Search

# See http://www.robotstxt.org/robotstxt.html for documentation on how to use the robots.txt file
#
# To ban all spiders from the entire site uncomment the next two lines:
# User-Agent: *
# Disallow: /

# Add a 1 second delay between successive requests to the same server, limits resources used by crawler
# Only some crawlers respect this setting, e.g. Googlebot does not
# Crawl-delay: 1

# Based on details in https://gitlab.com/gitlab-org/gitlab/blob/master/config/routes.rb,
# https://gitlab.com/gitlab-org/gitlab/blob/master/spec/routing, and using application

# Global routes
User-Agent: *
Disallow: /autocomplete/users
Disallow: /autocomplete/projects
Disallow: /search
Disallow: /admin
Disallow: /profile
Disallow: /dashboard
Disallow: /users
Disallow: /api/v*
Disallow: /help
Disallow: /s/
Disallow: /-/profile
Disallow: /-/profile/
Disallow: /-/user_settings/
Disallow: /-/ide/
Disallow: /-/experiment
# Restrict allowed routes to avoid very ugly search results
Allow: /users/sign_in
Allow: /users/sign_up
Allow: /users/*/snippets

# Generic resource routes like new, edit, raw
# This will block routes like:
# - /projects/new
# - /gitlab-org/gitlab-foss/issues/123/-/edit
User-Agent: *
Disallow: /*/new
Disallow: /*/edit
Disallow: /*/raw
Disallow: /*/realtime_changes

# Group details
User-Agent: *
Disallow: /groups/*/-/analytics
Disallow: /groups/*/-/analytics/
Disallow: /groups/*/-/insights/
Disallow: /groups/*/-/issues_analytics
Disallow: /groups/*/-/contribution_analytics
Disallow: /groups/*/-/group_members
Disallow: /groups/*/-/saml/
Disallow: /groups/*/-/saml_group_links
Disallow: /groups/*/-/settings/
Disallow: /groups/*/-/billings
Disallow: /groups/*/-/hooks
Disallow: /groups/*/-/projects

# Project details
User-Agent: *
Disallow: /*/*.git$
Disallow: /*/*.git/*
Disallow: /*/archive/
Disallow: /*/repository/archive*
Disallow: /*/activity
Disallow: /*/-/project_members
Disallow: /*/-/blame/
Disallow: /*/-/branches
Disallow: /*/-/commits/
Disallow: /*/-/commit
Disallow: /*/commit/*.patch
Disallow: /*/commit/*.diff
Disallow: /*/-/compare/
Disallow: /*/-/network/
Disallow: /*/path_locks
Disallow: /*/merge_requests/*.patch
Disallow: /*/merge_requests/*.diff
Disallow: /*/merge_requests/*/diffs
Disallow: /*/services
Disallow: /*/uploads/
Disallow: /*/-/import
Disallow: /*/-/requirements_management/
Disallow: /*/-/pipelines
Disallow: /*/-/pipeline_schedules
Disallow: /*/-/jobs
Disallow: /*/-/ci/
Disallow: /*/-/quality/
Disallow: /*/-/licenses
Disallow: /*/-/security/
Disallow: /*/-/dependencies
Disallow: /*/-/audit_events
Disallow: /*/-/on_demand_scans
Disallow: /*/-/feature_flags
Disallow: /*/-/ml/
Disallow: /*/-/environments
Disallow: /*/-/clusters
Disallow: /*/-/terraform
Disallow: /*/-/terraform_module_registry
Disallow: /*/-/*/configuration
Disallow: /*/-/error_tracking
Disallow: /*/-/metrics
Disallow: /*/-/alert_management
Disallow: /*/-/incidents
Disallow: /*/-/oncall_schedules
Disallow: /*/-/escalation_policies
Disallow: /*/-/*/service_desk
Disallow: /*/-/analytics
Disallow: /*/-/analytics/
Disallow: /*/-/value_stream_analytics
Disallow: /*/-/graphs/
Disallow: /*/insights/
Disallow: /*/-/pipelines/
Disallow: /*/-/settings/
Disallow: /*/-/hooks
Disallow: /*/-/usage_quotas

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Preferred disclosure is via HackerOne
Contact: https://hackerone.com/gitlab/

# Additional disclosure processes are available in our handbook:
Contact: https://about.gitlab.com/security/disclosure/

Policy: https://hackerone.com/gitlab/

Acknowledgments: https://hackerone.com/gitlab/thanks
Acknowledgments: https://about.gitlab.com/security/vulnerability-acknowledgements/

Canonical: https://gitlab.com/.well-known/security.txt

Preferred-Languages: en
Hiring: https://about.gitlab.com/jobs/

Expires: 2026-01-31T00:00:00Z
-----BEGIN PGP SIGNATURE-----
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=PUWm
-----END PGP SIGNATURE-----