For supported vulnerabilities, CyfroCode generates AI-driven remediation drafts. To use them:
- Open a finding from the Findings tab (workspace-level or scan-level).
- Click Generate Patch on the finding detail page.
- CyfroSec's AI models analyze the vulnerability context and generate a code change. This may take a few moments.
- Once ready, click the patch link on the finding to open the patch detail page.
- Review the proposed diff in the side-by-side diff viewer. Confirm the change fixes the vulnerability without modifying unrelated behavior.
- If correct, click Approve, then Export to GitHub to create a new branch with the fix, ready for a Pull Request.
- If incorrect or unnecessary, click Reject and provide a clear reason for the review history.
- To hide a false positive from future scans instead, use the Suppress option on the finding detail page.