Automate remediation with ready-to-merge AI code fixes

This post introduces Agentic SAST Vulnerability Resolution, a new capability within GitLab Duo Agent Platform that automates the remediation of SAST vulnerabilities by generating ready-to-merge code fixes. It details the workflow: SAST scan completion triggers false positive detection, then confirmed true positives initiate the agentic resolution flow which analyzes, generates a fix, and validates it through automated testing. The post also highlights improvements in SAST scanning speed with incremental scanning, enhanced vulnerability prioritization using CVSS 4.0 and policy-based rules (including severity overrides based on CVE, CWE, file path/directory, KEV status, and EPSS score thresholds), and the introduction of a Security Manager role for security professionals and SAST configuration profiles for consistent scanner coverage across projects.