Labels

Business has chosen to avoid introducing the risk to GitLab that was identified during the TPRM security review.

Security notice is issued for a TPRM security review and is not treated yet.

Risk or observation identified in the TPRM Security Notice has been treated.

AWS vendor-related issues

Elastic.co / Elastic Cloud related issues: https://gitlab.com/gitlab-com/gl-infra/elastic

Rackspace vendor related issues: https://gitlab.com/gitlab-com/gl-infra/google

Rackspace vendor related issues: https://gitlab.com/gitlab-com/gl-infra/rackspace

any and all issues related to Vimeo

Agility Project

Vulnerability with an approved exception

Vulnerability has been validated as a false positive

Vulnerability has been mitigated but is still not entirely remediated

Vulnerability has been remediated and is no longer a risk

Vulnerability has been validated and is scheduled for remediation

Vulnerability is in an open and vulnerable state