GitLab Inc., the intelligent orchestration platform for DevSecOps, is rolling out new capabilities for the governed software factory, a connected system for moving software from idea to production under an organization's own policy and standards.
According to the vendor, these new innovations are designed to help organizations ship more AI-generated software to production without taking on more risk or cost.
GitLab enables agents to work within an organization's context, workflows, and guardrails, while creating an evidence chain that records how changes move from intent to production.
Together, these capabilities form the foundation of a governed software factory, helping organizations move from intent to production with fewer handoffs, stronger safeguards, and clearer visibility into what AI delivers, the company said.
Agentic software development can stall after coding when reviews, tests, security checks, approvals, and deployments require handoffs between people, tools, and stages. New features and capabilities include:
- Goal-driven flows in GitLab Duo Agent Platform, powered by /goal in Duo CLI, in headless mode and in Duo Agentic Chat, and the GitLab for Slack app, eliminate waits between handoffs across the software lifecycle.
- Custom Flows and flow triggers automate multi-step work under the same identity, policy, and evidence chain. Teams can start and follow the same flows from the tools and channels they already use, under the same identity and policy.
- GitLab Artifact Central, now in beta on GitLab.com with availability on GitLab Self-Managed planned for later this month, lets platform teams assemble the right software the first time. It brings containers and packages into one control plane alongside source code management and CI pipelines.
- GitLab Dependency Firewall, available in early access, checks every package against policy before it enters a build. It warns, blocks, or quarantines packages based on rules the organization sets for package age, vulnerability severity, malicious package detection, and license compliance. One control plane spans source, build, and registry, helping teams trace exposure to affected projects and prioritize remediation in minutes instead of weeks.
- GitLab Secrets Manager, generally available on GitLab.com and on GitLab Self-Managed in the 19.5 release, secures build-time secrets in one place, and scopes each secret to the job that needs it. It applies existing group and project permissions, and records every event in the GitLab audit trail. With GitLab Secrets Manager, teams can revoke a leaked credential in one click, and realize up to 50% savings compared to hosting a separate vault.
- Anthropic’s Claude Mythos 5 and 5.1 will be available within new GitLab Duo Agent Platform security flows next month, helping organizations with approved environments find and fix vulnerabilities faster than attackers can discover and exploit them.
- The GitLab Security Standard, available today, gives security and engineering leaders a way to assess their security posture, build trust in autonomous agents through verifiable outcomes, and protect software already in production. The standard sets five controls for the agentic era and uses time from detection to verified remediation as its core metric.
- Duo Agent Platform Impact Analytics, now in early access, shows cost and impact of AI investment by team, task, and model. Impact Analytics complements the recently introduced AI usage caps and controls, which allows platform admins to set spending ceilings at the subscription, group, or user level. Teams see their adoption metrics, results of agentic workflows, and credit consumption alongside the real work that reaches production.
"Every enterprise already runs a software factory, but few have intentionally designed the systems and controls that govern it," said Manav Khurana, chief product and marketing officer at GitLab. “GitLab brings together the foundational building blocks for a governed software factory, connecting agentic workflows, security, and AI context and controls so organizations can move software from intent to production with greater speed, governance, and visibility.”
For more information about this news, visit https://about.gitlab.com.