Astra Group has released an updated version of its GitFlic DevOps platform, which is available in both cloud and self-hosted configurations. The update introduces a redesigned security module that allows information security teams to classify vulnerabilities as confirmed threats or false positives through a review process similar to pull request verification.
The platform now filters vulnerability reports within pull requests, displaying only those issues introduced or resolved by specific code changes. This feature aims to reduce the workload for developers and reviewers by focusing on the impact of current modifications rather than legacy issues, facilitating faster decision-making during the development cycle.
For long-term support projects, GitFlic now enables the tracking of vulnerabilities across multiple LTS branches. This allows vendors and corporate clients to monitor the status of security fixes across different product versions, identifying where patches have been applied and where backports are still required.
The update also includes a new bulk vulnerability labeling mode to accelerate security reviews. Additionally, the platform's REST API has been expanded to include new methods for branch deletion, variable management, and the assignment or revocation of administrator roles in self-hosted installations.
