> For the complete documentation index, see [llms.txt](https://help.aikido.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.aikido.dev/changelog/q3-2026/56-cloud-asset-map-creating-fix-prs-with-deep-review-and-code-coverage-on-gitlab.md). # #56 - Cloud Asset Map, Creating fix PRs with Deep Review and Code Coverage on GitLab 22 Sep 2026 ### Features * [Cloud Inventory](https://help.aikido.dev/cloud-scanning/cloud-inventory) - See every cloud resource laid out by region and VPC, with exposure findings and firewall rules one click away. No more hopping between hundreds of console screens to know what's running and what's exposed. * [Creating fix PRs with Deep Review](https://help.aikido.dev/deep-review/how-deep-review-works) - Reply to a Deep Review comment asking for a fix, and Aikido opens a new pull request with the fix, built on your current PR. * [Code Coverage on GitLab](https://help.aikido.dev/code-quality/code-coverage) - Upload coverage from GitLab CI and see per-file, per-line results in Aikido, alongside GitHub. ### **Aikido Intel - Malware & Vulnerability Database** Our research team has discovered over [#501 new vulnerabilities](https://intel.aikido.dev) over the last two weeks! Aikido launched [Altar, its first open-weight security model](https://www.aikido.dev/blog/aikido-altar-open-weight-ai-sovereign-security), built to run frontier-grade pentesting fully on-prem and air-gapped without sending sensitive data to a third party. [Aikido researchers also found a second camouflaged RCE in MECCHA CHAMELEON](https://www.aikido.dev/blog/meccha-chameleon-rce), where a malicious custom map could write an executable to a user's startup folder. ### Improvements * Device Protection * [Automatic bypass of min package age for packages with critical CVE’s and free of malware](https://help.aikido.dev/aikido-device-protection/using-aikido-endpoint/minimum-package-age-fallback#critical-security-fixes) * New ecosystems: [Firefox](https://intel.aikido.dev/malware?ecosystem=firefox) and [Homebrew](https://intel.aikido.dev/malware?ecosystem=homebrew) * Pentest * [Access for team only users which retesting issues](https://help.aikido.dev/getting-started/automated-user-management/setting-roles-and-permissions#default-users-vs-team-only-users) * [Added Sensitive Data information to DSPM](https://help.aikido.dev/ai-code-analysis/what-is-dspm) * [New Infrastructure focussed checks added](https://help.aikido.dev/pentests/coverage-and-findings/what-issues-can-aikido-pentest-find#infrastructure) * Code Quality - [Create Task Trackers issues for quality findings](https://help.aikido.dev/getting-started/task-management-systems) * Container scanning - [Reachability now includes BigQuery datasets](https://help.aikido.dev/container-image-scanning/container-reachability-analysis) * Cloud - [VM Reachability now available for GCP](https://help.aikido.dev/virtual-machine-scanning/misc/virtual-machine-reachability-analysis) * MCP - New tools: * [Get issue details including pentest information, deep review, and other](https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/using-aikido-mcp#looking-up-a-single-issue) * [SCA scanning tool](https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/using-aikido-mcp#aikido_oss_dependency_scan) * Custom reports - [Support grouped bar charts](https://help.aikido.dev/aikido-agent/custom-reports) * Zen Firewall - Agent releases for [Java](https://github.com/AikidoSec/firewall-java/releases), [PHP](https://github.com/AikidoSec/firewall-php/releases), [Golang](https://github.com/AikidoSec/firewall-go/releases) and [Node](https://github.com/AikidoSec/firewall-node/releases) * Added Alpine support for PHP * IDE - New release for [Jetbrains](https://plugins.jetbrains.com/plugin/24993-aikido-security/versions/stable): Added support for multi repository scanning * API - [List user logins history](https://apidocs.aikido.dev/reference/listuserloginhistory) * API - [Broker management](https://apidocs.aikido.dev/reference/listbrokerapps) * API - [Webhook when new issue ignore/snooze request accepted or denied](https://apidocs.aikido.dev/reference/webhooks) * API - [Webhook for Domain scan finished](https://apidocs.aikido.dev/reference/webhooks) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://help.aikido.dev/changelog/q3-2026/56-cloud-asset-map-creating-fix-prs-with-deep-review-and-code-coverage-on-gitlab.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.