[{"data":1,"prerenderedAt":16},["ShallowReactive",2],{"blog-tag-en-admission-controller":3},[4],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fgitlab-auto-devops-k3s-admission-controller-gate","Why GitLab Auto DevOps' 'It Just Works' CI Is the Closest Threat to Your Production K3s Cluster","GitLab Auto DevOps runs SAST\u002FDAST automatically the moment you turn it on. But a scan 'running' and a vulnerable image never reaching your production K3s cluster are two completely different things. Here's how to build an audit gate between CI\u002FCD and the cluster.","2026-08-17",[10,11,12,13,14,15],"k3s","kubernetes","gitlab","ci-cd","devsecops","admission-controller",1787649527480]