跳到正文
OpenAI:官网动态·· 11 小时前AI 评分32

GPT-6.1 Sol 助 CodeRabbit 强化复杂代码库安全审查

GPT-6.1 Sol helps CodeRabbit strengthen security across complex codebases

AI 导读

CodeRabbit 将 GPT-6.1 Sol 作为其安全智能体的主模型,把代码审查从单次改动扩展到跨文件、跨组件的风险分析。其 Deep Scan 与 CodeRabbit Secure 可覆盖依赖关系和关联仓库,并已在数千个仓库和组织中标记安全问题。对用户选定的发现,系统可在隔离沙箱中尝试验证漏洞利用,并为支持的问题起草修复 PR 供人工审核。

正文 · 原文

GPT‑6.1 Sol helps CodeRabbit strengthen security across complex codebases

Loading…

Audio 1

Share

As AI accelerates software development, engineering and application-security teams need ways to investigate code changes and address vulnerabilities while keeping people in control. CodeRabbit is using GPT‑6.1 Sol as the primary model in its security agent to extend review beyond individual changes and help developers understand risks across complex codebases.

A pull request can affect shared libraries, dependencies and safeguards elsewhere in an application. GPT‑6.1 Sol helps CodeRabbit connect behavior across files and components to surface potential security issues. CodeRabbit’s review is independent of the agent that wrote the code and complements established scanners. Its system also uses other frontier models and security tooling.

During pull-request review, Sol helps analyze changes as developers work. In Deep Scan, it supports broader investigation across repositories, including dependencies and how components interact. CodeRabbit Secure extends that investigation to linked repositories, such as a shared authentication library, to help teams understand how a weakness could affect the wider system.

CodeRabbit reports using GPT‑6.1 Sol to flag security-related issues across thousands of repositories and organizations. These findings feed into the pull-request workflows developers already use to review and improve their code.

CodeRabbit Secure connects investigation to remediation. For user-selected findings, it can attempt exploit verification in an isolated sandbox without testing production systems. For supported issues, it can draft a pull request with a proposed fix for a person to review and approve.

This work shows how frontier reasoning can support software security: understanding risks beyond an individual change, helping validate findings and turning them into proposed fixes. Human reviewers remain responsible for deciding which changes to ship.

Learn more about GPT‑6.1 Sol here. Learn more about CodeRabbit Secure here⁠(opens in a new window).

Author

OpenAI

来源:OpenAI:官网动态 · openai.com