 Hi, my name's Fernando and I'm a technical marketing manager here at GitLab. And today I'm going to go over some of the newly released security features in GitLab 14.3. Now let's get started. We've recently added project-level DAST and secret detection scan execution policies. This is the first step towards our vision of bringing unified security policies to GitLab. Now, users can require DAST and secret detections to run on a regular schedule independent of the GitLab CI YAML. This will allow security teams to separately manage these scan requirements without allowing developers to change the configurations. Let's take a look at this. First we go to the security and compliance tab and click on policies. This will open up the policies window. Then we go and we click on new policy. Once here we see that we have the policy typeset to network. This is for network policies. Let's go ahead and change that to scan execution. Here we can configure the scanners. We have released the first version of our proprietary SAS engine built in-house and maintained by GitLab static analysis and vulnerability research groups. To start off, this tool will be working for Ruby on Rails and it will reduce false positives. I'll show you how it works now. Within the vulnerability report, I can now click on one of my vulnerabilities and I can see that a false positive was detected. Note that this can also be seen in merge requests. If you want to learn more about our next generation SAS analyzer, be sure to click the links in the description. Another feature is that you'll be able to see audit events for merge request approval setting changes. This allows us to see what rules are now enforced via merge request approvals and who has changed them. Let's go to the security and compliance tab and click on audit events. Here we can see different events including that of merge request approvals. This really helps auditors figure out what configurations were edited or removed. And finally, the last thing that I wanted to go over is the static analysis analyzer updates. Since static analysis is composed of many different security analyzers, we make sure to manage and maintain these over time. Here are some of the new updates which contain additional coverage, bug fixes and improvements. There's Breakman, ESLint, PMD Apex, SpotBugs, as well as Sungrep. And as always, thanks for watching, and if you enjoyed this, please hit that subscribe button and check out the links in the description for more information. Until next time!