Other apps

General security tip

Please review our acceptable use policy.

Some tools and extensions integrate into your various work accounts and will request certain permissions for them. Please always be cautious of the permissions requested by the application. For example a GitLab integration that only requests to be able to read your user profile can be appropriate, however an integration shouldn’t be able to have read or write access the API. Similarly, you should not input a GitLab Personal Access Token linked to your work account in a third-party tool.

Here are some non-exhaustive guidelines:

• If the application requires credentials (password, access token, etc.) to any of your work accounts (GitLab, Google, Okta, etc.) please do not enter the credentials and remove the application

• If the application uses OAuth, make sure to only allow access to your account if the permissions required by the application are very minimal (such as accessing your public profile)

  

  If the application requires anything such as read-only access to the API or anything that could grant access to confidential data please do not continue the authentication process and remove the application

  

• When installing something from an “app store” of some sort, look for the reviews, the number of downloads and especially for “badges” that show that the application was reviewed by the app store. For example the Chrome Web Store has a featured badge for popular trustworthy applications

• When in doubt, do not install the application

In any case, you are encouraged to use our Individual Use Software Request process prior to installing third party apps.

Internet browsers

Ad privacy

Sharing your screen to get your idea across can be very productive, but having personalized ads show up on a webpage may be undesirable. Shut off interest based ads by setting your preferences. Google Ad Settings, AdChoices

Browser extensions

In general, if a particular application or browser extension (sometimes called a plugin) is referenced in the handbook, it is considered “approved”. For example, 1Password is centered around the browser extension. Another application is Zoom, which has a scheduler extension. However, be sure to search for specific information about the application, in case the desktop version is recommended and the browser extension is not (e.g. Grammarly).

If you wish to use an extension not referenced in the handbook, consider the following before installing and using it:

• The extension should be work-related and help your overall productivity.
• The extension should be available from a reputable source, such as the browser’s library of approved extensions.
• Ask. Feel free to ask your co-workers about good extensions, and if you have security or privacy concerns about an extension, ask the security team in #security on Slack.

Some browser extensions are listed below

Adblockers

Adblockers are browser extensions that can block advertising, prevent user tracking, and include other security-related features. A popular one recommended by the Security Team is uBlock Origin which can be installed by following the links below:

• Chrome
• Firefox
• Edge

One Tab

One Tab (Free) turns tabs into a list which can be sorted and exported.

SessionBox

SessionBox is a browser extension that helps you deal with multiple sessions. It binds a particular session to a tab. This is particularly useful for testing with different users in the same browser.

RSS Feed Reader

If you would like to receive daily notifications on newly opened issues, the Chrome extension RSS Feed Reader is an excellent tool for accomplishing this task. After installing the extension, access the project page you are interested in following, under the project issues click on the “Subscribe to RSS feed” button which you can find in the top right corner of the page.

Flash (do NOT use)

Flash: Due to security flaws, we strongly recommend not using Adobe Flash. Certainly do not install it on your local machine. But even the Google Chrome plugin that lets you see embedded Flash content in websites can pose a security hazard. If you have not already, go to your Chrome Flash Settings and disable Flash. For further context, note that Google Chrome is removing Flash support soon, and while the plugin is better than a local install of Flash, it still leaves vulnerabilities for zero-day attacks.

Prototyping in the browser

Sometimes you only need to capture small textual or visual changes in a web page as part of a bug report or a feature proposal. You can use development tools that are usually built-in in most browsers which allow you to select and edit page element attributes as well as move around page elements like buttons or links.

You can also make the entire web page editable, using the designMode attribute, by typing document.designMode="on"; in the development tools console or creating a bookmarklet by dragging the button below to your Bookmarks Bar.

Edit page

Notes/writing

Bear

Bear (Free) is a clean writing tool for notes and long-form writing. Ulysses $5/month is also a great choice.

Grammarly

Grammarly is a good tool for those who want to feel more comfortable drafting written communication in English (American or British). There is a free and premium version.

LanguageTool

As an alternative to Grammarly, we can combine LanguageTool in the browser with a local LanguageTool server . This ensures that spell and grammar checking remains both convenient and confidential:

1. Install the LanguageTool browser extension.
2. Either install LanguageTool as a Homebrew service, or install a Docker engine and follow the setup instructions of any LanguageTool Docker image provider.
3. Configure the browser extension under Experimental settings > Local server.

Simplenote

Simplenote is a free, open source note taking app which is cross platform, syncs across all devices, and supports markdown.

Productivity

Alfred

Alfred is an application launcher and productivity tool for macOS. The core app is free to download and use, but the paid Powerpack enables more powerful searching, a fantastic clipboard history feature, app integrations, easy access to shell commands, and more. It’s a great tool for developers and general productivity enthusiasts alike. The clipboard history feature is nicely integrated with many tools, and for example will forget passwords copied from 1Password after they have been pasted.

Alfred adds the ability to create custom searches. Here are two to search the docs and the handbook.

https://docs.gitlab.com/search/?q={query}

https://handbook.gitlab.com/handbook/#stq={query}&stp=1

Read Searching using Alfred to learn more and be able to automatically add them.

There is also a repo maintained by GitLab team members with GitLab related workflows.

Brain.fm

Brain.fm (free trial) provides music specially designed to help you focus, relax, meditate, recharge, sleep (great for plane rides). It’s not just music though. They use scientifically validated brainwave manipulations to get results. It is AMAZING and really does work. Make sure to use with headphones, and give it 10-15 minutes for your brain to get used to it. ($6.95/$15.99/$47.40 per month/quarter/year)

Calendly

Note: Google Calendar has added support to create appointment schedules, which are similar to the functionality provided by Calendly.

Calendly connects to your Google Calendar so people outside GitLab can easily book a time with you. If you are scheduling a meeting with a GitLab team-member, please use Google Calendar and follow handbook guidance when scheduling a meeting.

1. Set up a Calendly. First sign up with your GitLab email address, then accept the terms and conditions and then authentificate with your Google SSO.
2. Link it to your GitLab Google Calendar to make it possible for people to schedule a call with you.
3. Get your personal meeting room URL by going to Zoom meeting settings, selecting the Personal Room tab, and copying the value of Invite Link (do not use Copy the invitation).
4. If you are using the Basic Calendly Subscription (Unpaid) you will only be able to set-up one event type at a time i.e. either a 15, 30, 45 or 60 minute event - teams making use of one of the Paid Subsciption Tiers such as Customer Support will be able to set up more than one event type.
5. Set up the desired time slot with the following event description text (replacing text in {} with your information) we will be using 45 minutes for the illustration purposes below:

This will be a Zoom Meeting at {Zoom personal meeting room URL}

Question? Please email me. {your GitLab email}

1. Set the event name to 45 Minute Meeting.
2. Change the event link to 45min.
3. The event description needs to be copied to the 15, 30 and 60 minute meetings too.
4. If you intend to use any of the other event types, make sure to add this to their event descriptions as well.
5. For people outside of GitLab Inc, send them your Calendly link that links directly to the 45 minute time slot: “Are any of the times on https://calendly.com/XXXXX/45min/ convenient for you? If so please book one, if not please let me know what times are good for you and we’ll find an alternative.”
6. Update your availability on Calendy Event Types by clicking the action cog and then the edit option on an event type (For Example: 15 minute meeting) and in the event details clicking on the “When can people book this event?” section then clicking the “Availability” section. Here you can set your working hours during which you want to accept meetings, and on the “Advanced” tab you can set the minimum scheduling notice you want enforced. Although Calendy does synchronize with Google Calendar to show your availability you may wish to set extra restrictions in Calendy. You can use the “Copy Availability From” option on all the other events you have configured one event.

Keep in mind that unlike normal Google Calendar events, Calendly events are not automatically synchronized between both parties when changes are made. If an event needs to be cancelled or modified, make sure to use Calendly to do so.

Freedom

If you find yourself switching to websites you find distracting, especially during periods that require focus, and you worry it may affect your productivity, consider using Freedom. Their browser extensions, mobile apps, and desktop apps block distracting websites and apps for the duration of a configurable session. If you find yourself typing f and hitting enter from muscle memory, you will not be scrolling through endless pages of photos of your friends’ lunches.

Paste

Paste for macOS is a clipboard manager that stores everything you copy and optionally syncs across all your devices. It allows you to organize frequently copied data in pinboards, so that you do not need to copy the same data over and over, provides search, multiple paste and has nice visual user interface.

Pomodoro technique

The Pomodoro Technique is a simple time management process that can be used to boost productivity by dividing time into “work” and “break” intervals. In brief, each half-hour block of time is divided into a 25 minute work session followed by a 5 minute break session. Do this twice per hour until the day is done and marvel at how much you’ve finished.

Various Chrome extensions, Firefox add-ons, mobile apps, desktop apps, and even fancy physical alarm clocks are available to help you track your intervals, but you can use almost any timer you have on hand—even and especially that cute little tomato timer in your kitchen.

Quitter

Quitter (Free) will switch off apps for you after some period of inactivity. Consider using this to hide Slack after a while to reduce your urge to check new messages all the time. Quitter is only available for the Mac.

Raycast

Raycast is a productivity tool similar to Alfred and Spotlight on macOS. Download the app and select your preferred shortcut. You can also replace spotlight entirely by choosing cmd + space as shortcut.

The core app provides many workflows built-in, extensions from the store can be installed either directly from the web, or by using the built-in extension search.

There is an unofficial extension maintained by GitLab team members to search the GitLab documentation, the Handbook, and the Pajamas Design System.

Please do not use extensions for GitLab using a personal access token (PAT) for security reasons.

TripMode

TripMode ($7.99) lets you control which apps can use the internet. This is especially useful when you’re working on a cellular/metered connection. TripMode is only available for the Mac.

Stream Deck

If you’re not good at remembering hotkeys, or you are in need of a multi-step automation, a Stream deck or similar might be the right thing for you. A Stream Deck allows you to program buttons to execute complex sequences of actions with a single press.

How to use Apple Shortcuts with the Stream deck

Besides the official integrations, you can also use the Apple Shortcuts app to have an easy way of defining actions without any programming knowledge and without the need of any external plugins.

1. Add a Shortcut in the Shortcut app that you want to bind to a button on the Stream deck to.

   • Note: Don’t use a too complicated name as we will need the name to identify the Shortcut to run later. Blank spaces do work though.

2. Save the following code as ShortcutScript.scpt (you can rename it, just the scpt extension is important) on your computer. The Stream deck will reference this script so save it somewhere you can find it later and keep in mind that deleting it will break the button as well.

   on run argv
      tell application "Shortcuts Events"
         set shortcutName to item 1 of argv
         run shortcut shortcutName
      end tell
   end run
   

3. Add a new Action in your Stream deck application. Use System > Open as template for this. You can freely choose the title of the action, this is only for your own reference and does not have to do anything with the Shortcut. As for the App/File - you can use the file locator to reference the .scpt file from step 2. Afterwards you have to click back into the input field and delete the apostrophes that were added by the file locator around the path. Now we can pass the name of the Shortcut to the script, if your Shortcut had blank spaces in its name you have to enclose it in quotes. So f.e for a Shortcut called Active Speaker the App/File input should contain the following /path/to/script/ShortcutScript.scpt "Activate speaker"

4. Add more actions as you need them. Since the .scpt file is parameterized you dont have to repeat step 2 and can just use the script for all Shortcuts!

Other Stream deck use cases

• Switching scenes in OBS
• Muting your microphone
• Switching between speaker and headphones
• Switching between languages and keyboard layouts
• Starting timers (there are some great pomodoro apps that show the reminaing time on the button)
• Enabling/disabling Do not disturb mode
• Control lightning and change scenes

Text editors

GitHub Copilot

GitHub released Copilot, an AI-powered tool for in-situ suggestions within VSCode, in 2021. It’s an interesting and exciting tool. However at this time it does not guarantee that the code being suggested is strictly sourced from codebases governed by an open source license compatible with our own project which could lead to license conflicts. Until the licensing of the suggestions is established, please don’t use Copilot.

Video calling

Krisp

Krisp will mute background noise when you’re in a noisy environment so you can hear and be heard more easily on calls.

Shush

$4.99 tool for macOS that lets you set a hotkey (e.g. fn) to mute your microphone (“push-to-talk” or “push-to-mute”). Never again will you have to switch your window focus to Google Hangouts or Zoom to speak or mute. The icon will show the current state of your mic input (x means muted). With a right click (or your configured hotkey) you can switch from push to talk to push to mute. Don’t forget to unblock your mic in Zoom/Google Hangouts immediately after joining. Be warned that page up with fn+down arrow will activate it. Use space for page down instead of fn+up arrow. Warning: Check your headset compatibility before purchase. Many USB headsets are unmutable.

Shush alternative for Linux

If you use Linux (e.g. Arch, Ubuntu or Fedora) you can create a system-wide keyboard shortcut to mute/unmute your mic. Please note that it only works for Linux distributions which use ALSA for sounds (most popular Linux distributions use ALSA). All you need to do is go to your desktop environment’s Keyboard Settings and create a custom shortcut with the command amixer set Capture toggle and assign a key combination of your choice (e.g. Pause Break key). Once this is done, you can mute/unmute your mic using the assigned keyboard shortcut while you’re in any application. Refer to this original answer on Askubuntu to learn more.

Webex

GitLab uses Zoom as the primary video collaboration platform for internal and external communications. Some of our customers and partners have different preferred tools and to facilitate the communication with those parties, GitLab provides licenses for WebEx. This service is only provided to team members that have a business need to host meetings and where Zoom is not accepted.

• To request access to those tools, create an access request and provide a justification for access.
• Consider installing their native app. Team members have reported issues when trying to use WebEx in Safari, so we recommend using other browsers such as Google Chrome when hosting or joining meetings.
• Before attending a Webex meeting you can test to ensure your Webex is setup correctly by joining a test meeting.
• The in-browser plugin the screen sharing sometimes doesn’t work.

Whereby

Whereby allows you to instantly create a free video chat room for up to 4 participants with no login and no installation. It also offers a free reliable mobile video conference app.

Videos, GIFs, and screenshots

Loom

Loom (Free) is a handy Chrome plugin tool for video walkthroughs. Nice tool for demo recordings and internal/external documentation. Note, Loom videos are public by default - ensure you are not exposing data that should remain private. GitLab does have a Loom workspace, for a license please follow the instructions on the tech stack page

Language and translation

DeepL

The GitLab handbook and most other content is written in English. Even if a non-native speaker’s English is pretty good there might be times when the content is too sophisticated and a translation is welcome. Avoiding tedious copy and paste into another browser tab or app can easily be achieved by using the DeepL translator. DeepL is available as a Web site but also as a Mac app for free. Using a shortcut on MacOS takes selected text from the handbook right into the app and starts translating. Linux users can only use a Chrome extension and right-click to open another tab for the Web version.