How GitLab tracks vulnerabilities through refactors and reformatting

167 · · Aug. 12, 2026, 10 p.m.
Summary
The blog post discusses GitLab's innovative approach to improving vulnerability tracking through a refined fingerprinting method that distinguishes between functional and non-functional code changes. By implementing a normalized Scope+Offset method, GitLab significantly reduces duplicate vulnerability reports caused by non-functional edits such as comments and blank lines. The new tracking algorithm, incorporated into GitLab, has been shown to enhance accuracy without affecting scan times while maintaining compatibility with various SAST tools. Details of the study will be presented at the ASE 2026 Industry Showcase.