GitLab 19.2 introduces Safety Assessment Stream, Dependency Scanning Auto-Remediation, GitLab Duo CLI and Customized Flows, to take the heavy lifting of clearing the code backlog off of deverlopers.
The Safety Assessment Stream can catch safety flaws reminiscent of race situations and enterprise logic errors that aren’t seen by pattern-based scanners, in keeping with the corporate announcement. This functionality is in public beta, and is a core piece of GItLab’s Duo Agent Platform. What it does is work out what the code is supposed to do as an alternative of making an attempt to match recognized patters, and its findings will embody the severity of the rist and suggests fixes the place it could actually. People nonetheless want to offer last approval, because the circulate won’t act by itself.
The dependency scanning piece, additionally in beta, was created to deal with the quantity of effort and time builders want to search out safety dangers by scanning susceptible packages and suggesting a repair by way of a merge requesat. And, if dependency updates breaks a construct, brokers can repair these in the identical request. These adjustments the agent makes leaves a full audit path, and nonetheless have to be authorized earlier than implementation — one other security characteristic.
Duo CLI brings the Duo Agent Platform’s brokers to any terminal the place builders work, and offers full mission context.
Customized Flows, created by developments groups, can run routinely on GitLab occasions, and in keeping with the announcement, “Customized Flows now authenticate to exterior providers with short-lived, job-scoped tokens, so automation reaching cloud suppliers or inner APIs makes use of the identical keyless sample GitLab CI/CD pipelines already belief.”
Coming subsequent from GitLab is the Stream Creating Agent, which turns a pure language description right into a customized circulate, the corporate stated. An improved Repair CI/CD Pipeline Stream orders failures earlier than taking motion and makes inline ideas for fixes or by way of a brand new merge request. And Duo Agentic Chat palms off a lot multi-step work to brokers.
“Coding brokers made it doable to generate much more code and moved the bottleneck downstream to critiques and safety,” stated Manav Khurana, chief product and advertising officer at GitLab, stated within the announcement. “GitLab 19.2 places brokers to work on that bottleneck: fixing susceptible dependencies, catching the failings scanners miss, and automating the steps in between with an individual nonetheless approving what ships.”
