---
title: "How to integrate DSM with GitLab CI/CD"
slug: "how-to-integrate-dsm-with-gitlab-cicd"
updated: 2026-11-03T14:48:18Z
published: 2026-11-03T14:48:18Z
canonical: "docs.senhasegura.io/how-to-integrate-dsm-with-gitlab-cicd"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to integrate DSM with GitLab CI/CD

In Segura™ DSM, the integration with CI/CD pipelines is carried out via the CLI. This tool captures all the environment variables running during a specific compilation or deployment, providing discovery of sensitive variables and dynamically injecting secrets from a secure vault directly into the environment variables. This dynamic approach contributes to secure and efficient secrets management in development and production environments.

The image below shows a diagram of how the integration between Segura™ DSM CLI and GitLab CI/CD works:

![GitLab CI/CD integration with Segura® DSM](https://cdn.document360.io/5a1d58df-64ce-42a2-8b23-688477d32f33/Images/Documentation/image-FETKVZ3B.png)

## Requirements

- A user with access to GitLab with permission to add and edit project files.
- The origin GitLab server has access to Segura™.
- Properly configured runb and `segura-mapping.json` files.
- The machine where the plugin is running must have the following packages installed: `bash`, `jq`, `sed`, and `curl`.

          Info

          

If you don't have the `dsm-cli` and `segura-mapping.json` files, ask the Segura™ support team for them.

## Integrate DSM with GitLab CI/CD using the DSM CLI

To integrate DSM with GitLab using CLI, follow these steps:

1. Access a project from your GitLab account.
2. Add the executable, the configuration file, and, optionally, the `segura-mapping.json` file to the project's repository.
3. On Segura™, access your project's **CI/CD Variables** through **Products menu > CI/CD > Variables**.
4. Register the variables needed to run the DSM CLI.
5. Edit your `.gitlab-ci.yml` file in your project folder;
6. During the desired work in your pipeline, add the code to run the DSM CLI and confirm the change to the file.
7. Run the GitLab pipeline to finish.

Example of a `.gitlab-ci.yml` configuration file using the DSM CLI:

```
# This file is an example to demonstrate the usage of DSM CLI inside a GitLab pipeline
# Make sure to upload the executable and the configuration files to your project
# For more information on its usage, please visit https://docs.segura.io/

default:
  image: debian

build:
  script:
    - dsm runb \
        --app-name "$APPLICATION" \
        --system "$SYSTEM" \
        --environment "$ENVIRONMENT" \
        --config .config.yml
    - source .runb.vars # After this command the secrets should be available
```

          Info

          

Ensure you select OAuth 2.0 as the authentication method in Segura™ DSM, as the CLI uses it to fetch information.

## Use the DSM CLI to inject secrets into pipelines in GitLab

Após concluir a configuração da CLI no seu projeto, siga as instruções abaixo:

1. Go to the **CI/CD > Pipelines** menu.
2. Click on **Run Pipeline**.
3. In the next step, choose the desired branch and click **Run Pipeline** again.
4. Then go to **Status > Job Name** to view the details and results of the execution.

The output of the execution will look like the one below:

```
Using config file: segura/.config.yml
Registering Application on DevSecops
Trying to authenticate on Segura DevSecOps API
Authenticated successfully
Application register success
Posting variables in Segura...
Trying to authenticate on Segura DevSecOps API
Authenticated successfully
Posting variables successfully
Finding secrets from application
Trying to authenticate on Segura DevSecOps API
Authenticated successfully
Injecting secrets!
Injecting secret: password... Sucess
Injecting secret: PORT... Sucess
Injecting secret: VERSION... Sucess
Injecting secret: ip... Sucess
Injecting secret: hostname... Sucess
Injecting secret: username... Sucess
Injecting secret: additional information... Sucess
Secrets injected!
Deleting linux variables...
Is not possible to delete linux variables!
Finish
```

---

Do you still have questions? Reach out to the [Segura Community](https://community.senhasegura.io/).