software supply chain.

Shai-Hulud Supply Chain Attack Incident Response

The Shai-Hulud supply chain attack is a major incident targeting developers through malicious packages in the npm ecosystem. This post outlines the incident response steps that can be taken to...

Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protection

SafeDep launches a GitHub App for zero-configuration protection against malicious open source packages. Instantly scan pull requests and keep your code repositories safe from supply chain attacks.

Diff-based SCA with AI is Broken — Real Examples from Pipfile.lock, yarn.lock, and Cargo.lock

Diff-based Software Composition Analysis (SCA) scanners in pull requests are prone to blind spots. By relying only on git diff data, they miss package context, suffer from nondeterministic...

View All Blogs