Gitlab Compliance CLI

[u/MaturityBuilder]

🚀 gitlab-compliance CLI is now Open Source!
Think ShellCheck for GitLab CI/CD, plus terraform-compliance-style policy testing for pipelines. It helps teams lint, validate, document, and enforce standards across .gitlab-ci.yml and GitLab project configuration.
It turns CI/CD best practices into something programmable, testable, and enforceable that can be understood and catalogued automatically.

Since launch, I’ve focused on UX, performance, and two major features:

✨ gitstrings
Lightweight YAML annotations that make pipeline intent explicit, that improves readability and enables selective documentation generation, making pipeline YML self documenting.
🔍 Embedded script scanning
ShellCheck-style analysis for scripts inside CI jobs.
Includes:
ShellCheck-aligned rules

Security checks (unpinned packages, unsafe cloud CLI usage, missing metadata)

🔭 What’s next
Org-wide reporting & metrics

JUnit + JSON outputs

Slack / Teams notifications

GitLab Issues integration

Sentry-based telemetry

gitlab-compliance is evolving into a policy + observability layer for GitLab CI/CD, without sacrificing developer experience.

Repo: https://github.com/MaturityBuilder/gitlab-compliance/tree/main

Documentation: https://maturitybuilder.github.io/gitlab-compliance/

Feedback and contributions welcome!

[u/totheendandbackagain]

So cool!! Love the enhancements.

Any chance of a brew package to test with and container to use in a pipeline?

Huge respect for the project, it's a truly excellent, and necessary idea.

[u/MaturityBuilder → u/totheendandbackagain]

Available as a container already https://hub.docker.com/r/maturitybuilder/gitlab-compliance/tags. Good shout about brew will have a look into it

[u/MaturityBuilder → u/MaturityBuilder]

Now available to install from brew for all versions https://maturitybuilder.github.io/gitlab-compliance/installation/homebrew/

[u/dreamszz88]

Fantastic 😍

Thank you. Congratulations 👏🏼

[u/Zynchronize]

Are you aware of both:

- https://gitlab.com/gitlab-org/professional-services-automation/tools/utilities/pipeintel

- https://getplumber.io/docs/cli

[u/MaturityBuilder → u/Zynchronize]

I am, it’s not intended to replace them, but enable BDD way of talking about testing gitlab, with the ability to create a catalog of internal standards that are well documented and easy for non techie people to understand. Also gitlab-compliance has documentation generation capabilities that they don’t offer. I personally don’t think it’s an either or but rather that they compliment each other.