Skip to content
andrew.dunn.dev

#gitlab

12 entries
Hosted on GitLab

projects · October 2026

glab api

glab api, the raw request command in GitLab's command-line client: --field decodes JSON arrays and objects, bracketed names reach the API as the query parameters they spell, --paginate follows the Link URL as given, and mr create recognizes a title already marked Draft.

Built at GitLab

projects · October 2026

switchyard

A ladder of Jenkins pipelines on a Java and Maven app, each converted to GitLab CI/CD at GitLab Public Sector, with a guide that puts every Jenkins construct beside the GitLab primitive that carries it and a rehearsal track for converting live.

Built at GitLab

projects · July 2026

egress

A public, versioned catalog of every outbound connection a self-managed GitLab instance can make, built for administrators who have to write the firewall and allowlist rules for a controlled-egress or air-gapped environment.

Hosted on GitLab

projects · July 2026

Evidence Factory

A worked demonstration of running a continuous ATO evidence pipeline for NIST 800-53 controls entirely inside GitLab: a policy plane injects a conformance stage no repository can edit, a released CI/CD Catalog runs the checks, and one Python driver turns each result into a merge gate and a control posture.

Built at GitLab

projects · July 2026

gitlab-contribution

A Claude Code plugin for contributing to GitLab projects, above all the gitlab-org/gitlab monorepo, from a machine with no GitLab Development Kit: a no-GDK contribution spine beside GitLab's own agent skills vendored at a pinned commit, until the spine merged into gitlab-simulation.

Built at GitLab

projects · July 2026

bulkhead

Least-privilege self-managed GitLab CI runners on a fixed set of AlmaLinux hosts: rootless Podman for ordinary jobs, ephemeral libvirt VMs for jobs that need root, and the cgroups v1 versus v2 trap that decides which release to build on.

Built at GitLab

projects · June 2026

gitlab-simulation

A Claude Code plugin for GitLab team members: file issues and merge requests against GitLab without a GDK, and reproduce self-managed GitLab on throwaway cloud VMs that delete themselves, so a change is proven on a customer's install before a maintainer sees it.

Built at GitLab

projects · May 2026

kaniko

A pipeline-driven build of the Chainguard kaniko fork for GitLab Runner: six images per release, compiled in UBI9 and shipped from scratch, in standard and FIPS 140-3 crypto, each cosign-signed with a CycloneDX SBOM, SLSA v1.0 provenance and an OpenVEX document attached.

writing · May 2026

Enabling Editors to Use Git Without Knowing

Most static-site CMSes make editors learn Git. They shouldn't have to. A small Cloudflare Worker called sveltia-identity-translator lets editors save changes through their existing Workspace identity, while git history attributes correctly.

Hosted on GitHub

projects · May 2026

Sveltia Identity Translator

Translated-identity proxy for Sveltia CMS. Editors authenticate against your IdP; a single bot does the API calls; commits attribute correctly via git's author/committer split.

Built at GitLab

projects · April 2026

postern

Routes events from Azure Event Grid, GCP Pub/Sub, AWS SQS, Kafka and any CloudEvents producer to GitLab pipeline triggers: one container, YAML routes, variables extracted from the payload, no database.

Built at GitLab

projects · April 2026

manifold

An API-only adoption profiler for self-managed GitLab: it reads activity through the REST API and renders a dashboard of adoption gaps and the enablement action that closes each one, entirely inside a customer's own network.