[ishcheklein]

Hey! Disclaimer - I'm one of the DVC maintainers :) Super excited for the team on this release!

For the last two years we have seen over and over again how our users take DVC and use it inside Gitlab, Github, etc. This product was born partially as a result of these discussions, partially as an initial visions for the ML tools ecosystem - Hashicorp-like.

Having A software engineering background I really hope that integrating ML workflow into engineering tools will be the future of this space. And with CML and other tools (e.g. https://github.blog/2020-06-17-using-github-actions-for-mlop...) we see this happening.

[sytse]

Very cool to see this!

I've added integrating CML closer into GitLab to our direction page with https://gitlab.com/gitlab-com/www-gitlab-com/-/merge_request...

If you want to show the results in the Merge Request itself like we do for things like test results and security scans please let us know. Open an issue and if there is no response my Twitter handle is @sytses

[ishcheklein]

Hey Sytse! Thanks for the kind words. We're very interested in a deep integration with Gitlab :) Can you share some examples of these security scan reports, please? Right now, we return CML reports as comments in Merge Requests like this: https://gitlab.com/iterative.ai/cml-cloud-case/-/merge_reque.... We'd appreciate any tips or suggestions.

[sam-white]

For some examples, you can see these designs for including feedback on security scans directly in an MR: https://gitlab.com/gitlab-org/gitlab/-/issues/12896/designs

[sytse]

Awesome! Other replies to your comment already gave suggestions. Consider asking them for a call to give in if you need more information.

[ishcheklein]

Thanks! we'll check it out and be in touch.

[stkerr]

Our public documentation on these reports and how you can integrate with them is at https://docs.gitlab.com/ee/development/integrations/secure/ in our documentation if you want to check it out! tl;dr - we have a JSON format for security results that if you format your results in, it will show up in the various interfaces in the product automatically.