News for hackers. Stuff that matters.

A comment on Gitlab Critical Security Release. Parent comment

Re:Gitlab Critical Security Release by jahewson on Saturday February 26, 2022 @01:56PM (#30480568)
It doesn’t though. I need a secure, maintainable, audited, backed-up solution which would pass a SOC2 audit.
[ Parent | on HN ]
Re:Gitlab Critical Security Release by hedora on Saturday February 26, 2022 @07:52PM (#30484069)
Any soc2 auditor (or other security auditor) that will sign off on self-hosted gitlab, but not self-hosted git should have their accreditation pulled!

Git's attack surface and trusted computing base are a subset of gitlab's. Even if gitlab security were perfect, it would still be no better than git.

[ Parent | on HN ]