Every enterprise already runs a software factory, but most organizations have built theirs from separate tools for coding, planning, source code control, CI/CD, security, artifact management, and deployment.
As AI agents accelerate software development, that fragmentation creates more handoffs, breaks context, and makes it harder to trace changes, govern what reaches production, or measure the impact of AI investments.
GitLab is announcing the foundation for a governed software factory to help organizations optimize software development so they can move from intent to production with greater speed, governance, and visibility.
See what’s new 🧵
A practical framework for deciding when agentic AI can safely act in your software lifecycle, using workflow evidence, risk-based thresholds, and governance. Read more: about.gitlab.com/blog/how-to…
AI agents are taking on more of the work. Oversight has to keep up.
The AI Governance Dashboard in GitLab 19.5 shows which agents are active, which tools they call, and who started each action. Now in beta. Colleen Lake shows how it works: about.gitlab.com/blog/ai-gov…
What's worse - learning your agent "took care of it" without receipts, or realizing you never asked for any? 🤔
Good news is that this one's an easy fix. Start logging everything, every time.
Claude Fable 5.2 from @AnthropicAI is now available in GitLab Duo Agent Platform.
Fable 5.2 brings top-tier coding and reasoning to complex, multi-step work, with outputs up to 30% faster than Fable 5.1. Try it today.
There are better things to do than babysit a small fix all afternoon ⚙️.
The tests, review comments, waiting for CI… it adds up. Give Duo CLI a /goal and see it work through those steps, with an independent reviewer checking the result.
See it in action in the full demo. about.gitlab.com/events/tran…
A deployment token slipped into a CI file. It happens, but what you do next matters.
With Secrets Manager and Duo, you can rotate it and get a merge request ready to fix the code - all from GitLab ✨
Watch the full demo here.👇about.gitlab.com/events/tran…
6
15
2,278
See AI agent activity in one place with the GitLab AI Governance Dashboard, across Duo Agent Platform and the externally connected agents your developers use. about.gitlab.com/blog/ai-gov…
Learn how to call a custom GitLab flow from Salesforce so every error arrives as a GitLab issue with root-cause analysis, ready to fix and deploy. about.gitlab.com/blog/extend…
Here’s where engineering leaders like you are starting to redesign the work around AI. 👇 about.gitlab.com/ai-native-p…
🦊 GitLab retweeted
Teams put a lot of work into securing the code they ship. But for self-managed GitLab, the container images running the platform itself need the same scrutiny.
RapidFort and @gitlab are partnering to make that easier. Regulated and air-gapped teams can now deploy GitLab on hardened RapidFort Images that are near-zero CVE, continuously patched, and STIG-hardened, with audit-ready compliance evidence. The images keep GitLab’s existing functionality and version tags, so nothing changes about how teams build and ship.
“For self-managed customers, security doesn’t stop at the application layer,” says Martin Brümmer, Senior Product Manager at GitLab.
Read the announcement 👇
🔗rapidfort.com/blog/secure-th…
#RapidFort #GitLab #SoftwareSupplyChainSecurity #OpenSource
Don’t just watch the demo. Do it yourself.
Explore GitLab’s capabilities through interactive demos and hands-on experiences in the GitLab Demo Hub. about.gitlab.com/demo-hub/
With GitLab, every change at Compare the Market follows the same path to production, whether a person or an agent wrote it.
That covers up to 400 engineers working alongside agents, with a reliable record of who or what produced each change.
GitLab Chief Product and Marketing Officer Manav Khurana shares how this visibility is what lets Compare the Market run at agentic speed with enterprise control. technologymagazine.com/news/…
3
14
2,259
You want your team to experiment with AI. You also want to know where the spend’s going. Fair enough 👀
See who’s using what, set credit caps, and give people more room when they need it. Watch the full demo to see how 👉 about.gitlab.com/events/tran…
11
1,864
We submitted our comment on the European Commission’s proposed Cloud and AI Development Act (#CADA), but regulation is only one lever for digital sovereignty.
Our Field CTO EMEA, Bryan Ross, shares 10 questions to ask any software vendor about data residency, AI model choice, access controls, audits, and portability, so you can see who takes sovereignty as seriously as you do. about.gitlab.com/blog/10-que…
Exploitation happens at machine speed now. With GitLab Orbit, now generally available, map every project, owner, and pipeline a critical CVE touches so remediation can keep up.
Read more in our blog. about.gitlab.com/blog/find-v…




