AI agent fixed the bug, but what else did it change?
Trail of Bits has released two new open-source plugins, patching-bugs and regression-hunt, designed to help engineers automate bug fixes and regression testing using AI agents. The tools aim to improve patching hygiene and reduce false positives in software development.
Why it matters
Automating security patches and regression testing is critical for maintaining the integrity of open-source software in an era of increasing cyber threats.
Anish Naik, Marcelo Morales October 21, 2026 patch-the-planet , open-source , vulnerabilities , ai Page content Standardizing the patching process How we designed the plugins regression-hunt reduces false positive rates patching-bugs streamlines best practices from thousands of agent sessions What’s next for the plugins The industry needs to focus on patching Today we’re publishing patching-bugs and regression-hunt , two plugins that let engineers delegate patch development and regression checks to agents. Our patching-bugs plugin reproduces reported bugs, develops fixes, and tests them. The regression-hunt plugin checks whether any changes break previously working and supported behavior. Engineers can direct the work and review their results; maintainers can supply their own security assumptions and patching requirements, so the agents work within the project’s rules.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in