…August 17, 2026 10 min read Critical remote code execution in Serena, a popular MCP coding agent GitLab's Threat Research Group found a critical template injection in Serena that runs attacker…
…Commits .github/setup.js and workflow files to accessible GitHub repositories, causing the worm to re-execute in other CI pipelines Injects .github/copilot-instructions.md to poison AI code assistants Publishes…
…From VMs to external demo tools to agents The stages to create a demo How the demo generator works Demos are now in code How GitLab Duo Agent Platform made this possible…
…More reliable, more efficient AI Google Antigravity agents get full context with GitLab Orbit AI Introducing GitLab Orbit: Full code and lifecycle context, in one query Start building faster today See what…
…an agent or a developer adds a comment, reformats a file, or moves a function, and a naive vulnerability tracker suddenly reports the same finding twice. Security teams end up re-triaging…
…true before_script: - 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )' - eval $(ssh-agent -s) - ssh-add <(echo "$GIT_SSH_PRIV_KEY") - git config --global user.email…
…They provide a streamlined workflow and enable developers to focus on writing code rather than dealing with complex environment setups. By adopting workspaces, developers can collaborate effectively, improve productivity, and simplify the…
…Additionally we're working to make it easier to setup Code Suggestions the first time and authenticate with GitLab.com Self-managed support We are also working to bring Code Suggestions to…
…More to explore AI How I built a demo generator with GitLab Duo Agent Platform AI How to govern agentic AI, MCPs, and AI code assistants AI Claude Opus 5 on GitLab…
…Complex agentic work, less disruption AI Agentic coding is only as good as its context AI Transform MRs from manual tasks to an automated workflow Start building faster today See what your…