GitLab Integration with TigerTrust
TigerTrust provides native GitLab integration for certificate lifecycle management in your CI/CD pipelines.
GitLab CI/CD Configuration
Add TigerTrust to your .gitlab-ci.yml:
include: - component: tigertrust/certificate-[email protected] variables: TIGERTRUST_API_KEY: $TIGERTRUST_API_KEY stages: - build - sign - deploy sign-artifacts: stage: sign script: - tigertrust sign --certificate code-signing-cert --files dist/* artifacts: paths: - dist/ provision-certificate: stage: deploy script: - tigertrust provision --domain $CI_ENVIRONMENT_SLUG.example.com - tigertrust deploy --target kubernetes
Container Registry Signing
Sign container images pushed to GitLab Container Registry:
sign-container: stage: sign image: docker:latest services: - docker:dind script: - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA . - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA - tigertrust cosign sign $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
Protected Variables
Store certificates securely using GitLab protected variables:
- API keys stored as masked variables
- Certificate secrets as file variables
- Environment-scoped credentials
- Group-level shared secrets
Auto DevOps Integration
TigerTrust works with GitLab Auto DevOps:
- Automatic certificate provisioning for review apps
- Production certificate management
- Let's Encrypt integration
- Custom domain certificate handling
Merge Request Validation
Validate certificates in merge requests:
- Certificate compliance checking
- Expiration date validation
- Policy enforcement before merge
- Automated certificate testing
Automate your certificate lifecycle with GitLab and TigerTrust.