[{"data":1,"prerenderedAt":802},["ShallowReactive",2],{"/en-us/blog/contributions-to-git-2-42-release":3,"navigation-en-us":39,"banner-en-us":448,"footer-en-us":458,"blog-post-authors-en-us-Christian Couder":700,"blog-related-posts-en-us-contributions-to-git-2-42-release":714,"assessment-promotions-en-us":753,"next-steps-en-us":792},{"id":4,"title":5,"authorSlugs":6,"body":8,"categorySlug":9,"config":10,"content":14,"description":8,"extension":27,"isFeatured":12,"meta":28,"navigation":29,"path":30,"publishedDate":20,"seo":31,"stem":35,"tagSlugs":36,"__hash__":38},"blogPosts/en-us/blog/contributions-to-git-2-42-release.yml","Contributions To Git 2 42 Release",[7],"christian-couder",null,"product",{"slug":11,"featured":12,"template":13},"contributions-to-git-2-42-release",false,"BlogPost",{"title":15,"description":16,"authors":17,"heroImage":19,"date":20,"body":21,"category":9,"tags":22},"Git 2.42 release: Here are four of our contributions in detail","Find out how GitLab's Git team helped improve Git 2.42.",[18],"Christian Couder","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749667792/Blog/Hero%20Images/git-241.jpg","2023-10-12","[Git 2.42](https://gitlab.com/gitlab-org/git/-/raw/master/Documentation/RelNotes/2.42.0.txt)\nwas officially released on August 21, 2023, and included some\nimprovements from GitLab's Git team. Git is the foundation of\nrepository data at GitLab. GitLab's Git team works on new features, performance improvements, documentation improvements,\nand growing the Git community. Often our contributions to Git have a\nlot to do with the way we integrate Git into our services at\nGitLab.\n\nWe previously shared [some of our improvements that were included in the Git 2.41 release](https://about.gitlab.com/blog/contributions-to-latest-git-release/). Here are some highlights from the Git 2.42 release, and a\nwindow into how we use Git on the server side at GitLab.\n\n## 1. Prevent certain refs from being packed\n\n### Write-ahead logging\nIn [Gitaly](https://docs.gitlab.com/ee/administration/gitaly/), we\nwant to use a [write-ahead log](https://gitlab.com/groups/gitlab-org/-/epics/8911)\nto replicate Git operations on different machines.\n\nThis means that the Git objects and references that should be changed\nby a Git operation are first kept in a log entry. Then, when all the\nmachines have agreed that the operation should proceed, the log entry\nis applied so the corresponding Git objects and references are\nactually added to the repositories on all the machines.\n\n### Need for temporary references\nBetween the time when a specific log entry is first written and when\nit is applied, other log entries could be applied which could remove\nsome objects and references. It could happen that these objects and\nreferences are needed to apply the specific log entry though.\n\nSo when we log an entry, we have to make sure that all the objects and\nreferences that it needs to be properly applied will not be removed\nuntil that entry is either actually applied or discarded.\n\nThe best way to make sure things are kept in Git is to create new Git\nreferences pointing to these things. So we decided to use temporary\nreferences for that purpose. They would be created when a log entry is\nwritten, and then deleted when that entry is either applied or\ndiscarded.\n\n### Packed-refs performance\nGit can store references in \"loose\" files, with one reference per\nfile, or in the `packed-refs` file, which contains many of them. The\n`git pack-refs` command is used to pack some references from \"loose\"\nfiles into the `packed-refs` file.\n\nFor reading a lot of references, the `packed-refs` file is very\nefficient, but for writing or deleting a single reference, it is not\nso efficient as rewriting the whole `packed-refs` file is required.\n\nAs temporary references are to be created and then deleted soon after,\nstoring them in the `packed-refs` file would not be efficient. It\nwould be better to store them in \"loose\" files.\n\nThe `git pack-refs` command had no way to be told precisely which refs\nshould be packed or not though. By default it would repack all the\ntags (which are refs in `refs/tags/`) and all the refs that are\nalready packed. With the `--all` option one could tell it to repack\nall the refs except the hidden refs, broken refs, and symbolic refs,\nbut that was the only thing that could be controlled.\n\n### Improving `git pack-refs`\nWe decided to improve `git pack-refs` by adding two new options to it:\n  - `--include \u003Cpattern>` which can be used to specify which refs should be packed\n  - `--exclude \u003Cpattern>` which can be used to specify which refs should not be packed\n\n[John Cai](https://gitlab.com/jcaigitlab), Gitaly:Git team engineering manager, implemented these options.\n\nFor example, if the refs managed by the write-ahead log are in\n`refs/wal/`, it's now possible the exclude them from being moved into\nthe `packed-refs` file by using:\n\n```shell\n$ git pack-refs --exclude \"refs/wal/*\"\n```\n\nDetails of the patch series, including discussions, can be found\n[here](https://lore.kernel.org/git/pull.1501.git.git.1683215331910.gitgitgadget@gmail.com/).\n\n## 2. Get machine-readable output from `git cat-file --batch`\n\n### Efficiently retrieving Git object information\nIn GitLab, we often retrieve Git object information. For example, when a\nuser navigates into the files and directories in a repository, we need\nto get the content of the corresponding Git blobs and trees so that\nwe can show it.\n\nIn Gitaly, we use `git cat-file` to retrieve Git object information\nfrom a Git repository. As it's a frequent operation, it needs to be\nperformed efficiently, so we use the batch modes of `git cat-file`\navailable through the `--batch`, `--batch-check` and `--batch-command`\noptions.\n\nIn these modes, a pointer to a Git object can be repeatedly sent to\nthe standard input, called 'stdin', of a `git cat-file` command, while\nthe corresponding object information is read from the standard ouput,\ncalled 'stdout' of the command. This way we don't need to launch a\nnew `git cat-file` command for each object.\n\nGitLab can keep, for example, a `git cat-file --batch-command` process\nrunning in the background while feeding it commands like\n`info \u003Cobject>` or `contents \u003Cobject>` through its stdin to\nget either information about an object or its content.\n\n### Newlines in stdin, stdout, and filenames\nThe commands or pointers to Git objects that are sent through stdin\nshould be delimited using newline characters, and in the same way `git\ncat-file` will use newline characters to delimit the information from\ndifferent Git objects in its output. This is a common shell practice\nto make it easy to chain commands together. For example, one can\neasily get the size (in bytes) of the last three commits on the current\nbranch using the following:\n\n```shell\n$ git log -3 --format='%H' | git cat-file --batch-check='%(objectsize)'\n285\n646\n428\n```\n\nSometimes, though, the pointer to a Git object can contain a filename\nor a directory name, as such a pointer is allowed to be in the form\n`\u003Cbranch>:\u003Cpath>`. For example `HEAD:Documentation` is a valid\npointer to the blob or the tree corresponding to the `Documentation`\npath on the current branch.\n\nThis used to be an issue because on some systems newline characters\nare allowed in file or directory names. So the `-z` option was\nintroduced last year in Git 2.38 to allow users to change the input\ndelimiter in batch modes to the NUL character.\n\n### Error output\nWhen the `-z` option was introduced, it wasn't considered useful to\nchange the output delimiter to be also the NUL character. This is\nbecause only tree objects can contain paths and the internal format\nof tree objects already uses NUL characters to delimit paths.\n\nUnfortunately, it was overlooked that in case of an error the pointer\nto the object is displayed in the error message:\n\n```shell\n$ echo 'HEAD:does-not-exist' | git cat-file --batch\nHEAD:does-not-exist missing\n```\n\nAs the error messages are printed along with the regular ouput of the\ncommand on stdout, passing in an invalid pointer with a number of\nnewline characters in it could make it very difficult to parse the\noutput.\n\n### -Z comes to the rescue\n[Toon Claes](https://gitlab.com/toon), Gitaly senior engineer, initially worked on a\npatch to just quote the pointer in the error message, but it was\ndecided in the Git mailing list discussions related to the patch that\nit would be better to just create a new `-Z` option. This option would\nchange both the input and the output delimiter to the NUL character,\nwhile the old `-z` option would be deprecated over time.\n\nSo [Patrick Steinhardt](https://gitlab.com/pks-gitlab), Gitaly staff engineer, implemented that new `-Z` option.\n\nDetails of the patch series, including discussions, can be found\n[here](https://lore.kernel.org/git/20221209150048.2400648-1-toon@iotcl.com/)\nand [here](https://lore.kernel.org/git/cover.1685710884.git.ps@pks.im/).\n\n## 3. Pass pseudo-options to `git rev-list --stdin`\n\n### Computing sizes\nIn GitLab, we need to have different ways to compute the size of Git\nrelated content. For example, we need to know:\n  - how much disk space a repository is using\n  - how big a specific Git object is\n  - how much additional space on a repository is required by a\n    specific set of revisions (and the objects they reference)\n\nKnowing \"how much disk space a repository is using\" is useful to\nenforce repository-related quotas and is easy to get using regular\nshell and OS features.\n\nSize information about a specific Git object is useful to enforce\nquotas related to maximum file size. It can be obtained using, for\nexample, `git cat-file -s \u003Cobject>` or\n`echo \u003Cobject> | git cat-file --batch-check='%(objectsize)'`\nas already seen above.\n\nComputing the space required by a set of revisions is useful, too, as\nforks can share Git content in what we call\n\"[pool repositories](https://docs.gitlab.com/ee/development/git_object_deduplication.html),\"\nand we want to discriminate how much content belongs to each forked\nrepository. Fortunately, `git rev-list` has a `--disk-usage` option\nfor this purpose.\n\n### Passing arguments to `git rev-list`\n`git rev-list` can take a number of different arguments and has a lot\nof different options. It's a fundamental command to traverse commit\ngraphs, and it should be flexible enough to fulfill a lot of different\nuser needs.\n\nWhen repositories grow, they often store a lot of references and a lot\nof files and directories, so there is often the need to pass a big\nnumber of references or paths as arguments to the\ncommand. References and paths can be quite long though.\n\nTo avoid hitting platform limits related to command line length, long\nago, a `--stdin` mode was added that allowed users to pass revisions\nand paths through stdin, instead of as command line\narguments. However, when that was implemented, it was not considered\nnecessary to allow options or pseudo-options, like `--not`,\n`--glob=...`, or `--all` to be passed through stdin.\n\nThis appeared to be a problem for GitLab, as for computing sizes for\nforked repositories we needed some of the pseudo-options, and it would\nhave been intricate and possibly buggy to pass some of them and their\narguments as arguments on the command line while others were passed\nthrough stdin.\n\n### Allowing pseudo-options\nTo fix this issue, Patrick Steinhardt implemented a small patch series to\nallow pseudo-options through stdin.\n\nWith it, in Git 2.42, one can now pass pseudo-options, like `--not`,\n`--glob=...`, or `--all` through stdin when the `--stdin` mode is used.\n\nDetails of the patch series, including discussions, can be found\n[here](https://lore.kernel.org/git/cover.1686744685.git.ps@pks.im/).\n\n## 4. Code and test improvements\nWhile looking at some Git code, we are often tempted to modify nearby\ncode, either to change only its style when the code is ancient and it\nwould look better using Git's current code style, or to refactor it to\nmake it cleaner. This is why we sometimes send small patch series that\ndon't have a real GitLab related purpose.\n\nIn Git 2.42, examples of style code improvements we made are the\n[part1](https://lore.kernel.org/git/pull.1513.git.git.1684440205.gitgitgadget@gmail.com/)\nand\n[part2](https://lore.kernel.org/git/pull.1514.git.git.1684599239.gitgitgadget@gmail.com/)\ntest code modernization patches from John Cai.\n\nAnd [here](https://lore.kernel.org/git/cover.1684324059.git.ps@pks.im/) is\nan example of a refactoring to cleanup some code by Patrick Steinhardt.\n",[23,24,25,26],"git","news","open source","community","yml",{},true,"/en-us/blog/contributions-to-git-2-42-release",{"title":15,"description":16,"ogTitle":15,"ogDescription":16,"noIndex":12,"ogImage":19,"ogUrl":32,"ogSiteName":33,"ogType":34,"canonicalUrls":32},"https://about.gitlab.com/blog/contributions-to-git-2-42-release","https://about.gitlab.com","article","en-us/blog/contributions-to-git-2-42-release",[23,24,37,26],"open-source","bK86ka_6OiwKsnngehEB7opOv5jvgZqKBRlwYeiSkCw",{"data":40},{"logo":41,"freeTrial":46,"sales":51,"login":56,"items":61,"search":368,"minimal":399,"duo":418,"switchNav":427,"pricingDeployment":438},{"config":42},{"href":43,"dataGaName":44,"dataGaLocation":45},"/","gitlab logo","header",{"text":47,"config":48},"Get free trial",{"href":49,"dataGaName":50,"dataGaLocation":45},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":52,"config":53},"Talk to sales",{"href":54,"dataGaName":55,"dataGaLocation":45},"/sales/","sales",{"text":57,"config":58},"Sign in",{"href":59,"dataGaName":60,"dataGaLocation":45},"https://gitlab.com/users/sign_in/","sign in",[62,89,184,189,289,349],{"text":63,"config":64,"cards":66},"Platform",{"dataNavLevelOne":65},"platform",[67,73,81],{"title":63,"description":68,"link":69},"The intelligent orchestration platform for DevSecOps",{"text":70,"config":71},"Explore our Platform",{"href":72,"dataGaName":65,"dataGaLocation":45},"/platform/",{"title":74,"description":75,"link":76},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":77,"config":78},"Meet GitLab Duo",{"href":79,"dataGaName":80,"dataGaLocation":45},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":82,"description":83,"link":84},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":85,"config":86},"Learn more",{"href":87,"dataGaName":88,"dataGaLocation":45},"/why-gitlab/","why gitlab",{"text":90,"left":29,"config":91,"link":93,"lists":97,"footer":166},"Product",{"dataNavLevelOne":92},"solutions",{"text":94,"config":95},"View all Solutions",{"href":96,"dataGaName":92,"dataGaLocation":45},"/solutions/",[98,122,145],{"title":99,"description":100,"link":101,"items":106},"Automation","CI/CD and automation to accelerate deployment",{"config":102},{"icon":103,"href":104,"dataGaName":105,"dataGaLocation":45},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[107,111,114,118],{"text":108,"config":109},"CI/CD",{"href":110,"dataGaLocation":45,"dataGaName":108},"/solutions/continuous-integration/",{"text":74,"config":112},{"href":79,"dataGaLocation":45,"dataGaName":113},"gitlab duo agent platform - product menu",{"text":115,"config":116},"Source Code Management",{"href":117,"dataGaLocation":45,"dataGaName":115},"/solutions/source-code-management/",{"text":119,"config":120},"Automated Software Delivery",{"href":104,"dataGaLocation":45,"dataGaName":121},"Automated software delivery",{"title":123,"description":124,"link":125,"items":130},"Security","Deliver code faster without compromising security",{"config":126},{"href":127,"dataGaName":128,"dataGaLocation":45,"icon":129},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[131,135,140],{"text":132,"config":133},"Application Security Testing",{"href":127,"dataGaName":134,"dataGaLocation":45},"Application security testing",{"text":136,"config":137},"Software Supply Chain Security",{"href":138,"dataGaLocation":45,"dataGaName":139},"/solutions/supply-chain/","Software supply chain security",{"text":141,"config":142},"Software Compliance",{"href":143,"dataGaName":144,"dataGaLocation":45},"/solutions/software-compliance/","software compliance",{"title":146,"link":147,"items":152},"Measurement",{"config":148},{"icon":149,"href":150,"dataGaName":151,"dataGaLocation":45},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[153,157,161],{"text":154,"config":155},"Visibility & Measurement",{"href":150,"dataGaLocation":45,"dataGaName":156},"Visibility and Measurement",{"text":158,"config":159},"Value Stream Management",{"href":160,"dataGaLocation":45,"dataGaName":158},"/solutions/value-stream-management/",{"text":162,"config":163},"Analytics & Insights",{"href":164,"dataGaLocation":45,"dataGaName":165},"/solutions/analytics-and-insights/","Analytics and insights",{"title":167,"items":168},"GitLab for",[169,174,179],{"text":170,"config":171},"Enterprise",{"href":172,"dataGaLocation":45,"dataGaName":173},"/enterprise/","enterprise",{"text":175,"config":176},"Small Business",{"href":177,"dataGaLocation":45,"dataGaName":178},"/small-business/","small business",{"text":180,"config":181},"Public Sector",{"href":182,"dataGaLocation":45,"dataGaName":183},"/solutions/public-sector/","public sector",{"text":185,"config":186},"Pricing",{"href":187,"dataGaName":188,"dataGaLocation":45,"dataNavLevelOne":188},"/pricing/","pricing",{"text":190,"config":191,"link":193,"lists":197,"feature":276},"Resources",{"dataNavLevelOne":192},"resources",{"text":194,"config":195},"View all resources",{"href":196,"dataGaName":192,"dataGaLocation":45},"/resources/",[198,231,249],{"title":199,"items":200},"Getting started",[201,206,211,216,221,226],{"text":202,"config":203},"Install",{"href":204,"dataGaName":205,"dataGaLocation":45},"/install/","install",{"text":207,"config":208},"Quick start guides",{"href":209,"dataGaName":210,"dataGaLocation":45},"/get-started/","quick setup checklists",{"text":212,"config":213},"Learn",{"href":214,"dataGaLocation":45,"dataGaName":215},"https://university.gitlab.com/","learn",{"text":217,"config":218},"Product documentation",{"href":219,"dataGaName":220,"dataGaLocation":45},"https://docs.gitlab.com/","product documentation",{"text":222,"config":223},"Best practice videos",{"href":224,"dataGaName":225,"dataGaLocation":45},"/getting-started-videos/","best practice videos",{"text":227,"config":228},"Integrations",{"href":229,"dataGaName":230,"dataGaLocation":45},"/integrations/","integrations",{"title":232,"items":233},"Discover",[234,239,244],{"text":235,"config":236},"Customer success stories",{"href":237,"dataGaName":238,"dataGaLocation":45},"/customers/","customer success stories",{"text":240,"config":241},"Blog",{"href":242,"dataGaName":243,"dataGaLocation":45},"/blog/","blog",{"text":245,"config":246},"Remote",{"href":247,"dataGaName":248,"dataGaLocation":45},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":250,"items":251},"Connect",[252,257,261,266,271],{"text":253,"config":254},"GitLab Services",{"href":255,"dataGaName":256,"dataGaLocation":45},"/services/","services",{"text":258,"config":259},"Community",{"href":260,"dataGaName":26,"dataGaLocation":45},"/community/",{"text":262,"config":263},"Forum",{"href":264,"dataGaName":265,"dataGaLocation":45},"https://forum.gitlab.com/","forum",{"text":267,"config":268},"Events",{"href":269,"dataGaName":270,"dataGaLocation":45},"/events/","events",{"text":272,"config":273},"Partners",{"href":274,"dataGaName":275,"dataGaLocation":45},"/partners/","partners",{"backgroundColor":277,"textColor":278,"text":279,"image":280,"link":284},"#2f2a6b","#fff","Insights for the future of software development",{"altText":281,"config":282},"the source promo card",{"src":283},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758208064/dzl0dbift9xdizyelkk4.svg",{"text":285,"config":286},"Read the latest",{"href":287,"dataGaName":288,"dataGaLocation":45},"/the-source/","the source",{"text":290,"config":291,"lists":293},"Company",{"dataNavLevelOne":292},"company",[294],{"items":295},[296,301,307,309,314,319,324,329,334,339,344],{"text":297,"config":298},"About",{"href":299,"dataGaName":300,"dataGaLocation":45},"/company/","about",{"text":302,"config":303,"footerGa":306},"Jobs",{"href":304,"dataGaName":305,"dataGaLocation":45},"/jobs/","jobs",{"dataGaName":305},{"text":267,"config":308},{"href":269,"dataGaName":270,"dataGaLocation":45},{"text":310,"config":311},"Leadership",{"href":312,"dataGaName":313,"dataGaLocation":45},"/company/team/e-group/","leadership",{"text":315,"config":316},"Team",{"href":317,"dataGaName":318,"dataGaLocation":45},"/company/team/","team",{"text":320,"config":321},"Handbook",{"href":322,"dataGaName":323,"dataGaLocation":45},"https://handbook.gitlab.com/","handbook",{"text":325,"config":326},"Investor relations",{"href":327,"dataGaName":328,"dataGaLocation":45},"https://ir.gitlab.com/","investor relations",{"text":330,"config":331},"Trust Center",{"href":332,"dataGaName":333,"dataGaLocation":45},"/security/","trust center",{"text":335,"config":336},"AI Transparency Center",{"href":337,"dataGaName":338,"dataGaLocation":45},"/ai-transparency-center/","ai transparency center",{"text":340,"config":341},"Newsletter",{"href":342,"dataGaName":343,"dataGaLocation":45},"/company/contact/#contact-forms","newsletter",{"text":345,"config":346},"Press",{"href":347,"dataGaName":348,"dataGaLocation":45},"/press/","press",{"text":350,"config":351,"lists":352},"Contact us",{"dataNavLevelOne":292},[353],{"items":354},[355,358,363],{"text":52,"config":356},{"href":54,"dataGaName":357,"dataGaLocation":45},"talk to sales",{"text":359,"config":360},"Support portal",{"href":361,"dataGaName":362,"dataGaLocation":45},"https://support.gitlab.com","support portal",{"text":364,"config":365},"Customer portal",{"href":366,"dataGaName":367,"dataGaLocation":45},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":369,"login":370,"suggestions":377},"Close",{"text":371,"link":372},"To search repositories and projects, login to",{"text":373,"config":374},"gitlab.com",{"href":59,"dataGaName":375,"dataGaLocation":376},"search login","search",{"text":378,"default":379},"Suggestions",[380,382,386,388,392,396],{"text":74,"config":381},{"href":79,"dataGaName":74,"dataGaLocation":376},{"text":383,"config":384},"Code Suggestions (AI)",{"href":385,"dataGaName":383,"dataGaLocation":376},"/solutions/code-suggestions/",{"text":108,"config":387},{"href":110,"dataGaName":108,"dataGaLocation":376},{"text":389,"config":390},"GitLab on AWS",{"href":391,"dataGaName":389,"dataGaLocation":376},"/partners/technology-partners/aws/",{"text":393,"config":394},"GitLab on Google Cloud",{"href":395,"dataGaName":393,"dataGaLocation":376},"/partners/technology-partners/google-cloud-platform/",{"text":397,"config":398},"Why GitLab?",{"href":87,"dataGaName":397,"dataGaLocation":376},{"freeTrial":400,"mobileIcon":405,"desktopIcon":410,"secondaryButton":413},{"text":401,"config":402},"Start free trial",{"href":403,"dataGaName":50,"dataGaLocation":404},"https://gitlab.com/-/trials/new/","nav",{"altText":406,"config":407},"Gitlab Icon",{"src":408,"dataGaName":409,"dataGaLocation":404},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":406,"config":411},{"src":412,"dataGaName":409,"dataGaLocation":404},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":414,"config":415},"Get Started",{"href":416,"dataGaName":417,"dataGaLocation":404},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":419,"mobileIcon":423,"desktopIcon":425},{"text":420,"config":421},"Learn more about GitLab Duo",{"href":79,"dataGaName":422,"dataGaLocation":404},"gitlab duo",{"altText":406,"config":424},{"src":408,"dataGaName":409,"dataGaLocation":404},{"altText":406,"config":426},{"src":412,"dataGaName":409,"dataGaLocation":404},{"button":428,"mobileIcon":433,"desktopIcon":435},{"text":429,"config":430},"/switch",{"href":431,"dataGaName":432,"dataGaLocation":404},"#contact","switch",{"altText":406,"config":434},{"src":408,"dataGaName":409,"dataGaLocation":404},{"altText":406,"config":436},{"src":437,"dataGaName":409,"dataGaLocation":404},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":439,"mobileIcon":444,"desktopIcon":446},{"text":440,"config":441},"Back to pricing",{"href":187,"dataGaName":442,"dataGaLocation":404,"icon":443},"back to pricing","GoBack",{"altText":406,"config":445},{"src":408,"dataGaName":409,"dataGaLocation":404},{"altText":406,"config":447},{"src":412,"dataGaName":409,"dataGaLocation":404},{"title":449,"button":450,"config":455},"See how agentic AI transforms software delivery",{"text":451,"config":452},"Watch GitLab Transcend now",{"href":453,"dataGaName":454,"dataGaLocation":45},"/events/transcend/virtual/","transcend event",{"layout":456,"icon":457,"disabled":29},"release","AiStar",{"data":459},{"text":460,"source":461,"edit":467,"contribute":472,"config":477,"items":482,"minimal":689},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":462,"config":463},"View page source",{"href":464,"dataGaName":465,"dataGaLocation":466},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":468,"config":469},"Edit this page",{"href":470,"dataGaName":471,"dataGaLocation":466},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":473,"config":474},"Please contribute",{"href":475,"dataGaName":476,"dataGaLocation":466},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":478,"facebook":479,"youtube":480,"linkedin":481},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[483,530,584,628,655],{"title":185,"links":484,"subMenu":499},[485,489,494],{"text":486,"config":487},"View plans",{"href":187,"dataGaName":488,"dataGaLocation":466},"view plans",{"text":490,"config":491},"Why Premium?",{"href":492,"dataGaName":493,"dataGaLocation":466},"/pricing/premium/","why premium",{"text":495,"config":496},"Why Ultimate?",{"href":497,"dataGaName":498,"dataGaLocation":466},"/pricing/ultimate/","why ultimate",[500],{"title":501,"links":502},"Contact Us",[503,506,508,510,515,520,525],{"text":504,"config":505},"Contact sales",{"href":54,"dataGaName":55,"dataGaLocation":466},{"text":359,"config":507},{"href":361,"dataGaName":362,"dataGaLocation":466},{"text":364,"config":509},{"href":366,"dataGaName":367,"dataGaLocation":466},{"text":511,"config":512},"Status",{"href":513,"dataGaName":514,"dataGaLocation":466},"https://status.gitlab.com/","status",{"text":516,"config":517},"Terms of use",{"href":518,"dataGaName":519,"dataGaLocation":466},"/terms/","terms of use",{"text":521,"config":522},"Privacy statement",{"href":523,"dataGaName":524,"dataGaLocation":466},"/privacy/","privacy statement",{"text":526,"config":527},"Cookie preferences",{"dataGaName":528,"dataGaLocation":466,"id":529,"isOneTrustButton":29},"cookie preferences","ot-sdk-btn",{"title":90,"links":531,"subMenu":540},[532,536],{"text":533,"config":534},"DevSecOps platform",{"href":72,"dataGaName":535,"dataGaLocation":466},"devsecops platform",{"text":537,"config":538},"AI-Assisted Development",{"href":79,"dataGaName":539,"dataGaLocation":466},"ai-assisted development",[541],{"title":542,"links":543},"Topics",[544,549,554,559,564,569,574,579],{"text":545,"config":546},"CICD",{"href":547,"dataGaName":548,"dataGaLocation":466},"/topics/ci-cd/","cicd",{"text":550,"config":551},"GitOps",{"href":552,"dataGaName":553,"dataGaLocation":466},"/topics/gitops/","gitops",{"text":555,"config":556},"DevOps",{"href":557,"dataGaName":558,"dataGaLocation":466},"/topics/devops/","devops",{"text":560,"config":561},"Version Control",{"href":562,"dataGaName":563,"dataGaLocation":466},"/topics/version-control/","version control",{"text":565,"config":566},"DevSecOps",{"href":567,"dataGaName":568,"dataGaLocation":466},"/topics/devsecops/","devsecops",{"text":570,"config":571},"Cloud Native",{"href":572,"dataGaName":573,"dataGaLocation":466},"/topics/cloud-native/","cloud native",{"text":575,"config":576},"AI for Coding",{"href":577,"dataGaName":578,"dataGaLocation":466},"/topics/devops/ai-for-coding/","ai for coding",{"text":580,"config":581},"Agentic AI",{"href":582,"dataGaName":583,"dataGaLocation":466},"/topics/agentic-ai/","agentic ai",{"title":585,"links":586},"Solutions",[587,589,591,596,600,603,607,610,612,615,618,623],{"text":132,"config":588},{"href":127,"dataGaName":132,"dataGaLocation":466},{"text":121,"config":590},{"href":104,"dataGaName":105,"dataGaLocation":466},{"text":592,"config":593},"Agile development",{"href":594,"dataGaName":595,"dataGaLocation":466},"/solutions/agile-delivery/","agile delivery",{"text":597,"config":598},"SCM",{"href":117,"dataGaName":599,"dataGaLocation":466},"source code management",{"text":545,"config":601},{"href":110,"dataGaName":602,"dataGaLocation":466},"continuous integration & delivery",{"text":604,"config":605},"Value stream management",{"href":160,"dataGaName":606,"dataGaLocation":466},"value stream management",{"text":550,"config":608},{"href":609,"dataGaName":553,"dataGaLocation":466},"/solutions/gitops/",{"text":170,"config":611},{"href":172,"dataGaName":173,"dataGaLocation":466},{"text":613,"config":614},"Small business",{"href":177,"dataGaName":178,"dataGaLocation":466},{"text":616,"config":617},"Public sector",{"href":182,"dataGaName":183,"dataGaLocation":466},{"text":619,"config":620},"Education",{"href":621,"dataGaName":622,"dataGaLocation":466},"/solutions/education/","education",{"text":624,"config":625},"Financial services",{"href":626,"dataGaName":627,"dataGaLocation":466},"/solutions/finance/","financial services",{"title":190,"links":629},[630,632,634,636,639,641,643,645,647,649,651,653],{"text":202,"config":631},{"href":204,"dataGaName":205,"dataGaLocation":466},{"text":207,"config":633},{"href":209,"dataGaName":210,"dataGaLocation":466},{"text":212,"config":635},{"href":214,"dataGaName":215,"dataGaLocation":466},{"text":217,"config":637},{"href":219,"dataGaName":638,"dataGaLocation":466},"docs",{"text":240,"config":640},{"href":242,"dataGaName":243,"dataGaLocation":466},{"text":235,"config":642},{"href":237,"dataGaName":238,"dataGaLocation":466},{"text":245,"config":644},{"href":247,"dataGaName":248,"dataGaLocation":466},{"text":253,"config":646},{"href":255,"dataGaName":256,"dataGaLocation":466},{"text":258,"config":648},{"href":260,"dataGaName":26,"dataGaLocation":466},{"text":262,"config":650},{"href":264,"dataGaName":265,"dataGaLocation":466},{"text":267,"config":652},{"href":269,"dataGaName":270,"dataGaLocation":466},{"text":272,"config":654},{"href":274,"dataGaName":275,"dataGaLocation":466},{"title":290,"links":656},[657,659,661,663,665,667,669,673,678,680,682,684],{"text":297,"config":658},{"href":299,"dataGaName":292,"dataGaLocation":466},{"text":302,"config":660},{"href":304,"dataGaName":305,"dataGaLocation":466},{"text":310,"config":662},{"href":312,"dataGaName":313,"dataGaLocation":466},{"text":315,"config":664},{"href":317,"dataGaName":318,"dataGaLocation":466},{"text":320,"config":666},{"href":322,"dataGaName":323,"dataGaLocation":466},{"text":325,"config":668},{"href":327,"dataGaName":328,"dataGaLocation":466},{"text":670,"config":671},"Sustainability",{"href":672,"dataGaName":670,"dataGaLocation":466},"/sustainability/",{"text":674,"config":675},"Diversity, inclusion and belonging (DIB)",{"href":676,"dataGaName":677,"dataGaLocation":466},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":330,"config":679},{"href":332,"dataGaName":333,"dataGaLocation":466},{"text":340,"config":681},{"href":342,"dataGaName":343,"dataGaLocation":466},{"text":345,"config":683},{"href":347,"dataGaName":348,"dataGaLocation":466},{"text":685,"config":686},"Modern Slavery Transparency Statement",{"href":687,"dataGaName":688,"dataGaLocation":466},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":690},[691,694,697],{"text":692,"config":693},"Terms",{"href":518,"dataGaName":519,"dataGaLocation":466},{"text":695,"config":696},"Cookies",{"dataGaName":528,"dataGaLocation":466,"id":529,"isOneTrustButton":29},{"text":698,"config":699},"Privacy",{"href":523,"dataGaName":524,"dataGaLocation":466},[701],{"id":702,"title":18,"body":8,"config":703,"content":705,"description":8,"extension":27,"meta":709,"navigation":29,"path":710,"seo":711,"stem":712,"__hash__":713},"blogAuthors/en-us/blog/authors/christian-couder.yml",{"template":704},"BlogAuthor",{"name":18,"config":706},{"headshot":707,"ctfId":708},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749663687/Blog/Author%20Headshots/chriscool-headshot.jpg","chriscool",{},"/en-us/blog/authors/christian-couder",{},"en-us/blog/authors/christian-couder","6VsKjKNdm1XKAmFMZHj53ROyylDlxaSJhcARRkw6EQQ",[715,726,740],{"content":716,"config":724},{"title":717,"description":718,"heroImage":719,"date":720,"category":9,"tags":721},"GitLab Patch Release: 18.10.3, 18.9.5, 18.8.9","Learn more this patch release for GitLab Community Edition and Enterprise Edition.\n\n","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749661926/Blog/Hero%20Images/security-patch-blog-image-r2-0506-700x400-fy25_2x.jpg","2026-04-08",[722,723],"security releases","patch releases",{"featured":12,"template":13,"externalUrl":725},"https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released/",{"content":727,"config":738},{"title":728,"description":729,"heroImage":730,"category":9,"tags":731,"authors":733,"date":736,"body":737},"Streamline test management with the SmartBear QMetry GitLab component","Learn how to automatically upload test results from GitLab CI/CD pipelines to SmartBear QMetry Test Management Enterprise using the CI/CD Catalog component.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1775486753/cswmwtygkgkbdsibo09v.png",[732,9,558],"tutorial",[734,735],"Matt Genelin","Matt Bonner","2026-04-07","In modern software development, test management and continuous integration are two sides of the same coin. DevSecOps teams need seamless integration between their CI/CD pipelines and test management platforms to maintain visibility, traceability, and compliance across the software development lifecycle.\n\nThis becomes even more important as testing scales across automated pipelines, where execution data is spread across tools and harder to track in one place.\n\nFor organizations using GitLab for CI/CD and SmartBear QMetry for test management, manually uploading test results creates friction, delays feedback loops, and makes it harder to maintain a reliable, centralized view of testing.\n\nWhat if you could automatically publish your JUnit, TestNG, or other test results directly from your GitLab pipeline to QMetry with just a few lines of configuration?\n\nThat's exactly what the new **QMetry GitLab Component** enables. This reusable CI/CD component, now available in the [GitLab CI/CD Catalog](https://gitlab.com/explore/catalog), eliminates the manual overhead of test result management by automatically uploading test execution data to QMetry.  This is an AI-enabled, enterprise-grade test management platform that brings together test planning, execution, tracking, and reporting in one place.\n\nAs a centralized system of record for testing, QMetry helps teams understand coverage, track execution, and make more reliable release decisions.\n\nIn this guide, you'll learn:\n\n* How to set up the QMetry GitLab Component in your pipeline  \n* How to configure automated test result uploads  \n* Advanced configuration options for enterprise requirements  \n* A real-world aerospace industry use case  \n* Best practices for test management automation\n\nBy the end of this article, your GitLab pipelines will automatically feed test results into QMetry, giving your QA teams instant visibility into test execution and helping them make faster, more confident release decisions.\n\n![SmartBear QMetry GitLab integration](https://res.cloudinary.com/about-gitlab-com/image/upload/v1775488045/ojt707rzxnm2yr3vqxdh.png)\n\n## Why integrate GitLab with QMetry?\n\nBefore diving into the technical implementation, let's understand the value this integration delivers:\n\n### Eliminate manual test result uploads\n\nDevSecOps engineers and QA teams no longer need to manually export test results from CI/CD runs and import them into test management systems. The component handles this automatically after every pipeline execution.\n\nThis reduces manual effort while ensuring test data stays consistent, up to date, and easy to access across teams.\n\n![Test results with SmartBear QMetry GitLab integration](https://res.cloudinary.com/about-gitlab-com/image/upload/v1775488045/ajx64sihup2nursdpnxz.png)\n\n### Enable end-to-end traceability\n\nBy connecting GitLab's CI/CD execution data with QMetry's test management capabilities, teams gain complete traceability from requirements through test cases to actual test execution results. This is critical for regulated industries like financial services, aerospace, medical devices, and automotive, where audit trails are mandatory and regulatory compliance depends on demonstrating complete test coverage.\n\nIt also gives teams a clearer view of coverage and risk across releases, making it easier to understand what’s been tested and what still needs attention.\n\n### Accelerate feedback loops\n\nAutomated test result uploads mean QA teams, product managers, and stakeholders see test execution results immediately after pipeline completion – no waiting for manual data entry or report generation.\n\nWith faster access to results, teams can act immediately, reduce delays, and make quicker, more informed release decisions.\n\n### Support compliance and audit requirements\n\nFor organizations in regulated industries, maintaining comprehensive test records with proper versioning and traceability is non-negotiable. This integration ensures you can document every test execution properly in QMetry with links back to the specific GitLab pipeline, commit, and build.\n\nThis creates an audit-ready record of testing activity without adding manual overhead.\n\n![Audit-ready record of testing with SmartBear QMetry GitLab integration](https://res.cloudinary.com/about-gitlab-com/image/upload/v1775488045/q2tbaw5otgdywjkcquqx.png)\n\n### Leverage AI-powered test insights\n\nQMetry uses AI to analyze test execution patterns, identify flaky tests, predict test failures, and recommend optimization opportunities. Feeding it real-time data from GitLab pipelines maximizes the value of these AI capabilities.\n\nWith continuous data flowing in, teams get more accurate insights and can focus their efforts where it matters most.\n\n![Accurage insights with SmartBear QMetry GitLab integration](https://res.cloudinary.com/about-gitlab-com/image/upload/v1775488045/pl7ru4wx8ixnheedfyrs.png)\n\n## About the GitLab and SmartBear partnership\n\nThis component represents a growing partnership between GitLab and SmartBear to better connect CI/CD execution with test management in a single workflow. SmartBear brings deep expertise in testing, API management, and quality automation, while GitLab provides the most comprehensive AI-powered DevSecOps platform. Together, they help teams streamline how testing fits into the development lifecycle while maintaining the quality, security, and compliance standards their industries require.\n\nWhether you're managing test execution for aerospace flight control systems, financial services platforms, automotive safety applications, or medical device software, the combination of GitLab's CI/CD capabilities and QMetry's test management gives teams a centralized, reliable view of testing across the lifecycle, helping them track execution, maintain traceability, and make more confident release decisions.\n\n## What you'll need\n\nBefore getting started, ensure you have:\n\n* **A GitLab account** with a project containing automated tests that generate test result files (JUnit XML, TestNG XML, etc.)  \n* **QMetry Test Management Enterprise** account with API access enabled  \n* **QMetry API Key** generated  from your QMetry instance (we'll cover this shortly)  \n* **QMetry Project** already created where you will upload test results   \n* **Familiarity with GitLab CI/CD**, including understanding of basic `.gitlab-ci.yml` syntax and pipeline concepts  \n* **Test suite configuration** in QMetry (optional but recommended for better organization)\n\n### Understanding the test result flow\n\nHere's what happens when you integrate this component:\n\n1. **Test execution**: Your GitLab CI/CD pipeline runs automated tests (unit tests, integration tests, E2E tests, etc.).  \n2. **Result generation**: Tests produce output files in formats like JUnit XML, TestNG XML, or other supported formats.  \n3. **Component invocation**: The QMetry component executes as a job in your pipeline.  \n4. **Automatic upload**: The component reads your test result files and uploads them to QMetry via API.  \n5. **QMetry processing**: QMetry receives the results, processes them, and makes them available for reporting and analysis.\n\nThe beauty of this integration is that it happens automatically, with no manual intervention required once configured.\n\n## Part 1: Getting your QMetry API credentials\n\nBefore configuring the GitLab component, you need to obtain API access credentials from your QMetry instance. Here are the steps to follow:\n\n### 1. Access QMetry settings\n\n1. Log in to your **QMetry Test Management Enterprise** instance.  \n2. Navigate to your **user profile** (typically in the top-right corner).  \n3. Select **Settings** or **API Access** from the dropdown menu.\n\n### 2. Generate an API key\n\n1. In the API Access section, click **Generate New API Key.**  \n2. Provide a descriptive **name** for the key (e.g., \"GitLab CI/CD Integration\").  \n3. Set appropriate **permissions**. The key needs write access to upload test results.  \n4. Click **Generate.**  \n5. **Copy the API key immediately** as it will only be displayed once.\n\n**Important security note**: Treat your API key like a password. Never commit it directly to your `.gitlab-ci.yml` file or store it in plain text. We'll use GitLab CI/CD variables to store it securely.\n\n### 3. Note your QMetry instance URL\n\nYou'll also need your QMetry instance URL, which typically follows this format:\n\n```text\nhttps://your-company.qmetry.com\n```\n\nor, for self-hosted instances:\n\n```text\nhttps://qmetry.your-company.com\n```\n\nMake note of this URL because you'll need it in the next section.\n\n## Part 2: Configuring GitLab CI/CD variables\n\nNow that you have your QMetry credentials, let's store them securely in GitLab. Here are the next steps to follow:\n\n### 4. Navigate to CI/CD settings\n\n1. Open your **GitLab project.**  \n2. In the left sidebar, navigate to **Settings > CI/CD.**  \n3. Expand the **Variables** section.  \n4. Click **Add variable.**\n\n### 5. Add the QMetry API key\n\nConfigure the API key variable:\n\n| Field | Value |\n| ----- | ----- |\n| **Key** | `QMETRY_API_KEY` |\n| **Value** | Your QMetry API key from Step 2 |\n| **Type** | Variable |\n| **Flags** | ✅ Mask variable\u003Cbr>✅ Protect variable (recommended) |\n\nClick **Add variable** to save.\n\n### 6. Add the QMetry instance URL\n\nAdd a second variable for your instance URL:\n\n| Field | Value |\n| ----- | ----- |\n| **Key** | `INSTANCE_URL` |\n| **Value** | Your QMetry instance URL (e.g., `https://your-company.qmetry.com`) |\n| **Type** | Variable |\n| **Flags** | (optional: Protect variable) |\n\nClick **Add variable** to save.\n\n**Why use CI/CD variables?**\n\n* **Security**: Masked variables are hidden in job logs.  \n* **Reusability**: You can use the same credentials across multiple pipelines.  \n* **Flexibility**: It is easy to rotate credentials without modifying pipeline code.  \n* **Access control**: Protected variables are only available on protected branches.\n\n## Part 3: Understanding your test result files\n\nBefore integrating the component, ensure your tests generate output files that QMetry can process. Here are the next steps to follow:\n\n### 7. Verify test output format\n\nThe QMetry component supports multiple test result formats. The most common is **JUnit XML**, which most testing frameworks can generate:\n\n**Example JUnit XML output** (`results.xml`):\n\n```xml\n\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003Ctestsuites>\n  \u003Ctestsuite name=\"Flight Control System Tests\" tests=\"15\" failures=\"1\" errors=\"0\" time=\"45.231\">\n    \u003Ctestcase classname=\"FlightControlTests\" name=\"testAltitudeHold\" time=\"2.341\">\n      \u003Csystem-out>Altitude hold engaged at 10,000 feet\u003C/system-out>\n    \u003C/testcase>\n    \u003Ctestcase classname=\"FlightControlTests\" name=\"testAutopilotEngagement\" time=\"3.125\">\n      \u003Csystem-out>Autopilot engaged successfully\u003C/system-out>\n    \u003C/testcase>\n    \u003Ctestcase classname=\"FlightControlTests\" name=\"testEmergencyLanding\" time=\"5.892\">\n      \u003Cfailure message=\"Landing gear failed to deploy\">\n        Expected: Landing gear deployed\n        Actual: Landing gear malfunction detected\n      \u003C/failure>\n    \u003C/testcase>\n    \u003C!-- Additional test cases... -->\n  \u003C/testsuite>\n\u003C/testsuites>\n```\n\nMost testing frameworks generate this format automatically:\n\n* **JUnit** (Java): Native format  \n* **pytest** (Python): Use `--junitxml=results.xml` flag  \n* **Jest** (JavaScript): Use `jest-junit` reporter  \n* **RSpec** (Ruby): Use `rspec_junit_formatter`  \n* **NUnit** (.NET): Use `nunit-console` with XML output  \n* **Go test**: Use `go-junit-report`\n\n### 8. Confirm test artifact configuration\n\nEnsure your existing pipeline saves test results as **artifacts**. This allows the QMetry component to access them:\n\n```yaml\ntest:\n  stage: test\n  script:\n    - npm install\n    - npm test -- --reporter=junit --reporter-options=output=results.xml\n  artifacts:\n    reports:\n      junit: results.xml\n    paths:\n      - results.xml\n    when: always  # Upload even if tests fail\n```\n\n**Key points**:\n\n* `artifacts.reports.junit` makes results visible in GitLab's test report UI.  \n* `artifacts.paths` ensures the file is available to downstream jobs.  \n* `when: always` ensures results upload even if tests fail.\n\n## Part 4: Integrating the QMetry component\n\nNow for the main event – adding the QMetry component to your pipeline. Here are the next steps to follow:\n\n### 9. Basic component integration\n\nAdd the component to your `.gitlab-ci.yml` file. The component should run **after** your tests complete:\n\n```yaml\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\nLet's break down each input parameter:\n\n| Parameter | Description | Example |\n| ----- | ----- | ----- |\n| `stage` | Which CI/CD stage runs the upload job | `test` |\n| `project` | Your QMetry project name or key | `\"Aerospace Flight Control System\"` |\n| `file_name` | Path to your test results file | `\"results.xml\"` |\n| `testing_type` | Format of your test results | `\"JUNIT\"` (also supports: `TESTNG`, `NUNIT`, etc.) |\n| `instance_url` | Your QMetry instance URL | `${INSTANCE_URL}` (from CI/CD variables) |\n| `api_key` | QMetry API key for authentication | `${QMETRY_API_KEY}` (from CI/CD variables) |\n\n### 10. Complete pipeline example\n\nHere's a complete `.gitlab-ci.yml` example showing test execution followed by QMetry upload:\n\n```yaml\nstages:\n  - test\n  - report\n\nvariables:\n  # Your app-specific variables\n  NODE_VERSION: \"18\"\n\n# Run your automated tests\nunit-tests:\n  stage: test\n  image: node:${NODE_VERSION}\n  script:\n    - npm ci\n    - npm run test:unit -- --reporter=junit --reporter-options=output=results.xml\n  artifacts:\n    reports:\n      junit: results.xml\n    paths:\n      - results.xml\n    when: always\n  tags:\n    - docker\n\n# Upload results to QMetry\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test  # Runs in same stage as tests\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n### 11. Run your pipeline\n\nCommit and push your changes:\n\n```shell\ngit add .gitlab-ci.yml\ngit commit -m \"Add QMetry test result integration\"\ngit push origin main\n```\n\nNavigate to your GitLab project's **CI/CD > Pipelines** to watch the execution.\n\n### 12. Verify successful upload\n\nAfter the pipeline completes, you should see:\n\n**In GitLab**:\n\n1. A new job in your pipeline named `qmetry-import` (or similar)  \n2. Job logs showing successful API communication  \n3. Green checkmark indicating successful upload\n\n**Example successful job log**:\n\n```json\n$ curl -X POST https://your-company.qmetry.com/api/v3/test-results/import \\\n  -H \"Authorization: Bearer ${QMETRY_API_KEY}\" \\\n  -H \"Content-Type: application/json\" \\\n  -d @payload.json\n\n{\n  \"status\": \"success\",\n  \"message\": \"Test results uploaded successfully\",\n  \"results_processed\": 15,\n  \"test_cases_created\": 3,\n  \"test_cases_updated\": 12,\n  \"execution_id\": \"EXE-12345\"\n}\n\nJob succeeded ```\n\n**In QMetry**:\n\n1. Navigate to your project dashboard.  \n2. Check the **Test Executions** section.  \n3. You should see a new test execution with results from your GitLab pipeline.  \n4. Click into the execution to see detailed test case results.\n\n\n## Part 5: Advanced configuration options\n\nNow that you have the basic integration working, let's explore advanced configuration for enterprise requirements. Here are the next steps to follow:\n\n### 13. Organizing results with test suites\n\nFor better organization, you can specify which QMetry test suite should receive results:\n\n```yaml\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"Sprint 23 Regression Tests\"\n      testsuite_id: \"TS-456\"  # Optional: Use existing test suite ID\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n**When to use test suites**:\n\n* Organizing tests by sprint or release  \n* Separating regression tests from new feature tests  \n* Grouping tests by component or subsystem  \n* Creating test execution hierarchies for reporting\n\n### 14. Configuring automation hierarchy levels\n\nQMetry supports hierarchical test organization. Use the `automation_hierarchy` parameter to specify the organization level:\n\n```yaml\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      automation_hierarchy: \"2\"  # Level 2 hierarchy\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n**Hierarchy levels explained**:\n\n* **Level 1**: Top-level test suites (e.g., \"All Regression Tests\")  \n* **Level 2**: Sub-suites (e.g., \"Flight Control Tests\" under \"Regression Tests\")  \n* **Level 3**: Granular test groups (e.g., \"Altitude Hold Tests\" under \"Flight Control\")\n\n### 15. Multiple test result files\n\nFor complex projects with multiple test jobs, you can invoke the component multiple times:\n\n```yaml\nstages:\n  - test\n\n# Unit tests\nunit-tests:\n  stage: test\n  script:\n    - npm run test:unit\n  artifacts:\n    paths:\n      - unit-results.xml\n    when: always\n\n# Integration tests\nintegration-tests:\n  stage: test\n  script:\n    - npm run test:integration\n  artifacts:\n    paths:\n      - integration-results.xml\n    when: always\n\n# Upload unit test results\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"unit-results.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"Unit Tests - Sprint 23\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n\n  # Upload integration test results\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"integration-results.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"Integration Tests - Sprint 23\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n### 16. Custom runner tags\n\nFor enterprise environments with dedicated runners, specify runner tags:\n\n```yaml\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      runner_tag: \"production-runners\"  # Use specific runner pool\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n### 17. Custom test suite folders\n\nOrganize test suites into folders for better project structure:\n\n```yaml\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_folder_path: \"/Regression/Sprint-23/Flight-Controls\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\nThis creates a folder hierarchy in QMetry:\n\n```none\nAerospace Flight Control System/\n└── Regression/\n    └── Sprint-23/\n        └── Flight-Controls/\n            └── [Your test execution]\n```\n\n### 18. Advanced field mapping\n\nFor enterprise QMetry instances with custom fields, use the `testcase_fields` and `testsuite_fields` parameters:\n\n```yaml\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: test\n      project: \"Aerospace Flight Control System\"\n      file_name: \"results.xml\"\n      testing_type: \"JUNIT\"\n      testcase_fields: \"priority=P1,component=FlightControl,certification=DO-178C\"\n      testsuite_fields: \"release=v2.4.0,sprint=23\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\nThis adds custom metadata to test cases and suites for enhanced filtering and reporting.\n\n## Part 6: Real-world use cases\n\nLet's explore how organizations across different industries are using this integration to solve critical quality and compliance challenges.\n\n### Financial services: Enterprise banking platforms\n\nLeading financial institutions are evolving their engineering practices with integrated DevOps platforms. These organizations face unique challenges when managing test automation at scale.\n\n**The challenge for financial services**:\n\n* **Regulatory compliance**: Financial services must maintain detailed audit trails for all testing activities.  \n* **Multiple compliance frameworks**: Firms must adhere to FCA, PSD2, GDPR, and internal risk management policies.  \n* **High-frequency deployments**: Multiple production deployments are required daily across microservices.  \n* **Zero-tolerance for failures**: Banking systems require extremely high reliability.  \n* **Distributed teams**: QA teams need real-time visibility across global engineering teams.\n\n**The solution**: Financial services organizations implementing the QMetry GitLab Component can automate test result uploads across their CI/CD pipelines for:\n\n* Unit tests for hundreds of microservices  \n* API contract tests for inter-service communication  \n* End-to-end transaction flow tests  \n* Security and compliance scanning results  \n* Performance and load testing results\n\n**Example implementation approach**:\n\n```yaml\n# Financial services approach: Separate test uploads by test type\nstages:\n  - test\n  - security\n  - report\n\n# Unit tests for payment processing service\nunit-tests:\n  stage: test\n  script:\n    - mvn clean test\n  artifacts:\n    paths:\n      - target/surefire-reports/TEST-*.xml\n    when: always\n\n# Upload to QMetry with compliance metadata\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: report\n      project: \"Payment Processing Platform\"\n      file_name: \"target/surefire-reports/TEST-*.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"Payment Services - Unit Tests\"\n      testsuite_folder_path: \"/Regulatory/FCA-Compliance/Unit-Tests\"\n      testcase_fields: \"compliance=FCA,risk_level=high,service=payments\"\n      automation_hierarchy: \"2\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n**Potential business outcomes for financial services**:\n\n* **Significant reduction** in manual test reporting time  \n* **Complete audit trail coverage** for regulatory reviews  \n* **Real-time visibility** for distributed QA teams  \n* **Faster time-to-production** with automated quality gates  \n* **Enhanced compliance posture** with complete traceability from requirements to test execution\n\n### Aerospace flight control testing\n\nLet's explore how an aerospace company might use this integration for critical flight control system testing.\n\n**Aerospace software development faces unique requirements and challenges:**\n\n* **DO-178C compliance**: Aviation software must follow strict certification standards  \n* **Complete traceability**: Every requirement must link to test cases and execution results  \n* **Audit trails**: Regulators require detailed records of all testing activities  \n* **Safety-critical quality**: Failures can have catastrophic consequences  \n* **Multiple test levels**: Unit, integration, system, and certification tests\n\n**The solution:** By integrating GitLab CI/CD with QMetry, the aerospace engineering team achieves automated test execution and reporting.\n\n\n```yaml\nstages:\n  - build\n  - unit-test\n  - integration-test\n  - system-test\n  - report\n\n# Build flight control firmware\nbuild-firmware:\n  stage: build\n  script:\n    - make clean\n    - make build TARGET=flight-control\n  artifacts:\n    paths:\n      - build/flight-control.bin\n\n# Unit tests (DO-178C Level A)\nunit-tests:\n  stage: unit-test\n  script:\n    - make test-unit OUTPUT=junit\n  artifacts:\n    paths:\n      - test-results/unit-tests.xml\n    when: always\n\n# Hardware-in-the-loop integration tests\nhil-integration-tests:\n  stage: integration-test\n  tags:\n    - hil-test-bench  # Dedicated hardware test environment\n  script:\n    - ./scripts/deploy-to-test-bench.sh\n    - ./scripts/run-hil-tests.sh\n  artifacts:\n    paths:\n      - test-results/hil-tests.xml\n    when: always\n\n# System-level certification tests\ncertification-tests:\n  stage: system-test\n  tags:\n    - certification-environment\n  script:\n    - ./scripts/run-certification-suite.sh\n  artifacts:\n    paths:\n      - test-results/certification-tests.xml\n    when: always\n  only:\n    - main  # Only run on main branch\n\n# Upload unit test results to QMetry\ninclude:\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: report\n      project: \"Flight Control System v2.4\"\n      file_name: \"test-results/unit-tests.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"Unit Tests - DO-178C Level A\"\n      testsuite_folder_path: \"/Certification/DO-178C/Unit\"\n      testcase_fields: \"compliance=DO-178C,level=A,safety_critical=true\"\n      automation_hierarchy: \"2\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n\n  # Upload HIL test results\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: report\n      project: \"Flight Control System v2.4\"\n      file_name: \"test-results/hil-tests.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"Hardware-in-Loop Integration Tests\"\n      testsuite_folder_path: \"/Certification/DO-178C/Integration\"\n      testcase_fields: \"compliance=DO-178C,level=A,test_type=HIL\"\n      automation_hierarchy: \"2\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n\n  # Upload certification test results\n  - component: gitlab.com/sb9945614/qtm-gitlab-component/qmetry-import@1.0.5\n    inputs:\n      stage: report\n      project: \"Flight Control System v2.4\"\n      file_name: \"test-results/certification-tests.xml\"\n      testing_type: \"JUNIT\"\n      testsuite_name: \"System Certification Tests\"\n      testsuite_folder_path: \"/Certification/DO-178C/System\"\n      testcase_fields: \"compliance=DO-178C,level=A,certification_ready=true\"\n      automation_hierarchy: \"1\"\n      instance_url: ${INSTANCE_URL}\n      api_key: ${QMETRY_API_KEY}\n```\n\n### The results\n\n**Before integration**:\n\n* QA engineers manually exported test results from GitLab  \n* Imported results into QMetry through UI uploads  \n* Process took 2-3 hours per test cycle  \n* Human error risk in data entry  \n* Delayed feedback to stakeholders\n\n**After integration**:\n\n* Test results automatically flow from GitLab to QMetry  \n* Complete audit trail from commit → test → result  \n* Zero manual intervention required  \n* Real-time visibility for certification auditors  \n* Compliance reports generated automatically\n\n**Example QMetry dashboard after integration**:\n\n```none\n╔════════════════════════════════════════════════════════════╗\n║  Flight Control System v2.4 - Test Execution Dashboard     ║\n╠════════════════════════════════════════════════════════════╣\n║                                                            ║\n║  📊 Test Execution Summary (Last 7 Days)                   ║\n║  ───────────────────────────────────────────────────────── ║\n║  ✓ Total Tests Executed: 1,247                             ║\n║  ✓ Passed: 1,241 (99.5%)                                   ║\n║  ✗ Failed: 6 (0.5%)                                        ║\n║  ⏸ Skipped: 0                                              ║\n║                                                            ║\n║  📁 Test Suite Organization                                ║\n║  ───────────────────────────────────────────────────────── ║\n║  └─ Certification/                                         ║\n║     └─ DO-178C/                                            ║\n║        ├─ Unit/ (487 tests, 100% pass)                     ║\n║        ├─ Integration/ (623 tests, 99.2% pass)             ║\n║        └─ System/ (137 tests, 100% pass)                   ║\n║                                                            ║\n║  🔗 Traceability                                           ║\n║  ───────────────────────────────────────────────────────── ║\n║  Requirements Covered: 342/342 (100%)                      ║\n║  Test Cases Linked: 1,247/1,247 (100%)                     ║\n║  GitLab Pipeline Executions: 47 (automated)                ║\n║                                                            ║\n║  ⚠️  Action Items                                          ║\n║  ───────────────────────────────────────────────────────── ║\n║  • 6 failed tests require investigation                    ║\n║  • Last execution: 2 minutes ago (Pipeline #1543)          ║\n║  • GitLab Commit: a7f8c23 \"Fix altitude hold logic\"        ║\n║                                                            ║\n╚════════════════════════════════════════════════════════════╝\n```\n\n### Compliance and audit benefits\n\nBoth financial services and aerospace organizations can leverage this integration for compliance:\n\n**For financial services (FCA, PSD2, SOX)**:\n\n1. **Automated traceability**: Link regulatory requirements → test cases → execution results → GitLab commits  \n2. **Audit-ready documentation**: Complete test execution history with timestamps and pipeline references  \n3. **Risk management**: Real-time quality dashboards for risk assessment  \n4. **Regulatory reporting**: Generate compliance reports directly from QMetry test data\n\n**For aerospace certification (DO-178C, DO-254)**:\n\n1. **Automated traceability matrix**: QMetry links requirements → test cases → execution results → GitLab commits  \n2. **Immutable audit trail**: Every test execution is timestamped with pipeline ID, commit SHA, and executor  \n3. **Certification package generation**: QMetry generates compliant documentation pulling data from GitLab pipelines  \n4. **Real-time compliance dashboards**: Auditors can view test coverage and execution history in real-time\n\n## Complete configuration reference\n\nHere's a comprehensive reference of all available component inputs:\n\n| Input Parameter | Required | Default | Description |\n| ----- | ----- | ----- | ----- |\n| `stage` | No | `test` | GitLab CI/CD stage for the upload job |\n| `runner_tag` | No | `\"\"` | Specific runner tag to use (empty = any available runner) |\n| `project` | Yes | - | QMetry project name or key |\n| `file_name` | Yes | - | Path to test results file (relative to project root) |\n| `testing_type` | Yes | - | Test result format: `JUNIT`, `TESTNG`, `NUNIT`, etc. |\n| `skip_warning` | No | `\"1\"` | Skip warnings during import (`\"1\"` = skip, `\"0\"` = show) |\n| `is_matching_required` | No | `\"false\"` | Match existing test cases by name (`\"true\"` or `\"false\"`) |\n| `testsuite_name` | No | `\"\"` | Name for the test suite in QMetry |\n| `testsuite_id` | No | `\"\"` | Existing test suite ID to append results to |\n| `testsuite_folder_path` | No | `\"\"` | Folder path for organizing test suites (e.g., `/Regression/Sprint-23`) |\n| `automation_hierarchy` | No | `\"\"` | Hierarchy level for test organization (`\"1\"`, `\"2\"`, `\"3\"`, etc.) |\n| `testcase_fields` | No | `\"\"` | Custom fields for test cases (comma-separated: `field1=value1,field2=value2`) |\n| `testsuite_fields` | No | `\"\"` | Custom fields for test suites (comma-separated: `field1=value1,field2=value2`) |\n| `instance_url` | Yes | - | QMetry instance URL (store in CI/CD variable) |\n| `api_key` | Yes | - | QMetry API key (store in CI/CD variable, masked) |\n\n## Best practices for production use\n\nAs you scale your integration, follow these best practices:\n\n### Security\n\n* ✅ **Always use CI/CD variables** for sensitive data (API keys, URLs)  \n* ✅ **Mask and protect** API key variables  \n* ✅ **Rotate API keys** periodically (quarterly recommended)  \n* ✅ **Restrict API key permissions** to minimum required (write to test results only)  \n* ✅ **Use protected branches** for production test uploads\n\n### Performance\n\n* ✅ **Keep test result files reasonable size** (\\\u003C 10 MB recommended)  \n* ✅ **Split large test suites** into multiple jobs/files  \n* ✅ **Use parallel test execution** to reduce pipeline duration  \n* ✅ **Cache dependencies** to speed up test execution\n\n### Organization\n\n* ✅ **Use consistent naming conventions** for test suites and folder paths  \n* ✅ **Leverage custom fields** for filtering and reporting  \n* ✅ **Create folder hierarchies** that mirror your test strategy  \n* ✅ **Document your integration** in project README files\n\n### Troubleshooting\n\n* ✅ **Review job logs** for API communication details  \n* ✅ **Verify test result file format** matches `testing_type` parameter  \n* ✅ **Check QMetry project exists** and API key has access  \n* ✅ **Ensure test result files** are available as pipeline artifacts\n\n## Summary and next steps\n\nCongratulations! You've successfully integrated GitLab CI/CD with QMetry Test Management Enterprise. Your setup now provides:\n\n* **Automated test result uploads** – No more manual exports and imports \n\n* **Real-time visibility** – QA teams see results immediately after pipeline execution \n\n* **Complete traceability** – Link GitLab commits, pipelines, and test executions \n\n* **Enhanced compliance** – Maintain audit trails for regulated industries \n\n* **Scalable quality processes** – Support growing test suites without added overhead\n\n### What happens now\n\nEvery time your GitLab pipeline runs:\n\n1. Tests execute and generate result files.  \n2. The QMetry component automatically uploads results to your instance.  \n3. QA teams, stakeholders, and auditors see results in QMetry dashboards.  \n4. AI-powered insights analyze execution patterns and identify improvements.  \n5. Compliance reports generate automatically with full traceability.\n\n### Expand your integration\n\nNow that you have the basic integration working, consider these advanced scenarios:\n\n* **Bi-directional integration**: Use QMetry's API to trigger GitLab pipelines from test management workflows.\n\n* **Multi-project deployments**: Scale the component across your organization's GitLab projects.\n\n* **Custom reporting**: Build dashboards combining GitLab pipeline metrics with QMetry test analytics.\n\n* **Scheduled test execution**: Use GitLab scheduled pipelines to run regression suites nightly.\n\n## Learn more and get help\n\n### Documentation and resources\n\n* **Component documentation**: [GitLab CI/CD Catalog](https://gitlab.com/explore/catalog)  \n* **QMetry documentation**: [QMetry Support Portal](https://qmetrysupport.atlassian.net/wiki/spaces/QPro/overview)  \n* **SmartBear resources**: [SmartBear Academy](https://smartbear.com/resources/)  \n* **GitLab CI/CD documentation**: [GitLab CI/CD Documentation](https://docs.gitlab.com/ee/ci/)\n\n### Support\n\n**For component technical questions**:\n\n* Visit the [component repository](https://gitlab.com/sb9945614/qtm-gitlab-component).  \n* Open an issue on the project.  \n* Check existing issues for common questions.\n\n**For QMetry product questions**:\n\n* Contact SmartBear support at support@smartbear.com.  \n* Visit the [QMetry Community Forum](https://community.smartbear.com/).",{"featured":29,"template":13,"slug":739},"streamline-test-management-with-the-smartbear-qmetry-gitlab-component",{"content":741,"config":751},{"title":742,"description":743,"authors":744,"heroImage":746,"date":736,"body":747,"category":9,"tags":748},"GitLab Duo CLI: Agentic AI for the development lifecycle, now in the terminal","Developers who work outside the IDE and GitLab UI can access GitLab Duo Agent Platform in the terminal with built-in security controls and headless mode support.",[745],"John Coghlan","https://res.cloudinary.com/about-gitlab-com/image/upload/v1775561395/bhe1as7ttjvzltxwgo5m.png","Debugging a broken pipeline at the end of a sprint, or wiring AI into a CI/CD workflow that runs without anyone watching, is exactly where today's AI assistants fall short given their focus on coding – which is only a portion of the software lifecycle. They're built for interactive coding sessions, not automation across different stages of software development. GitLab Duo CLI, now in public beta, is built for both.\n\nGitLab Duo CLI brings agentic AI powered by [Duo Agent Platform](https://about.gitlab.com/gitlab-duo-agent-platform/) to the terminal with full support for automated workflows, alongside an interactive chat mode when you need a human in the loop. This article highlights what Duo CLI does, how its two operating modes work, and the security model behind it.\n\n## How to install GitLab Duo CLI\n\nIf you already have GLab (the GitLab CLI) installed, enter:\n\n```\nglab duo cli\n```\n\nThen follow the prompts.\n\nIf you don't have GLab yet, you can [install it here](https://gitlab.com/gitlab-org/cli/#installation) or [use GitLab Duo CLI as a standalone tool](https://docs.gitlab.com/user/gitlab_duo_cli/#without-the-gitlab-cli).\n\n## Why the terminal, and why now\n\nThe first wave of AI assistants for software development lived in the IDE, and focused solely on coding. That made sense when the job was autocomplete. But as AI agents start *doing things* across every stage of the software lifecycle, e.g. running tests, triggering pipelines, monitoring vulnerability scans, and more, the IDE may no longer be the only abstraction needed to get the job done.\n\nThe best developer tools are ones that work for both humans and machines. CLIs have had decades of design iteration toward that goal. They're composable. You can pipe output, chain commands, and drop them into scripts. They're debuggable: when something goes wrong, you run the same command yourself and see exactly what the agent saw. And they're transparent. No background processes, no initialization dance, no protocol to decode when things break.\n\nTerminal interfaces are better for automation, scripting, and environment portability. IDE interfaces are better for interactive, context-rich development. GitLab Duo CLI is designed for the former, while Duo Agentic Chat in the IDE and UI covers the latter.\n\n## What GitLab Duo CLI can do\n\nWith GitLab Duo CLI, developers can build, modify, refactor, and modernize code — similar to other AI-powered coding assistants built for the terminal. But that’s not where they stop. Any agent and flow defined within GitLab Duo Agent Platform is accessible via Duo CLI, whether it is to automate CI/CD configuration and optimize pipelines, or to perform multi-step development tasks autonomously across the entire software development lifecycle.\n\nGitLab Duo CLI runs in two modes:\n\n* **Interactive mode**, an editor-agnostic terminal chat experience with human-in-the-loop approval before any action is taken. Use it to understand codebase structure, create code, fix errors, or troubleshoot broken pipelines.  \n* **Headless mode**, non-interactive, designed for runners, scripts, and automated workflows. Drop it into CI/CD and let it work without handholding.\n\n## AI with guardrails\n\nAgentic AI that can take actions creates real security exposure. GitLab Duo CLI addresses this at the platform level, not as an afterthought:\n\n* **Human-in-the-loop by default** in interactive mode, so no action is taken without approval.  \n* **Prompt injection detection** is built into the GitLab Duo Agent Platform, not bolted on.  \n* **Composite identity** limits what the agent can access and makes every AI-driven action auditable.\n\nGitLab Duo CLI also supports [custom instruction files](https://docs.gitlab.com/user/duo_agent_platform/customize/), e.g. `chat-rules.md`, `AGENTS.md`, and `SKILL.md`, that define which tasks, resources, context, knowledge, and actions your agents are permitted to take. **This is the principle of least privilege applied to AI: Your agent does exactly what you've authorized, and nothing more.**\n\nWatch GitLab Duo CLI in action:\n\u003Ciframe src=\"https://player.vimeo.com/video/1179964611?badge=0&autopause=0&player_id=0&app_id=58479\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write; encrypted-media; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" style=\"position:absolute;top:0;left:0;width:100%;height:100%;\" title=\"GitLab Duo CLI Beta Demo V1\">\u003C/iframe>\u003Cscript src=\"https://player.vimeo.com/api/player.js\">\u003C/script>\n\n## Use GitLab Duo CLI today\n\nYou can experience the benefits of GitLab Duo CLI by [starting a free trial of GitLab Duo Agent Platform](https://about.gitlab.com/gitlab-duo-agent-platform/). \n\nIf you are already using GitLab in the free tier, you can sign up for GitLab Duo Agent Platform by [following a few simple steps](https://docs.gitlab.com/subscriptions/gitlab_credits/#for-the-free-tier-on-gitlabcom). \n\nAnd if you are an existing subscriber to GitLab Premium or Ultimate, you can take advantage of GitLab Duo CLI by simply [turning on Duo Agent Platform](https://docs.gitlab.com/user/duo_agent_platform/turn_on_off/) and start using the GitLab Credits [that are included](https://docs.gitlab.com/subscriptions/gitlab_credits/#included-credits) with your subscription.",[749,9,750],"AI/ML","features",{"featured":29,"template":13,"slug":752},"gitlab-duo-cli",{"promotions":754},[755,769,780],{"id":756,"categories":757,"header":759,"text":760,"button":761,"image":766},"ai-modernization",[758],"ai-ml","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":762,"config":763},"Get your AI maturity score",{"href":764,"dataGaName":765,"dataGaLocation":243},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":767},{"src":768},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":770,"categories":771,"header":772,"text":760,"button":773,"image":777},"devops-modernization",[9,568],"Are you just managing tools or shipping innovation?",{"text":774,"config":775},"Get your DevOps maturity score",{"href":776,"dataGaName":765,"dataGaLocation":243},"/assessments/devops-modernization-assessment/",{"config":778},{"src":779},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":781,"categories":782,"header":784,"text":760,"button":785,"image":789},"security-modernization",[783],"security","Are you trading speed for security?",{"text":786,"config":787},"Get your security maturity score",{"href":788,"dataGaName":765,"dataGaLocation":243},"/assessments/security-modernization-assessment/",{"config":790},{"src":791},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"header":793,"blurb":794,"button":795,"secondaryButton":800},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":796,"config":797},"Get your free trial",{"href":798,"dataGaName":50,"dataGaLocation":799},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":504,"config":801},{"href":54,"dataGaName":55,"dataGaLocation":799},1777309993270]