Mark Mishaev

Director of Engineering, Software Supply Chain Security (SSCS) at GitLab. Based in Beersheva, Israel.

Background: software engineer and cloud architect, currently focused on engineering leadership in supply chain security.

What I work on

• Software Supply Chain Security: SAST, secret detection, dependency scanning, artifact provenance, attestations.
• Secrets Management and OpenBao integration.
• Pipeline security and CI/CD trust boundaries.

Selected work

• labkit-rs — Rust implementation of GitLab's observability library: structured logging, metrics, tracing, correlation IDs.
• rust-service-template — reference Rust service demonstrating labkit-rs end-to-end.
• nono-gitlab-demo — keyless signing PoC using CI_CONFIG_REF_URI (GitLab 18.11).
• malware-token-exchange-poc — SSCS PoC for short-lived credential exchange.

Reach me

• Email: [email protected]
• LinkedIn: mark-mishaev-64a25452
• GitLab handbook: Software Supply Chain Security sub-department