Their collaboration aims to simplify and secure project development while supporting comprehensive software lifecycle management. By integrating GitLab's code management, planning, CI/CD workflows, and advanced security features with Google Cloud Control Console and ArtifactRegistry, iThome reduces the burden of managing self-hosted solutions on the cloud. This integration allows users to streamline their DevSecOps workflows and leverage native supply chain security capabilities offered by Google Cloud.

With iThome, developers can not only reduce the complexity of software delivery but also gain governance and policy enforcement throughout the entire software development lifecycle. The integration of Google ArtifactRegistry and GitLab's workflow allows developers to view security scan results and vulnerability reports in ArtifactRegistry, assess software build sources and methods using SLSA ratings, and gain transparency with software bill of materials (SBOM). The Binary Authorization feature ensures secure deployments by acting as a deployment gate.

Furthermore, iThome provides an additional security mechanism through verification and signatures, restricting the operation of programs in clusters that do not meet security and validation requirements. With iThome, you can ensure a secure and efficient software development process, deploying only verified and compliant software packages