From the source
CodeRabbit is using OpenAI's GPT-6.1 Sol as the primary model in its security agent, extending code review beyond individual changes to risks across complex codebases.
- A pull request can affect shared libraries, dependencies and safeguards elsewhere in an application, and OpenAI says Sol helps CodeRabbit connect behavior across files and components to surface potential security issues.
- CodeRabbit's review is independent of the agent that wrote the code and complements established scanners, and its system also uses other frontier models and security tooling.
- During pull-request review Sol analyzes changes as developers work, while in Deep Scan it supports broader investigation across repositories, including dependencies and how components interact.
- CodeRabbit Secure extends that investigation to linked repositories, such as a shared authentication library, to help teams understand how a weakness could affect the wider system.
- CodeRabbit reports using GPT-6.1 Sol to flag security-related issues across thousands of repositories and organizations, and for user-selected findings it can attempt exploit verification in an isolated sandbox without testing production systems.
- For supported issues it can draft a pull request with a proposed fix, though human reviewers remain responsible for deciding which changes to ship.
