GitLab

Reads GET /api/v4/version for the version.

targets:
  - id: gitlab-main
    product: gitlab
    address: https://gitlab.example.com
    credentials: gitlab-token

Authentication

GitLab requires a credential for this endpoint by default — an unauthenticated request gets a 401. A personal access token works both ways, confirmed live against a real instance:

credentials:
  gitlab-token:
    kind: token-header
    header: PRIVATE-TOKEN
    value: "${GITLAB_TOKEN}"

  # equally valid — the same token as a bare bearer token
  gitlab-token-bearer:
    kind: bearer
    value: "${GITLAB_TOKEN}"

Recorded fields

• version
• extra.revision, when present
• extra.enterprise — "true"/"false", GitLab EE vs. CE

CVE correlation

Matched against NVD and БДУ ФСТЭК when a cve: block is configured. Edition-aware: the probe records the server’s own edition in extra.enterprise, and a community instance doesn’t see enterprise-only findings. An unknown edition keeps every finding.

Lifecycle resolver

endoflife:gitlab.