GitLab 18.11 Adds AI Agents for SAST Fixes, CI Pipelines, and Analytics
Summary
GitLab 18.11 introduces an AI agent that proposes fixes for confirmed SAST findings, alongside agents for CI pipeline setup and delivery analytics. The release also adds controls for GitLab Credits spending.
Key points
- GitLab says Agentic SAST Vulnerability Resolution is generally available for Ultimate customers using GitLab Duo Agent Platform.
- After a SAST scan, the agent analyzes confirmed true positives and proposes a root-cause fix in a ready-to-merge request with a confidence score.
- The beta CI Expert Agent inspects a repository and proposes a build-and-test pipeline in natural language.
- The generally available Data Analyst Agent answers natural-language questions with visualizations of software lifecycle data.
- Subscription-level and per-user GitLab Credits caps let organizations set spending limits and view usage.
Article Details
- Event Type
- Software platform release adding agentic AI capabilities
- Impact
- GitLab 18.11 adds generally available, AI-generated SAST vulnerability fixes and merge requests for GitLab Ultimate customers using GitLab Duo Agent Platform. It also introduces a beta CI Expert Agent for pipeline proposals, a generally available Data Analyst Agent for lifecycle analytics, and spending caps for GitLab Credits. The article reports product capabilities and availability; it does not report a breach or other security incident.
People
Vendors
Products
Agentic SAST Vulnerability ResolutionNew capabilities include Agentic SAST Vulnerability Resolution, CI Expert and Data Analyst agents, and GitLab Credits spending controls to manage AI costs.CI Expert AgentThe CI Expert Agent (beta) inspects repos and proposes build-and-test pipelines in natural language without manual YAML.Data Analyst AgentThe Data Analyst Agent (GA) answers natural-language questions with visual lifecycle analytics and is available across Free, Premium, and Ultimate tiers.GitLab 18.11GitLab 18.11 expands agentic AI across the software lifecycle, adding platform-native agents for security remediation, pipeline configuration, and delivery analytics via the GitLab Duo Agent Platform.GitLab CreditsNew capabilities include Agentic SAST Vulnerability Resolution, CI Expert and Data Analyst agents, and GitLab Credits spending controls to manage AI costs.GitLab Duo Agent PlatformGitLab 18.11 expands agentic AI across the software lifecycle, adding platform-native agents for security remediation, pipeline configuration, and delivery analytics via the GitLab Duo Agent Platform.