Credential access
Reads GitLab tokens, config, and repository credentials.
brew / rank 206
Open-source GitLab command-line tool. Version 1.111.0 via Homebrew; verified 2026-07-30.
agent safety
glab controls GitLab repositories, pipelines, releases, and authenticated project state.
Reads GitLab tokens, config, and repository credentials.
Can create releases, merge requests, issues, pipelines, and repo changes.
Can upload release assets and trigger CI/CD.
Gate token output, release, pipeline, and write commands.
Allow read-only queries; require approval for releases, pipeline triggers, and project writes.
install
brew install glabprovider-native install command
overview
Open-source GitLab command-line tool
history
GLab is the open-source GitLab command-line interface. It brings GitLab issues, merge requests, CI/CD pipelines, jobs, releases, repository operations, authentication, API access, and related DevOps tasks into the terminal beside Git.
GLab began as a community project by Clement Sam. GitLab's adoption announcement says he started work more than two years before December 2022 to make his workflow easier and avoid switching among browser tabs, IDE, and terminal.
The original profclems/glab GitHub repository was created in 2020 and gathered a community before GitLab adopted it. GitLab's announcement says more than 80 contributors had built on the tool before adoption, adding commands for merge requests, issues, pipelines, and more.
GitLab adopted the project in 2022 and moved it into gitlab-org/cli as the foundation of GitLab's native CLI experience. The transition included migrating project infrastructure, adapting GitHub Actions work to GitLab CI, reviewing security, and updating distribution methods to point to the new repository.
GLab's adoption is tied directly to GitLab's broader editor and terminal strategy. GitLab's announcement frames the CLI as another way to integrate GitLab with tools developers already use, following its earlier adoption of GitLab Workflow for VS Code.
The official README documents support for GitLab.com, GitLab Dedicated, and GitLab Self-Managed, with multiple authenticated GitLab instances and automatic host detection from Git remotes. Package metadata in this batch shows GLab in Homebrew, Chocolatey, Debian, Fedora, MacPorts, Nix, Arch, Scoop, Ubuntu, Winget, openSUSE, and Alpine.
Practitioners use glab to stay in the terminal while listing and creating issues, opening and reviewing merge requests, checking pipelines, retrying jobs, creating releases and changelogs, managing labels and milestones, calling the GitLab API, and configuring authentication.
The README shows a command structure of glab command subcommand flags and examples such as listing merge requests assigned to the user, approving a merge request, and creating an issue with milestone, title, and label. Authentication can use OAuth, personal access tokens, CI job tokens, and host-specific configuration.
GLab matters to package maintainers because it is the GitLab-side counterpart to the habit of doing forge work from a shell. It turns GitLab from a browser destination into a scriptable CLI surface for local development and CI contexts.
Its history also shows a common open-source lifecycle: a community tool proved demand, then the platform vendor adopted it, moved distribution, and expanded support for enterprise and self-managed installations.
security posture
No matching local secret-handling manifest was found for glab. Nucleus package metadata is still published here so future coverage has a stable package URL.
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/Library/Application Support/glab-cli/config.yml$XDG_CONFIG_HOME/glab-cli/config.yml~/.config/glab-cli/config.ymlCredential-bearing paths to review before unattended agent runs.
~/Library/Application Support/glab-cli/config.yml$XDG_CONFIG_HOME/glab-cli/config.yml~/.config/glab-cli/config.ymlexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
glab | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:glab |
|---|---|
| Version | 1.111.0 |
| Package manager | Homebrew |
| Homepage | https://gitlab.com/gitlab-org/cli |
| Last updated | 2026-07-30T22:47:44Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.