GitLab has awarded a cybersecurity researcher $20,000 for reporting a serious remote code execution vulnerability on the platform. Discovered by William "vakzz" Bowling, a programmer and bug ...

GitLab Vulnerability ‘Highlights the Double-Edged Nature of AI Assistants’ Your email has been sent A remote prompt injection flaw in GitLab Duo allowed attackers to steal private source code ...

That may come as a bit of a surprise, given that GitLab partnered with Google for other AI features, including its code completion service. “We had not chosen [a model] for chat,” DeSanto told me.

GitLab Duo Chat can answer questions about issues, epics, code, errors, CI/CD configurations, or the GitLab platform itself. It can also refactor existing code and generate tests.