GitLab Orbit: Find vulnerability blast radius without the manual hunt
GitLab has made Orbit generally available for Premium and Ultimate customers, starting on GitLab.com with Self-Managed and GitLab Dedicated to follow. Orbit builds a graph from merge requests, pipelines, deployments, security findings and ownership data so users can ask which projects contain a vulnerable component and who owns them. GitLab's Security Analyst Agent and external agents such as Claude Code and Codex can query the same graph over MCP, subject to existing roles.
What changes for platform teams
Platform teams on GitLab can use the graph to map which services, base images and pipelines depend on a shared component, instead of assembling that list from scanners and spreadsheets. Teams should still check the graph against runtime inventory, since it only covers what repositories declare on the default branch.
Read the original at GitLab Blog ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules