Google wires CodeMender into pull requests: /fix comments auto-patch vulnerabilities
rseroter · x · 2026-11-11
Google published a reference architecture that plugs its autonomous code-security agent CodeMender directly into Git pull requests via Cloud Run.
- Context: per the Mandiant M-Trends 2026 report, average developer fix time for software flaws has grown from 59 days a decade ago to over 170 days in 2025, even as some teams ship 2x faster
- Everything happens in the PR timeline: scans post a findings table with IDs and severity; replying /verify <id> runs sandbox exploit verification, replying /fix <id> generates a patch with a draft PR already open
- A sample scan surfaced 4 new vulnerabilities: critical SQL injection plus reflected XSS, mass-assignment privilege escalation, and SSRF
- Cloud Run can now also scan deployed services for vulnerabilities
More from coding & agent
- LangChain Launches Annual State of Agent Engineering Survey — hwchase17 · 2026-11-11
- RX 6800 gets 3x faster ComfyUI images by re-enabling silently disabled INT8 — TheCat001 · 2026-11-11
- AutoRubric 1.7.0 grades images against rubrics, prompt caching cuts per-criterion cost ~25% — deliprao · 2026-11-11
- Replicate a 4M-view fitness video formula with Claude skills, step by step — aigleeson · 2026-11-11
- Cursor said to be building multiplayer mode letting teams and their agents share a workspace — testingcatalog · 2026-11-11
- User asks AI assistants to export memories, finds hundreds of entries and background access requests — jmppmj · 2026-11-11