
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
This is a lib that use gitlab api to search code. This code is based in the lib gitlab-search.
It is a lib to search code at gitlab. This search can be parameterized with params groups, extension, filename, path, max-workers and visibility.
pip install gl_search
The lib use gitlab token (GITLAB_PRIVATE_TOKEN) to search.
Get your token at gitlab and then execute following command to save at home user at the .gl-settings.toml file.
gl-search setup-token <token>
Yes you can. Use following command to setup the gitlab-address
gl-search setup-gitlab-address <self-hosted-gitlab-address>
You can get on following link gitlab-token The TOKEN must be generated with scope read_api.
I had problem with repo visibility using a mentioned lib above so I built this script to resolve my problem.
gl-search search test
This options is show up below.
➜ gl_search git:(main) ✗ gl-search search --help
Usage: gl-search search [OPTIONS] SEARCH_CODE_INPUT
Search command.
Options:
-p, --path TEXT search by Path
-fn, --filename TEXT search by filename
-ext, --extension TEXT code filename extension :: py,js,cs
-g, --groups TEXT search by gitlab group
-mw, --max-workers INTEGER number of parallel requests
-v, --visibility [internal|public|private]
repositories visibility
-xdr, --max-delay-request INTEGER
-d, --debug Debug :: show urls called.
--help Show this message and exit.
The lib was built using click, rich, request, ThreadPoolExecutor.
FAQs
Script to help search code in self-hosted gitlab
We found that gl_search demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.