GitLab

We’re assessing GitLab, in particular self-managed GitLab in our private datacenter, as the home for our source code and CI. It brings repositories, CI/CD, container and package registries, and security scanning into one system we can run ourselves. The assessment focuses on operational cost, runner isolation for hermetic builds, and how well its pipelines support SLSA build provenance.