How River takes security work from a fix to merge
Shopify developed an AI agent named River to automate security vulnerability remediation from dependency upgrades to pull request merges. The agent validates live states, replays and repairs fixes on current repository heads, and escalates context-dependent decisions to human engineers. This workflow reduced the open issue backlog by about 70 percent and increased freshness-gated security merges significantly.
DEPTH ■■■■■9 min read7 weeks ago



