For the complete documentation index, see llms.txt. This page is also available as Markdown.

Mission Control

Check your organization's elimination progress at a glance. See each project's and component's factory stage. Open the work that needs attention.

Mission Control is the CVEF dashboard and default home page. Four stage counters track work through Scan → Fix → Verify → Deliver. Each counter shows a live count and an action shortcut when needed.

Stage

What It Means

Action

Scan

Projects that have finished scanning

AI Findings Pending Approval opens scanned findings requiring approval.

Fix

Projects with a fix currently running

Premium fixes pending opens hardened Gold rebuilds awaiting approval. These apply to components without a free Gold version. Approval queues the rebuild and raises a fix PR.

Verify

Fixes being validated

None

Deliver

Fixes delivered as a pull request (PR)

PRs pending Review & Merge opens PRs for review and merging.

The Elimination Progress dial shows eliminated vulnerabilities against the total found. For example, it can show 6,194 of 22,389. Summary cards link to the details on Projects, Components, and Vulnerabilities. A Sources panel lists project sources, such as GitHub repositories and Docker Hub images. Select Add Source to connect another source.

Approving AI-Generated Fixes

Novel vulnerabilities and premium fixes always wait for your approval before CVEF changes anything. Approve them from the relevant Mission Control action.

Approve a Novel Vulnerability (LVE) Fix

1

Open pending AI findings

From Mission Control, select AI Findings Pending Approval in the Scan stage. A list of pending LVEs opens, grouped by project.

2

Review the LVE

Click an LVE to open its detail panel and review the Overview, Find Details, and Fix Details tabs.

3

Approve the fix

Click Approve — Raise Fix PR. The finding moves from Open to Pending Approval, then PR Raised. CVEF prepares the fix in the background.

4

Review the pull request

CVEF opens a pull request in your repository. Its description lists resolved vulnerabilities, identifiers, severities, and descriptions. Merge after tests pass and the change is reviewed.

5

Merge the pull request

Review and merge the PR in your SCM. Merging changes the finding status to PR Merged / Closed. It also advances the project to Deliver.

6

Run a new scan

Run a new scan to confirm the vulnerability no longer appears.

Approve a Premium Fix

1

Open pending premium fixes

From Mission Control, click Premium fixes pending on the Fix stage.

2

Review the pending item

Select a pending item to open its detail panel. The panel lists the affected component, current version, proposed Gold version, and project.

3

Review rebuild details

Review the vulnerabilities the rebuild resolves by exploitability and severity. Review the build-breaking-change risk, estimated effort, and premium-fix rationale.

4

Approve the premium fix

Click Approve premium fix. CVEF queues the rebuild and raises a pull request when ready. This workflow matches an approved LVE fix.

Last updated