🦊 GitLab

Every enterprise already runs a software factory, but most organizations have built theirs from separate tools for coding, planning, source code control, CI/CD, security, artifact management, and deployment. As AI agents accelerate software development, that fragmentation creates more handoffs, breaks context, and makes it harder to trace changes, govern what reaches production, or measure the impact of AI investments. GitLab is announcing the foundation for a governed software factory to help organizations optimize software development so they can move from intent to production with greater speed, governance, and visibility. See what’s new 🧵

Think you've got an eye for bugs? 🐛 We've hidden one in this merge request. Take a closer look. We dare you. 🎃

Exploitation happens at machine speed now. With GitLab Orbit, now generally available, map every project, owner, and pipeline a critical CVE touches so remediation can keep up. Read more in our blog. about.gitlab.com/blog/find-v…

Finding vulnerabilities is one thing. Preventing them from being merged is another. 🔐 This Cybersecurity Awareness Month, find out how GitLab's merge request approval policies help enforce security checks and make secure code the default.

GitLab Orbit is now generally available. Agents with full SDLC context complete tasks more accurately and in fewer attempts than agents working from fragments: up to 45x fewer retries and 4.5x fewer tokens in our testing. Learn more. about.gitlab.com/blog/gitlab…

What happens when vulnerabilities are discovered faster than you can fix them? The next challenge is bringing that speed to remediation and prevention, inside the software factory. See how we’re connecting discovery, remediation, and prevention, and how you can run your next security sprint on us. about.gitlab.com/blog/securi…

The GitLab platform isn’t affected by PHP2Shell, but if your teams run PHP, you can use container scanning, GitLab Orbit, and code search to find every affected project and group. Then, let GitLab Duo Agent Platform automate the fix. about.gitlab.com/blog/gitlab…

New AI doesn’t mean your engineering know-how needs a factory reset. @RedHat's Jeremy Eder says that experience still counts and smaller teams can build on it to deliver more value with AI

GPT-6.1 Terra from @OpenAI is now available in GitLab Duo Agent Platform. Access to the models you want, in the workflow you already use. Try it today.

“The biggest risks live in the work that never enters the queue.” GitLab CIO Manu Narayan on why AI governance has to travel with the work. cio.com/article/4233151/your…

GitLab Duo Agent Platform keeps review, tests, security, and approvals moving without a manual task between every handoff. about.gitlab.com/blog/gitlab…

Not every vulnerability needs your attention. 🔐 This Cybersecurity Awareness Month, find out how GitLab Duo helps cut through false positives, prioritize real security risks, and accelerate fixes.

Dependency Firewall checks packages against your policies and blocks those that don’t meet them. You can see why right in the build output. Watch the full GitLab Transcend demo to see it in action and see what it stopped. about.gitlab.com/events/tran…

For enterprises with many top-level groups, GitLab now aggregates vulnerabilities and a single risk score across your entire organization. Learn more. about.gitlab.com/blog/securi…

“There’s no room for a defender’s mindset in AI security.” GitLab CISO Chaim Mazal on why security teams need to think like attackers and how to start: thenewstack.io/ai-security-a…

How do you build spacecraft faster without cutting corners on oversight and security? Intuitive Machines is using GitLab to build more efficiently and move faster. Brian Butcher, Software Group Lead, and Dami Alugo, Lead DevSecOps Engineer, share how AI is changing spacecraft development and where it could take the industry next. Listen to the full episode: federalnewsnetwork.com/podca…

Big build energy is contagious. Keeping tabs on what everyone’s building? That needs a plan. Michael Winslow talks giving people room to experiment, tracking what they build, and why a confident AI still needs a risk check.

Deleted a secret from your code? That doesn't mean it's gone. 🔐 This Cybersecurity Awareness Month, find out how GitLab helps prevent exposed secrets, detect leaks, and keep your credentials secure. about.gitlab.com/blog/secret…

Ever had a build fail because a public repository went down? Been there. Never doing that again with Artifact Central caching our packages 🥳 Watch the full demo here to see how pulling the same packages took less than half the time 👉 about.gitlab.com/blog/transc…

A little less pressure to keep up. A little more focus on moving forward together 🚀 @Steve_Yegge shares why AI adoption needs a human pace and how AI can help teams find a shared language.