Remediation systems

Open Source Remediation Systems

For vulnerabilities of open source dependencies, Xygeni provides the capability of Automatic Fix.

See OSS Auto-remediation (Automatic Fix) for further information

In order to use Auto-Fix, you must configure the supported systems: GitHub and GitLab

Go to Settings >> Integrations >> Remediation to configure the integration with them.

GitHub

To configure GitHub, you should provide a GitHub Token

Please visit Required Token Permission for GitHub for further information on how to create a GitHub token as well as needed permissions.

Important: The provided token will be used for any remediation on any Xygeni project, so be sure to provide a token with enough permissions to create branches and open pull requests in the repos of your SCM organization.

GitLab

To configure GitLab, you should provide a GitLab Token

Please visit Required Token Permission for GitLab for further information on how to create a GitLab token as well as needed permissions.

Important: The provided token will be used for any remediation on any Xygeni project, so be sure to provide a token with enough permissions to create branches and open pull requests in the repos of your SCM organization.