Introducing GitLab Advanced Vulnerability Tracking
Jan 21, 2025Julian Thome

Summary
Introduces Advanced Vulnerability Tracking, a feature that identifies and deduplicates vulnerabilities in a constantly changing codebase. It leverages contextual information from generated syntax trees to scope vulnerabilities and generates location fingerprints that are more robust to code changes than traditional line-based methods. A study showed this approach is 30% more effective than traditional tracking, reducing manual auditing effort.
More from the Bug Triage and Reporting trail
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
- Manage vulnerability noise at scale with auto-dismiss policies
- How to transform compliance observation management with GitLab
- Self-service security alert handling with GitLab's UAM
- How GitLab measures Red Team impact: The adoption rate metric