GitLab Integration with TigerTrust
TigerTrust provides native GitLab integration for certificate lifecycle management in your CI/CD pipelines.
GitLab CI/CD Configuration
Add TigerTrust to your .gitlab-ci.yml:
yaml1include: 2 - component: tigertrust/certificate-[email protected] 3 4variables: 5 TIGERTRUST_API_KEY: $TIGERTRUST_API_KEY 6 7stages: 8 - build 9 - sign 10 - deploy 11 12sign-artifacts: 13 stage: sign 14 script: 15 - tigertrust sign --certificate code-signing-cert --files dist/* 16 artifacts: 17 paths: 18 - dist/ 19 20provision-certificate: 21 stage: deploy 22 script: 23 - tigertrust provision --domain $CI_ENVIRONMENT_SLUG.example.com 24 - tigertrust deploy --target kubernetes
Container Registry Signing
Sign container images pushed to GitLab Container Registry:
yaml1sign-container: 2 stage: sign 3 image: docker:latest 4 services: 5 - docker:dind 6 script: 7 - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA . 8 - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA 9 - tigertrust cosign sign $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
Protected Variables
Store certificates securely using GitLab protected variables:
- API keys stored as masked variables
- Certificate secrets as file variables
- Environment-scoped credentials
- Group-level shared secrets
Auto DevOps Integration
TigerTrust works with GitLab Auto DevOps:
- Automatic certificate provisioning for review apps
- Production certificate management
- Let's Encrypt integration
- Custom domain certificate handling
Merge Request Validation
Validate certificates in merge requests:
- Certificate compliance checking
- Expiration date validation
- Policy enforcement before merge
- Automated certificate testing
Automate your certificate lifecycle with GitLab and TigerTrust.