GitLab Duo Agent Platform

GitLab's agent platform for GitLab Duo, providing foundational flows, custom flows and agents that run in supported IDEs, the GitLab UI and CI/CD. Recorded here as the product surface for the Software Development Flow only.

AI capabilities recorded

• Software Development Flow

  Active · verified 2026-09-22

  A user-initiated GitLab Duo Agent Platform foundational flow that runs in supported IDEs. GitLab documents that it gathers comprehensive project context, creates and works through a plan in response to a prompt, runs with minimal human interaction, can modify files in the project's local file system, and stages proposed changes in the project's repository for the user to accept, modify or reject. GitLab documents a time-limited OAuth token with the ai_workflows scope linked to the user's identity, granting access to a named set of GitLab APIs bounded by the user's permissions, and warns that the flow uses an AI agent that can perform actions using the user's GitLab account.

• Security Review Flow

  Active · verified 2026-09-22

  A manually initiated GitLab Duo Agent Platform foundational flow, in beta, that reviews a merge-request diff and its surrounding context for business-logic and authorization vulnerabilities. GitLab documents that it posts findings into the merge request as threaded diff comments with a CWE classification, severity rating, tier and explanation, can provide an inline suggested fix, replies within finding discussions when mentioned, and sets its own reviewer state, never setting Approve. Reviews are requested by assigning a dedicated Duo Security Review service account as a reviewer.