Merge requests · GitLab.org / GitLab · GitLab

Refactor spam scores to use Abuse::TrustScoreWorker

!140397 · created Dec 20, 2023 by Ian Anderson 16.8
backend devopsgovern groupanti-abuse maintenancerefactor pipeline:mr-approved releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-production
- Merged
- 14
- Approved
updated Jun 13, 2024
Use sidekiq job to store telesign score for users

!140594 · created Dec 22, 2023 by Ian Anderson 16.8
Backlog RefinementEditor backend devopsgovern groupanti-abuse maintenanceperformance pipeline:mr-approved releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-production
- Merged
- 6
- Approved
updated Jun 13, 2024
Update file permissions.md 0 of 1 checklist item completed

!138694 · created Dec 04, 2023 by Greg Alfaro 16.7
Category:GitLab Handbook Category:Permissions Technical Writing Update Handbook devopsgovern docs-only documentation groupauthorization maintenancerefactor releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-production
- Merged
- 18
- Approved
updated Jun 13, 2024
Allow administrators to provide public security contact information 12 of 12 checklist items completed

!138259 · created Nov 30, 2023 by Nick Malcolm 16.7
Category:Compliance Management GitLab Free GitLab Premium GitLab Ultimate ProdSecEngMetricPending Technical Writing backend database database-testing-automation databasereviewed devopsgovern direction documentation frontend groupcompliance pipeline:mr-approved releasedcandidate sectionsec security teamProduct Security Engineering typefeature workflowpost-deploy-db-production
- Merged
- 70
- Approved
updated Jun 13, 2024
Update security contact and vulnerability disclosure info 1 of 1 checklist item completed

!139196 · created Dec 08, 2023 by Nick Malcolm 16.7
Category:Compliance Management ProdSecEngMetricPending devopsgovern documentation groupcompliance pipeline:mr-approved releasedcandidate sectionsec security teamProduct Security Engineering typefeature workflowpost-deploy-db-production
- Merged
- 5
- Approved
updated Jun 13, 2024
Add a prefix to SCIM tokens behind a feature flag 3 of 4 checklist items completed

!139737 · created Dec 14, 2023 by Nick Malcolm 16.8
GitLab Premium GitLab Ultimate ProdSecEngMetricDefense in Depth Technical Writing backend devopsgovern direction documentation feature flag frontend groupauthentication pipeline:mr-approved releasedcandidate sectionsec security teamProduct Security Engineering typefeature workflowpost-deploy-db-production
- Merged
- 33
- Approved
updated Jun 13, 2024
Add token prefix tables 1 of 1 checklist item completed

!132879 · created Sep 28, 2023 by Vitor Meireles De Sousa 16.6
Technical Writing devopsgovern docs-only documentation groupauthentication maintenancerefactor releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-production
- Merged
- 14
- Approved
updated Jun 13, 2024
Update security section for improved clarity and organization 0 of 1 checklist item completed

!140141 · created Dec 18, 2023 by Sean Gillespie 16.9
Technical Writing devopsgovern docs-only documentation groupauthentication maintenancerefactor releasedcandidate sectionsec typemaintenance workflowproduction
- Merged
- 26
updated Jun 13, 2024
Require high-risk ID verification when telesign risk is high

!141318 · created Jan 09, 2024 by Ian Anderson 16.9
backend devopsgovern feature flag featureenhancement frontend groupanti-abuse pipeline:mr-approved releasedcandidate sectionsec typefeature workflowpost-deploy-db-production
- Merged
- 69
- Approved
updated Jun 13, 2024
Do not offer exemption when credit card is required

!142983 · created Jan 26, 2024 by Ian Anderson 16.9
backend devopsgovern groupanti-abuse pipeline:mr-approved releasedcandidate sectionsec typebug workflowpost-deploy-db-production
- Merged
- 15
- Approved
updated Jun 13, 2024
Remove the feature flag prefix_scim_tokens

!142260 · created Jan 19, 2024 by Nick Malcolm 16.9
GitLab Premium GitLab Ultimate ProdSecEngMetricPending Technical Writing backend devopsgovern direction docsfeature documentation groupauthentication pipeline:mr-approved releasedcandidate sectionsec teamProduct Security Engineering typefeature workflowproduction
- Merged
- 12
- Approved
updated Jun 13, 2024
Enforce prefixing for new tokens with a rubocop 2 of 2 checklist items completed

!142632 · created Jan 24, 2024 by Nick Malcolm 16.9
Category:SAST ProdSecEngMetricPaved Road backend devopssecure groupstatic analysis pipeline:mr-approved releasedcandidate sectionsec teamProduct Security Engineering typemaintenance workflowpost-deploy-db-staging
- Merged
- 16
- Approved
updated Jun 13, 2024
Security departments updates to responding to security incidents guide

!140677 · created Dec 27, 2023 by Harjeet Sharma 16.9
Technical Writing devopsgovern docs-only documentation groupauthentication maintenancerefactor releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-production
- Merged
- +2
- 111
updated Jun 13, 2024
Fixes to bug in misconfigured project/group settings tier

!142132 · created Jan 18, 2024 by Harjeet Sharma 16.9
Technical Writing devopsgovern docs-only documentation groupauthentication maintenancerefactor releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-production
- Merged
- 2
- Approved
updated Jun 13, 2024
Add documentation for DNS rebinding protection 2 of 12 checklist items completed

!142850 · created Jan 25, 2024 by Dominic Couture 16.9
ProdSecEngMetricPending Technical Writing devopsgovern docs-only docsimprovement documentation groupauthentication maintenancerefactor releasedcandidate sectionsec typemaintenance workflowpost-deploy-db-staging
- Merged
- 4
- Approved
updated Jun 13, 2024
Upgrade image package-hunter-cli to v3.0.1

!141378 · created Jan 09, 2024 by Dennis Appelt 16.8
Category:Vulnerability Management backend devopsgovern groupthreat insights maintenancedependency pipeline:mr-approved releasedcandidate sectionsec typemaintenance workflowproduction
- Merged
- 8
- 1
- Approved
updated Jun 13, 2024
Add role to group access token audit event

!142880 · created Jan 26, 2024 by Jio Castillo 16.11
Category:Audit Events Support Team Contributions backend devopsgovern featureenhancement groupcompliance pipeline:mr-approved releasedcandidate sectionsec typefeature workflowpost-deploy-db-production
- Merged
- 15
- 2
- Approved
updated Jun 12, 2024
Fix Members::DestroyService audit bug with removing subresources

!142058 · created Jan 17, 2024 by Andrew Evans 16.9
Deliverable SLONear Miss backend devopsgovern groupauthentication pipeline:mr-approved priority2 releasedcandidate sectionsec severity2 typebug workflowpost-deploy-db-production
- Merged
- 13
- Approved
updated Jun 12, 2024
Unassign redundant policy configurations

!143668 · created Feb 02, 2024 by Dominic Bauer 16.11
Category:Security Policy Management Data WarehouseNot Impacted Deliverable UX backend backend-weight3 customer database database-testing-automation databaseapproved devopsgovern feature flag featureenhancement frontend groupsecurity policies missed-deliverable missed:16.10 missed:16.9 pipeline:mr-approved priority3 releasedcandidate rspec:slow test detected sectionsec severity3 twfinished typefeature workflowpost-deploy-db-production
- Merged
- 88
- Approved
updated Jun 11, 2024
Instance level SAML MR Approval 0 of 1 checklist item completed

!139069 · created Dec 07, 2023 by Sam Figueroa 16.7
backend customer-critical-merge-request devopsgovern featureaddition frontend groupcompliance pipeline:mr-approved pipeline:skip-undercoverage releasedcandidate rspec:slow test detected sectionsec typefeature workflowpost-deploy-db-production
- Merged
- +2
- 137
- Approved
updated Jun 10, 2024