GPT-6.1 Sol 帮助 CodeRabbit 加强复杂代码库的安全性

随着人工智能加速软件开发，工程和应用安全团队需要能够在保持人员掌控的同时调查代码变更并解决漏洞的方法。CodeRabbit 正在使用 GPT‑6.1 Sol 作为其安全代理的主要模型，将审查扩展到单个变更之外，帮助开发者理解复杂代码库中的风险。

一个拉取请求可能影响应用程序其他位置的共享库、依赖项和防护措施。GPT‑6.1 Sol 帮助 CodeRabbit 连接跨文件和组件的行为，以发现潜在的安全问题。CodeRabbit 的审查独立于编写代码的代理，并补充现有的扫描器。其系统还使用其他前沿模型和安全工具。

在拉取请求审查期间，Sol 帮助在开发者工作时分析变更。在 Deep Scan 中，它支持跨仓库的更广泛调查，包括依赖项以及组件如何交互。CodeRabbit Secure 将这一调查扩展到关联仓库，例如共享身份验证库，以帮助团队理解弱点如何影响更广泛的系统。

CodeRabbit 报告使用 GPT‑6.1 Sol 在数千个仓库和组织中标记与安全相关的问题。这些发现会进入开发者已经用于审查和改进代码的拉取请求工作流。

CodeRabbit Secure 将调查与修复连接起来。对于用户选定的发现，它可以在隔离沙箱中尝试漏洞利用验证，而无需测试生产系统。对于受支持的问题，它可以起草包含建议修复的拉取请求，供人员审查和批准。

这项工作展示了前沿推理如何支持软件安全：理解单个变更之外的风险，帮助验证发现并将其转化为建议的修复。人类审查者仍然负责决定发布哪些变更。

在此处了解更多关于 GPT‑6.1 Sol 的信息。在此处⁠（在新窗口中打开）了解更多关于 CodeRabbit Secure 的信息。

As AI accelerates software development, engineering and application-security teams need ways to investigate code changes and address vulnerabilities while keeping people in control. CodeRabbit is using GPT‑6.1 Sol as the primary model in its security agent to extend review beyond individual changes and help developers understand risks across complex codebases.

A pull request can affect shared libraries, dependencies and safeguards elsewhere in an application. GPT‑6.1 Sol helps CodeRabbit connect behavior across files and components to surface potential security issues. CodeRabbit’s review is independent of the agent that wrote the code and complements established scanners. Its system also uses other frontier models and security tooling.

During pull-request review, Sol helps analyze changes as developers work. In Deep Scan, it supports broader investigation across repositories, including dependencies and how components interact. CodeRabbit Secure extends that investigation to linked repositories, such as a shared authentication library, to help teams understand how a weakness could affect the wider system.

CodeRabbit reports using GPT‑6.1 Sol to flag security-related issues across thousands of repositories and organizations. These findings feed into the pull-request workflows developers already use to review and improve their code.

CodeRabbit Secure connects investigation to remediation. For user-selected findings, it can attempt exploit verification in an isolated sandbox without testing production systems. For supported issues, it can draft a pull request with a proposed fix for a person to review and approve.

This work shows how frontier reasoning can support software security: understanding risks beyond an individual change, helping validate findings and turning them into proposed fixes. Human reviewers remain responsible for deciding which changes to ship.

Learn more about GPT‑6.1 Sol here. Learn more about CodeRabbit Secure here⁠(opens in a new window).