🚀 Introducing GitLab CI/CD Component

SafeDep Team

• Mar 31, 2025 • 1 min read

Announcing the new GitLab CI/CD Component, available in GitLab CI Catalog for seamless integration of vet in GitLab CI. Protect against vulnerable and malicious packages in your GitLab projects. This integration enables GitLab users to easily integrate vet with their GitLab CI pipelines. This integration protects GitLab projects from vulnerable and malicious packages in the dependency tree.

TL;DR

Usage

Features

Scan all dependencies and report vulnerabilities to GitLab security dashboard

GitLab Security Dashboard Vulnerability List

Integrates with SafeDep Cloud to protect against malicious open source packages through active code analysis

GitLab Security Dashboard

Support

Report bugs and feature requests to GitHub issues
Start feature discussions at GitHub discussions

gitlab
cicd
integration
malware

Author

SafeDep Team

safedep.io

The Latest from SafeDep blogs

Follow for the latest updates and insights on open source security & engineering

Open Source

Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency

A routine dependency upgrade introduced a suspicious transitive dependency with an embedded executable. While manual analysis confirmed it wasn't malicious, this incident highlights the implicit...

Announcements

Contributing to SafeDep Open Source Projects during Hacktoberfest 2025

Learn how to contribute to SafeDep open source projects during Hacktoberfest 2025 and help secure the open source software supply chain.

Malware

Malicious npm Packages Impersonating Hyatt Internal Dependencies

Three malicious npm packages disguised as Hyatt internal dependencies were discovered using install hooks to execute malicious payloads. All packages share identical attack patterns and...

Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protection

SafeDep launches a GitHub App for zero-configuration protection against malicious open source packages. Instantly scan pull requests and keep your code repositories safe from supply chain attacks.

View All Blogs