Yuri Sergeev, CEO of AppSec Solutions LLC (part of the Swordfish Security Group), reported that more than 80% of small IT development companies in the Russian Federation still use the GitLab platform, including purchasing licenses through parallel import, while large businesses cannot afford this due to legislative restrictions on the use of foreign software within the framework of the CII (critical information infrastructure).
"AppSec.Code has a function for connecting external repositories - it allows you to add an external repository in the settings and run the build, testing and deployment singapore whatsapp resourceprocess with it. This can be imagined as AppSec.Code + GitHub. The functionality of AppSec.Code allows you to immediately check what the developer received from the repository, from the point of view of DevSecOp and information security in general. The platform's business model is a license: an annual subscription based on the number of users," explains the press service of AppSec Solutions.
"AppSec.Code is not inferior in functionality to the premium version of GitLab Enterprise - thus, even the largest corporate clients can switch to Russian software painlessly. The solution is integrated with domestic products in the DevSecOps sphere, which are connected via the ASPM (Application Security Posture Management) orchestration platform. When developing AppSec.Code, we added support for Astra Linux OS, as well as built-in integration with Russian information security scanners for analyzing the security of source code, open source libraries, cloud containers," said Yuri Sergeev.
According to AppSec Solutions, the AppSec.Code platform operates in a closed loop without internet access and does not contain any components that could be vulnerable to external threats.
which also provide a set of additional tools for working with it. Both platforms are designed to solve the tasks of the full development cycle - from storing source code to implementing the finished code into the working environment. They can be deployed both in the cloud and on-premise in a closed company circuit. At the same time, GitLab is a product built on open source, while the GitHub source code is not publicly available.
The press service of JSC Selectel explained that in addition to the "bare" storage, both GitLab and GitHub have a huge toolkit built around services over the years of its development - third-party services, scripts, applications, libraries, etc. In addition, GitHub is not just a place to work with code, but a social network in which IT specialists exchange new developments, evaluate each other's projects and draw inspiration.
Technical Director of JSC "RDTECH" Alexey Dedevich explains that the functionality of GitLab and GitHub is in many ways very close, but the AppSec.Code platform is closer to GitLab in ideology, and it is more correct to consider it as an alternative to on-primes GitLab.
"GitLab is a software suite used by various development teams, large and medium-sized organizations to manage collaborative development. GitHub was originally created as a cloud service. Its purpose was to support project teams in public hosting of their projects. If GitLab was based on the idea of simplifying source code management within a team, then GitHub was focused on organizing collaborative work on code for geo-distributed teams via the Internet. But, as it developed, GitHub also began to add functions for automatic assembly, information security testing, support for project work and documentation," he explains.
GitHub and GitLab are services for storing code,
-
- Posts: 581
- Joined: Thu Jan 02, 2025 7:16 am