SAN FRANCISCO — GitLab Inc., the clever orchestration platform for DevSecOps, has introduced updates that give enterprises extra management as they scale agentic software program improvement. GitLab Devoted prospects, who already run their most delicate software program supply workloads on GitLab, can now run GitLab Duo Agent Platform inside that very same single tenant setting and area, join their very own fashions for inference, and preserve AI-processed knowledge inside their present safety boundary.
GitLab 19.3 additionally ships immediately with assist for Secrets and techniques Supervisor, Circulation Creator Agent, and Bulk SAST False Constructive Detection and Agentic SAST Vulnerability Decision. Each secret, whether or not it’s used inside a pipeline or by the infrastructure outdoors the pipeline, now runs beneath the identical permission mannequin. Moreover, builders who personal a course of can now create customized agentic flows throughout the software program improvement lifecycle, and safety groups can ship ready-to-merge fixes towards their backlog at scale. Collectively, these updates give engineering groups, course of homeowners, and safety groups the velocity of agentic AI, with out giving up the management they have already got in place.
The AI Gateway for GitLab Duo Agent Platform now runs inside GitLab Devoted single-tenant SaaS infrastructure, enabling agentic workloads to comply with the identical residency and isolation mannequin as the remainder of the software program improvement lifecycle inside GitLab. Regulated and residency-sensitive groups can unlock the usage of agentic AI for software program supply beneath the identical deployment mannequin their auditors already perceive.
Secrets and techniques Supervisor Extends Management Past the Pipeline
GitLab Secrets and techniques Supervisor is now in restricted availability as a paid add-on billed by way of GitLab Credit for GitLab.com prospects. Each CI secret is scoped to the setting, department, and safety standing of the job that wants it. Secrets and techniques Supervisor additionally now helps Kubernetes, Terraform, OpenTofu, and customized instruments. Credentials dwell in the identical platform that runs code and pipelines, so groups don’t preserve a separate permission mannequin.
Bulk SAST Remediation Helps Take away Years of Amassed Danger in a Single Motion
SAST False Constructive Detection and Agentic SAST Vulnerability Decision allow groups to clear a complete vulnerability backlog as a substitute of 1 discovering at a time. Groups choose a number of findings within the Vulnerability Report, and GitLab returns a confidence rating for every. Confirmed dangers get a ready-to-merge repair, so a developer opinions and merges as a substitute of writing the repair from scratch. This covers each SAST vulnerability within the Vulnerability Report, and GitLab continues to triage and remediate new crucial and excessive severity findings mechanically as they arrive.
Circulation Creator Agent Removes the Schema Barrier to Customized Automation
Circulation Creator Agent removes the necessity for handbook schema mapping that retains course of homeowners from automating their work. With Circulation Creator, out there by way of Agentic Chat as a foundational agent in GitLab Duo Agent Platform, a consumer describes the automation in plain language and will get again an entire, runnable movement, able to register from the AI Catalog. Each movement nonetheless runs beneath a scoped service account with composite id, requiring the Maintainer position or increased to allow it.
Extra Capabilities Shipped in GitLab 19.3
GitLab Credit utilization caps are actually typically out there, permitting organizations to set a month-to-month ceiling on agentic AI spend earlier than it turns into an overage. Directors can set a subscription stage cap within the Prospects Portal, together with choices for a default per consumer cap or per consumer overrides by way of the GraphQL API.
Restricted visibility for customized brokers and flows per GitLab group is now typically out there, making them accessible to members throughout a number of initiatives inside that group. That is along with per-project and public visibility choices which have already been out there.
“These updates lengthen the velocity and management enterprises want deeper into the regulated and data-sensitive phase of the enterprise market,” mentioned Manav Khurana, chief product and advertising officer at GitLab. “Each functionality we shipped this month, from the place an agent runs to which secret it might probably contact, extends that very same management into the trusted software program supply workflows enterprises already rely on.”
