GitLab

What it does#

Git hosting, merge requests with approvals, protected branches, CI/CD with environments and deployments, package and container registries, and security scanning integrated in merge requests.

Where it fits#

Code and Build stages; this site’s source lives on GitLab, from which Cloudflare Workers Builds deploys it.

Quick start#

include:
  - template: Jobs/SAST.gitlab-ci.yml
  - template: Jobs/Secret-Detection.gitlab-ci.yml
stages: [test, build, deploy]

Common pitfalls#

• Unprotected CI variables are exposed to pipelines from any branch — mark deployment secrets protected and masked.
• Shared runners with Docker-in-Docker need privileged mode; prefer Kaniko or the Kubernetes executor.
• latest Docker images in jobs make pipelines non-reproducible; pin versions.

On this site#

• Reusable GitLab CI Templates and Components: a platform-owned template with spec:inputs, consumed by project and tag, extended without editing, and what a consumer can still override.