gitlab Apr 7, 2026 Pipeline security lessons from March supply chain incidents (opens in new tab) database-designci-cdopen-sourcetrivypipeline-securitycheckmarx-kicsaxiosjava-script