The Pentagon wants to know who checks code when AI writes it
Learn what Department of War Instruction 8430.01 asks of AI-assisted software delivery, and how GitLab keeps AI code traceable and verified.
Read Post
Learn what Department of War Instruction 8430.01 asks of AI-assisted software delivery, and how GitLab keeps AI code traceable and verified.
Author: Elisabeth BurrowsRead Post
Frontier AI is changing how quickly vulnerabilities can be discovered and exploited. The next challenge is bringing that same speed to remediation and prevention, inside the software factory.

Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.

CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution. Learn which PHP versions fix them and how to check your projects.

For enterprises with many top-level groups, GitLab now aggregates vulnerabilities and a single risk score across your entire organization.

Every new GitLab innovation announced at Transcend: what shipped, what's coming, and how to get started.

GitLab's Threat Research Group found a flaw, ConfigPoisoning, that runs attacker code when a developer views a file's diff in DeepSeek-Reasonix.

The foundation for agentic software development must evolve with AI models, continuously shortening the path from detection to verified remediation.
All fields required