Anubis by elghaly
Exploit-to-Evidence Gate
A GitLab Duo Agent Platform custom flow turns a security finding (GitLab issue) into an isolated pytest evidence test that fails on vulnerable code, applies a minimal fix, and opens a merge request. GitLab CI then runs a deterministic gate.
Intake → MR
The Duo custom flow parses the finding, writes an evidence test and manifest, makes a minimal fix and opens a merge request.
Deterministic CI gate
CI checks the test, confirms it fails on the merge-request base, checks fix scope, confirms it passes after the fix and renders an evidence report.
Trusted inputs
Gate code runs from the merge target branch, and scanner results come only from GitLab SAST and Secret Detection job artifacts.
A patch is not “verified” because a model wrote it; it is verified only by reproducible pytest behavior.
View on GitLab →