Remediation systems

Open Source Remediation Systems

For vulnerabilities of open source dependencies, Xygeni provides the capability of Automatic Fix.

See OSS Auto-remediation (Automatic Fix) for further information

In order to use Auto-Fix, you must configure the supported systems: GitHub, GitLab, Bitbucket, Azure DevOps and Gitea.

Go to Settings >> Integrations >> Remediation to configure the integration with them.

GitHub

To configure GitHub, you should provide a GitHub Personal Access Token with the following permissions:

Token type	Permissions
Classic token	repo repo:status read:org
Fine-grained token	Contents:Write Pull requests:Write

GitLab

To configure GitLab, you should provide a GitLab Personal Access Token with the following permissions:

Permissions	Minimum role
api write_repository	Developer

Bitbucket

To configure Bitbucket , you should provide an access tokens with the following permissions:

Permissions
account repository repository:write pullrequest pullrequest:write

Use the token type that best suites your case:

• Repository Access Token

• Project Access Token

• Workspace Access Token

• Personal Access Token

Azure Devops

To configure Azure Devops, you should provide a Azure Personal Access Token with the following permissions:

Permissions	Minimum role
vso.code vso.code_write	Contributor

Gitea

To configure Gitea, you should provide a Personal Access Tokens with the following permissions:

Permissions
read:repository write:repository read:organization