AI code review for GitLab merge requests

• One note on the merge request per review, with the summary followed by every finding and its file, line and severity.
• Commit statuses: Solemly / Review, Solemly / Security, Solemly / Summary and, with Jira connected, Solemly / Acceptance.
• Replies to @solemly commands, such as @solemly review or @solemly ask.

GitLab doesn't get inline comments yet. Findings are listed in the review note with their file and line.

Solemly posts reviews, replies and commit statuses as the user who owns the token, so pick the token accordingly.

1. Create a token with the api scope and the Maintainer or Owner role.
2. In Solemly, open Repositories, choose GitLab, paste the token and click Test & connect. Only workspace admins can connect a code host.

You don't set up webhooks yourself. Solemly lists every project the token's user is a member of, registers a group webhook on each top-level group where the token has Maintainer access or higher, and a project webhook on each project it can manage. New projects in those groups are picked up automatically when their first merge request or comment arrives.

Turn on Block on high severity for the project in Solemly, and the Solemly / Review commit status fails on any CRITICAL or HIGH finding. Then, under Settings → Merge requests → Merge checks in GitLab, turn on Pipelines must succeed, so the failed status blocks the merge. A fix pushed to the branch gets a new review, and the status passes when nothing high-severity is left. See Block a merge on AI code review findings.

Solemly connects to GitLab.com. Self-managed GitLab isn't supported yet.