--- title: GitLab 19.2 Puts AI Agents to Work on the Security Backlog description: GitLab 19.2 introduces agentic automation features targeting the security and code review bottleneck created by AI-assisted coding. Four features move out of... canonical: https://daily.dev/posts/gitlab-19-2-puts-ai-agents-to-work-on-the-security-backlog-7nyms0ufk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitLab 19.2 Puts AI Agents to Work on the Security Backlog | daily.dev og:description: GitLab 19.2 introduces agentic automation features targeting the security and code review bottleneck created by AI-assisted coding. Four features move out of... og:url: https://daily.dev/posts/gitlab-19-2-puts-ai-agents-to-work-on-the-security-backlog-7nyms0ufk og:image: https://api.daily.dev/og/posts/7NymS0uFk.png og:image:alt: GitLab 19.2 Puts AI Agents to Work on the Security Backlog og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitLab 19.2 Puts AI Agents to Work on the Security Backlog **[InfoQ](https://daily.dev/sources/infoq)** · 5 min read · 1 upvotes · 0 comments ## Summary GitLab 19.2 introduces agentic automation features targeting the security and code review bottleneck created by AI-assisted coding. Four features move out of beta: Dependency Scanning Auto-Remediation (automatically opens merge requests to fix vulnerable dependencies and iterates if the update breaks the build), Security Review Flow (detects logic flaws like broken auth checks and race conditions, posting findings as comments), GitLab Duo CLI (GA, bringing agents into the terminal), and Custom Flows (GA, letting teams build YAML-based automations triggered by GitLab events). Human approval is preserved throughout — agents propose and iterate, but a person must approve before anything merges. The release also adds an AI Audit Event Report and MCP access controls for governance. Community reaction is mixed, with some praising integration depth while others question cost and compare Duo unfavorably to Claude Code. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [GitLab 18.7: Advancing AI automation and developer experience](https://daily.dev/posts/gitlab-18-7-advancing-ai-automation-and-developer-experience-ogxc21w3l) · GitLab · 5 upvotes · 0 comments - [GitLab Extends Agentic AI with New Automated Security Remediation, Pipeline Setup, and Delivery Analytics](https://daily.dev/posts/gitlab-extends-agentic-ai-with-new-automated-security-remediation-pipeline-setup-and-delivery-anal-v9xr4v7zm) · SD Times · 0 upvotes · 0 comments - [GitLab 18.5: Intelligence that moves software development forward](https://daily.dev/posts/gitlab-18-5-intelligence-that-moves-software-development-forward-cdwp1inij) · GitLab · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#gitlab](https://daily.dev/tags/gitlab), [#devsecops](https://daily.dev/tags/devsecops), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/gitlab-19-2-puts-ai-agents-to-work-on-the-security-backlog-7nyms0ufk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitLab 19.2 Puts AI Agents to Work on the Security Backlog","url":"https://daily.dev/posts/gitlab-19-2-puts-ai-agents-to-work-on-the-security-backlog-7nyms0ufk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/gitlab-19-2-puts-ai-agents-to-work-on-the-security-backlog-7nyms0ufk"},"datePublished":"2026-07-21T08:04:25.557Z","dateModified":"2026-07-21T08:04:46.416Z","description":"GitLab 19.2 introduces agentic automation features targeting the security and code review bottleneck created by AI-assisted coding. Four features move out of...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bae53d589b178826dbe6e55e754e3d71?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bae53d589b178826dbe6e55e754e3d71?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoQ","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoQ","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/afc3bced3e1e4b188dd9127017a60e0c","url":"https://daily.dev/sources/infoq"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/gitlab-19-2-puts-ai-agents-to-work-on-the-security-backlog-7nyms0ufk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,gitlab,devsecops,appsec","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoQ","item":"https://daily.dev/sources/infoq"},{"@type":"ListItem","position":3,"name":"GitLab 19.2 Puts AI Agents to Work on the Security Backlog"}]} ```