GitLab 18.10 brings AI-native triage and remediation

This post introduces three new AI-powered security capabilities in GitLab 18.10: SAST false positive detection (GA), Agentic SAST vulnerability resolution (beta), and Secret false positive detection (beta). SAST false positive detection uses LLMs for agentic reasoning to assess the likelihood of a vulnerability being a false positive, providing a confidence score and explanation. Agentic SAST vulnerability resolution automatically generates and validates proposed fixes for SAST vulnerabilities, creating merge requests with concrete code changes and explanations. Secret false positive detection flags dummy and test secrets to reduce review effort. These features are available to GitLab Ultimate customers using the GitLab Duo Agent Platform.