Autonomous Remediation with CodeMender and Google Cloud
Modern software supply chains generate security alerts faster than engineering teams can triage them. Static analysis tools and dependency scanners uncover thousands of vulnerabilities, but remediation remains painfully manual. Simple LLM code generators often fall short: they lack repository context, hallucinate non-existent APIs, and fail to verify whether fixes break adjacent unit tests.
In this practical, code-first session, we explore CodeMender, an agentic remediation system designed to diagnose, rewrite, and verify code at repository scale. We examine how CodeMender decomposes vulnerability repair into an iterative loop: parsing abstract syntax trees (ASTs), formulating semantic patches with Gemini, and deterministically validating fixes using isolated runtimes on Google Cloud. Attendees will discover how to transition from passive alerts to an autonomous remediation pipeline that submits verified, compilable pull requests directly into their CI/CD lifecycle.
Goran Minov is a Cloud AI & Cyber Security Architect and Google Cloud Certified Professional, holding key Google Cloud credentials, including Professional Cloud Architect, DevOps, and Database Engineer. Specialising in the intersection of applied machine learning and Identity & Access Management (IAM), he currently serves as a Senior Technical Account Manager at Okta, where he helps customers automate and secure their identity infrastructure for modern, intelligent workloads.
A passionate community leader, Goran has been an Organiser for GDG London since 2019, helping grow one of the largest developer communities in the UK. He is also the Founder of The Cloud Circuit, an independent event series connecting London’s practitioners with advanced cloud and AI deployment strategies, and a Co-founder of The Android Circuit.
As a prominent speaker and technical mentor, Goran regularly shares his expertise in securing Agentic AI and implementing Zero Trust Architecture. He has delivered workshops and talks at major venues including Droidcon London and DevFest.
- 1Deconstructing CodeMenderhow agentic code-repair loops analyse, patch, and verify repository vulnerabilities.
- 2Mitigating regression risks through automated test execution and semantic diff validation.
- 3Running sandboxed remediation environments using Cloud Build and Cloud Run.
- 4Integrating autonomous remediation agents into existing enterprise CI/CD and workflows.