Auto-fix

Xygeni provides an Auto-Fix feature that automates the correction of code and configuration issues: SAST (Static Application Security Testing) vulnerabilities, IaC (Infrastructure as Code) flaws and CI/CD misconfigurations. This feature can be accessed through two methods: the UI interface or the XygeniBot.

---

1. Xygeni AI Fix in the UI

The UI provides a streamlined, issue-by-issue approach to fixing vulnerabilities.

How to Use:

1. Navigate to Risks View: After scanning your project, go to the risks view

2. Select an issue: Choose one of the identified code vulnerabilities, IaC flaws or CI/CD misconfigurations

3. Click "Fix Vulnerability": This button appears once you've configured your integrations

1. Review AI-Generated Fix: Xygeni's AI agent analyzes the issue and proposes a potential fix

1. Open a Pull Request: Submit the fix for review by project stakeholders through your SCM/ticketing system

The "Fix Vulnerability" button only appears after proper integration configuration has been completed. See Remediation Systems for further information

Some issues cannot be fixed by rewriting a file of the repository. This is the case of the CI/CD misconfigurations reported against the repository or the CI/CD platform itself, such as branch protection or organization settings. For them, the AI agent produces a remediation guide with the steps to follow instead of a proposed change.

2. AI Fix with XygeniBot

While the UI allows manual, one-by-one fixes, the XygeniBot enables bulk auto-remediation with advanced configuration options.

Key Benefits:

• Bulk Processing: Auto-remediate all issues found within an analysis.

• Customizable Filtering: Configure which vulnerabilities to fix and which to skip. Set rules based on severity, language, tags or rules.

• Customizable AI agent: Use your own provided AI agent.

Integration Setup

See Xygeni Bot for further information.