“Triage, at one end, evaluates changes using signals including business value, urgency, risk, effort, readiness, dependencies, linked issues, ownership, and reviewer fit to place pull requests into priority bands and can also recommend next actions for reviewers,” Loker said.
“Change Stack, on the other hand, analyzes a change alongside definitions, usages, dependencies, interfaces, contracts, data flows, and repository architecture to provide an interactive blast radius view and architecture analysis to show relationships between the change and other parts of the application,” Looker added.
The Security Agent further extends that analysis to the broader codebase, according to the company, by scanning committed source code and also recurrently scanning supported infrastructure-as-code, dependencies, software bill of materials (SBOMs), and configuration with the intention to identify vulnerabilities and generate remediation that can move through the PR process.
