Duo Agent Platform now available on free GitLab.com accounts
Group owners on free GitLab.com namespaces can now purchase a monthly commitment of GitLab Credits, giving every member immediate access to agents, flows, and agentic chat. Credits are pooled across the group so you pay for what AI does, not how many people use it.
Agentic code reviews for $0.25 each
Code Review Flow now costs one GitLab Credit for four reviews, regardless of merge request size or complexity. No more token math, no more reserving AI reviews for high-priority changes.
Credits dashboard: see exactly where AI spend is going
The credits dashboard now surfaces your biggest consumers, lets you audit specific sessions, and export usage data. The user table opens sorted by credits consumed so top users appear immediately.
Agentic SAST false-positive detection is generally available
After every SAST scan, Duo Agent Platform automatically checks critical and high severity findings and tells you which ones are likely false positives. Each finding gets a confidence score, an AI-generated explanation, and a visual badge.
AI-powered secret scanning false-positive detection (Beta)
Analyzes secret detection findings to flag test credentials, example values, and placeholder secrets before they clutter your vulnerability report. Each assessment comes with AI reasoning and a confidence score.
Work items list and saved views
Epics, issues, and other work items now share a single unified list. Saved views let teams create and store customized list configurations at the namespace level, so the filters and layouts you rely on every day are always one click away.
Set job parameters mid-pipeline without re-running everything
Manual jobs in CI/CD pipelines can now accept input parameters at run time. If a parameter depends on an earlier job output or an external condition, you set it when you trigger the job; no need to re-run the full pipeline.
Filter the security dashboard by business context
Security attributes like business impact, application name, business unit, and internet exposure are now filterable directly on the Security Dashboard. Security managers can slice vulnerability data by what matters to their organization.
Manage container virtual registries from the UI (Beta)
Container virtual registries now have a web interface. Create Docker virtual registries, add upstream sources like Docker Hub, Harbor, and Quay, set their priority order, and clear caches; all without touching the API.