GitLab V2

Set up GitLab for automated tests with TrustCloud

TrustCloud’s API-based integrations map seamlessly to your frameworks and controls to power automated evidence collection, continuous monitoring, and predictive risk analysis. Let’s explore how you can set up GitLab for automated tests.

By granting TrustCloud limited access to metadata through a service principal account, you can ensure that your systems remain compliant with your adopted controls. TrustCloud’s focus on trust, security, and simplifying compliance makes it a valuable asset in the GRC landscape.

Read our GRC Launchpad article: Integrations to learn more.

Explore 100+ evidence collection integrations to power evidence collection and real-time risk analysis.

Purpose

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read metadata about the configuration settings for your GitLab organization and GitLab users so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to GitLab metadata

1. Log in to your GitLab instance as a user with Owner permissions in your GitLab organization.
2. Navigate to User Settings → Applications. For GitLab.com, open https://gitlab.com/-/user_settings/applications. For self-hosted GitLab, navigate to https://[your-gitlab-host]/-/user_settings/applications .
3. Click Add new application. Fill in the following details:
   Name: any name (e.g., TrustCloud)
   Redirect URI: https://app.trustcloud.ai/trustcloud/integrations
   Scopes: check read_api
   Click Save application.
4. After saving, GitLab will display your Application ID and Secret. Copy both values—the Secret is only shown once.
5. In the upper-left corner of any page, click the Menu
   
6. On the opened menu click Groups, then Your Groups
7. On the Groups page click your organization group
   
8. On the opened organization group page, click the Group ID: number (ex. 12345678), this will copy the group ID to the clipboard to be pasted into TrustOps.

In conclusion, setting up GitLab for automated tests with TrustCloud can greatly enhance your compliance program. TrustCloud’s API-based integrations seamlessly integrate with your frameworks and controls, allowing for automated evidence collection, continuous monitoring, and predictive risk analysis.

By granting TrustCloud limited access to metadata through a service principal account, you can ensure compliance while prioritizing trust and security, and simplifying the GRC landscape. With over 100 evidence-collection integrations, TrustOps works diligently to verify and generate evidence for your compliance program. Take the necessary steps outlined in this document to enable TrustCloud to read metadata about the configuration settings for your GitLab organization and users, ensuring your systems remain compliant.