Hacker News with Generative AI: GitLab

Remote Prompt Injection in Gitlab Duo Leads to Source Code Theft (legitsecurity.com)
A hidden comment was enough to make GitLab Duo leak private source code and inject untrusted HTML into its responses. GitLab patched the issue, and we’ll walk you through the full attack chain — which demonstrates five vulnerabilities from the 2025 OWASP Top 10 for LLMs.

Cybersecurity, GitLab, Software Security

23 points by chillax 10 hours ago | 6 comments

An SSH adventure; or, why l10n support is important (gitlab.com)
this is IMPECCABLE work i was on the edge of my seat the whole time

SSH, Localization, GitLab, Open Source, Software

10 points by todsacerdoti 39 days ago | 1 comments

There's Almost No Gitlab (danjou.info)
Do you guys support GitLab? Is there any way this can work with GitLab? Does this support merge requests?

GitLab, Version Control, Software Development, Collaboration Tools

38 points by physicsguy 196 days ago | 72 comments

Gitlab makes more money than you think (constellationr.com)
GitLab is on a $559 million revenue run rate exiting the third quarter with 8,175 base customers.

GitLab, Business, Finance

34 points by cnctvfrc 199 days ago | 4 comments

Show HN: Sourcebot, an open-source Sourcegraph alternative (github.com/sourcebot-dev)
Blazingly fast code search 🏎️ Deployed as a single Docker image 📦 Search million+ lines of code in your GitHub and GitLab repositories 🪄 MIT licensed ✅

Open Source, Software, Code Search, GitHub, GitLab

259 points by bshzzle 234 days ago | 59 comments

Gitlab patches bug that could expose a CI/CD pipeline to supply chain attack (scmagazine.com)
GitLab patched 17 bugs, including a critical flaw with a CVSS score of 9.9 that could let an attacker trigger a pipeline as an arbitrary user, leading to privileged escalation, data exfiltration, and a software supply chain compromise.

Cybersecurity, Software, Supply Chain, GitLab, Vulnerability

9 points by LinuxBender 250 days ago | 2 comments

Show HN: A web extension to link Gitlab branch in Linear issues page (github.com/yashwanth2804)