Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Secure every commit to production with Claude and GitLab

about.gitlab.com | blog | #ai-security | #agentic-ai | #gitlab | #devsecops | #claude-code | #code-review | #mcp | #claude | #agentic-coding

Summary

GitLab and Anthropic detail five handoffs carrying Claude's in-session security findings to production, via GitLab scans, merge-request approval policies and audit evidence for agentic coding.
Published
Collected

original ↗

Related coverage

blog · about.gitlab.com
Securing the software factory at machine speed
GitLab's CISO argues detection is not defense as AI compresses exploit timelines. With 317 CVEs in 2026, the key metric is time from detection to verified remediation.
tool · github.com
SpecterOps Skills: Open-Source LLM Agent Skills & MCP Plugin Marketplace for Red Teaming and AppSec
As AI-assisted offensive security evolves from simple prompting to multi-agent architectures, SpecterOps standardizes security craft into declarative skills and MCP interfaces, allowing operators to safely orchestrate complex red team tradecraft and reverse engineering directly through LLM agents.
blog · about.gitlab.com
How GitLab reduced code-per-agentic-flow ratio by 45%
GitLab's Flow Registry compiles declarative YAML into LangGraph flows for Duo Agent Platform, cutting code per agentic flow by 45% while improving reliability and maintainability.
blog · about.gitlab.com
How to design GitLab for enterprise scale
A guide to enterprise GitLab rollouts comparing GitLab.com, Dedicated, and self-managed models, with planning guidance for runners, availability, disaster recovery, and pipeline performance at scale.
blog · about.gitlab.com
New MCP tools help platform teams scale automation safely
GitLab 19.4 expands the GitLab MCP server tool set so agents can run pipelines, open merge requests, and triage vulnerabilities, while writes, merges, and deletes still wait for a human reviewer.
blog · about.gitlab.com
When to use SAST versus an LLM security scanner
AI-based review and SAST catch different classes of bugs and both have benefits. Here's how to decide which one runs where, and when your team needs both.
back