Remediation systems

Open Source Remediation Systems

For vulnerabilities of open source dependencies, Xygeni provides the capability of Automatic Fix.

See OSS Auto-remediation (Automatic Fix) for further information

In order to use Auto-Fix, you must configure the supported systems: GitHub and GitLab

Go to Settings >> Integrations >> Remediation to configure the integration with them.

GitHub

To configure GitHub, you should provide a GitHub Token

Please visit Required Token Permission for GitHub for further information on how to create a GitHub token as well as needed permissions.

Important: The provided token will be used for any remediation on any Xygeni project, so be sure to provide a token with enough permissions to create branches and open pull requests in the repos of your SCM organization.

GitLab

To configure GitLab, you should provide a GitLab Token

Please visit Required Token Permission for GitLab for further information on how to create a GitLab token as well as needed permissions.

Important: The provided token will be used for any remediation on any Xygeni project, so be sure to provide a token with enough permissions to create branches and open pull requests in the repos of your SCM organization.

Bitbucket

To configure Bitbucket , you should provide a Workspace Access Tokens

Please visit Required Token Permission for Bitbucket for further information on how to create a Bitbucket Workspace Access Tokens token as well as needed permissions.

Important: The provided token will be used for any remediation on any Xygeni project, so be sure to provide a token with enough permissions to create branches and open pull requests in the repos of your SCM organization.

Azure Devops

To configure Azure Devops, you should provide a Azure Personal Access Token.

Please visit Required Token Permission for Azure Devops for further information on how to create an Azure Devops token as well as needed permissions.

Important: The provided token will be used for any remediation on any Xygeni project, so be sure to provide a token with enough permissions to create branches and open pull requests in the repos of your SCM organization.