# OSS Auto-Remediation

## Automatic Fix for Open Source Vulnerabilities

Xygeni can automatically fix vulnerabilities in your open source dependencies.

Actionable fixes for supported ecosystems appear in the scan results as shown in the following example:

{% hint style="info" %}
To enable this functionality, please configure as explained at the [Remediation Systems](https://docs.xygeni.io/xygeni-administration/platform-administration/integrations/remediation-systems) documentation.
{% endhint %}

Filtering by ***Auto fix available*** will display vulnerabilities that can be automatically fixed.

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FXHjuBXn6JPy4xDKu1s36%2Fimage.png?alt=media&#x26;token=01231e8b-9926-45c9-96e9-0341b81e07dc" alt=""><figcaption></figcaption></figure>

Click on the ![](https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FN8NV7dxsmTLoSudVD83P%2Fimage.png?alt=media\&token=e66de179-8022-4fb4-ac30-c66d365cd605) icon of any issue in the table to view its details.

The **Fix vulnerability** button will be enabled if the issue is tagged as **Auto Fix**

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FXdfpA0iII8c5e2gF7xub%2Fimage.png?alt=media&#x26;token=e645d6b3-99f1-4fa6-b977-7373944c5ede" alt=""><figcaption></figcaption></figure>

In this example, you can see that the vulnerability (CD-2019-10744) is related to lodash version 4.17.11 and resolved in version 4.17.12.&#x20;

Clicking on Fix vulnerability button will open a dialog where you can view the manifest file changes to upgrade to the fixed version. You can also view the repository details and the **Pull Request** that will open with the proposed change.

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FET7jwIGXtjuzf6c277bG%2Fimage.png?alt=media&#x26;token=9541150c-36ba-4780-b673-dc9b16a017cb" alt=""><figcaption></figcaption></figure>

Clicking on **Open PR** button will create the Pull Request.

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FU9SZJW3OH9DoumWwowQF%2Fimage.png?alt=media&#x26;token=6fa5d31e-ecd1-4c63-b6fb-f12e37ee79d2" alt=""><figcaption></figcaption></figure>

Navigate to your source control management system (e.g., GitHub) to view the newly created branch.

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FrZs0wyQiAEXBepKbsUVB%2Fimage.png?alt=media&#x26;token=a3c32c85-7085-4f9e-8324-c33c54450042" alt=""><figcaption></figcaption></figure>

The newly created branch will include a commit encompassing the proposed modifications.

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2FLWSVtG7bzWWV0M8Ko69B%2Fimage.png?alt=media&#x26;token=21bc5991-4096-468f-89fd-bd846d2d4036" alt=""><figcaption></figcaption></figure>

You will receive notification of the newly created Pull Request, enabling you to review and approve it for merging into the protected branch.

<figure><img src="https://4096647782-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUTz59rJLkJBjiRWAMknU%2Fuploads%2F78FHCrQQ7ZbkW7Yq4GUb%2Fimage.png?alt=media&#x26;token=1cafe25b-a988-4dce-8b88-93949ee4f833" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Please see [Open Source Remediation Systems ](https://docs.xygeni.io/xygeni-administration/platform-administration/integrations/remediation-systems#open-source-remediation-systems)for further information on how to configure auto-remediation
{% endhint %}