When your backlog outgrows your team, GitLab scales remediation

This post introduces bulk SAST False Positive Detection and Agentic SAST Vulnerability Resolution for existing vulnerability backlogs, and automated SAST False Positive Detection and Agentic SAST Vulnerability Resolution for new critical and high severity vulnerabilities. It details how these features analyze surrounding code for false positives, confirm real risks, and automatically generate ready-to-merge fixes. The post also clarifies that these features consume GitLab Duo Agent Platform credits and that bulk processing does not incur additional credit costs per execution, but rather queues many at once. It also mentions that concurrency limits prevent bulk jobs from overwhelming pipelines and that jobs can be canceled.