> For the complete documentation index, see [llms.txt](https://docs.veedna.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.veedna.com/continuous-vulnerability-elimination-factory-cvef/sbom360/auto-fix-remediation-with-gold-components.md).
# Auto-Fix Remediation with Gold Components
Remediate vulnerability findings with Lineaje AI-curated Gold Open Source components.
Auto-Fix remediates vulnerability findings by applying a **Lineaje AI-curated remediation plan**. The plan uses **Gold Open Source** components.
Review the plan, select Gold components, and assess the risk change. Then trigger the fix with one click. The **AI Remediate** workflow runs the fix and tracks it to completion.
This guide covers the end-to-end flow:
1. Open **Projects** and select a project.
2. Open the **AI Remediate** tab.
3. Review the AI-curated plan and select the **Gold** plan.
4. Select the Gold components to remediate.
5. Review the change in risk posture.
6. Click **Auto Fix** to execute.
7. Track the remediation in the **AI Remediate** tab.
{% hint style="info" %}
Auto-Fix operates on a project's **vulnerability findings**. These are policy violations from vulnerability-related checks. A project needs at least one vulnerability finding before a plan is available.
{% endhint %}
### Step 1 — Navigate to Project and select a project
From the main navigation, select **Project**. Select the project you want to remediate. The project page shows **Findings** and **Vulnerabilities** counts. Vulnerabilities are grouped by Critical, High, Medium, and Low severity.
Navigate to Project, then select the project you want to remediate.
Select the **AI Remediate** tab for that project. Lineaje AI presents a remediation plan for components affected by vulnerability findings.
The screen has three panels:
1. **① Select a plan**
2. **② Review change in risk posture**
3. **③ Execute**
The remediable components appear below these panels.
### Step 2 — Select a plan
The **① Select a plan** panel includes:
* **Total Vulnerabilities** — the project's full vulnerability count by severity. Select **View details** to inspect them.
* **Vulnerabilities that can be fixed with available Gold plans** — vulnerabilities remediable by Lineaje **Gold** hardened open-source components.
Two plans are available:
* **Gold** — applies **Gold Open Source** components. These packages are hardened and rebuilt from source.
* **Custom** — lets you tailor the selected fixes.
Select **Gold** to remediate with Gold components. Select **View details** on the Gold row to view addressed vulnerabilities.
### Step 3 — Select the Gold components
The component table lists the fixes included in the plan.
| Column | Meaning |
| -------------------------- | ------------------------------------------------------------------------------------------ |
| **Component Name** | The affected component and current coordinates, such as `npm:minimist:1.2.5`. |
| **Version** | The currently used version. |
| **Selected Fixed Version** | The Gold Open Source version Auto-Fix applies, such as `1.2.8`. |
| **Build Breaking Change** | Whether the upgrade is expected to break the build. **No** indicates a compatible upgrade. |
Use the table legend to interpret each recommendation:
* **Gold Open Source**
* **Compatible**
* **Incompatible**
Select each component to include. Recommended Gold components are selected by default. Select **Expand all** to review recommendation details. Select **Learn more about this recommendation** to view its rationale.
{% hint style="success" %}
Prefer **Compatible** components with **Build Breaking Change = No**. These upgrades should not require code changes. Review incompatible or build-breaking components before including them.
{% endhint %}
### Step 4 — Review the change in risk posture
The **② Review change in risk posture** panel displays a risk matrix. It plots **Integrity Levels** from LCAL0 to LCAL4 against **Risk Levels**: CIRL, HIRL, MIRL, LIRL, and ZIRL.
The matrix marks the project's current position. A second marker shows the projected position after the plan. Confirm that selected fixes move the project toward lower risk and higher integrity.
### Step 5 — Execute with Auto Fix
The **③ Execute** panel summarizes the action. For example:
> *Selecting **Auto Fix** would initiate **Gold** remediation plan of 1 component associated with **notification-service: v1** project.*
Select **Auto Fix** to start remediation. The selected Gold plan runs as an **AI Remediate** workflow. The workflow applies the Gold component upgrades as an automated task.
### Step 6 — Track remediation in AI Remediate
After Auto-Fix starts, work runs as an **AI Plan & AI Remediation** task. Monitor it from **AI Remediate** in the left navigation.
The **Tasks** view provides a live summary and detailed task list. Dashboard cards group tasks by ownership and status:
Track the Auto-Fix workflow from the AI Remediate Tasks view.
* **Assigned to me**
* **Created by me**
* **All Tasks**
Each group shows **Pending**, **In Progress**, **Blocked**, and **Completed** counts.
The task table includes:
* **Task Name** and **Project**
* **Type** — `AI Plan & AI Remediation`
* **Status** — workflow progress
* **Assigned To** — the **Lineaje AI Agent**
* **Created By** and **Last Modified**
Use **Time Range**, **Task Type**, and **Assigned to** filters to find a run. You can also use **Search by name**. When a task reaches **Completed**, Auto-Fix has applied the remediation.
{% hint style="info" %}
The **Lineaje AI Agent** executes Auto-Fix runs. Each run appears as an `AI Plan & AI Remediation` task. Track the task from **In Progress** to **Completed** to confirm the fix landed.
{% endhint %}
***
### Quick reference
1. Go to **Project** and select your project.
2. Select **AI Remediate**, then select **Gold**.
3. Select Gold components. Prefer compatible, non-build-breaking upgrades.
4. Confirm the risk-posture improvement.
5. Select **Auto Fix**.
6. Track the run in **AI Remediate** until it is **Completed**.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.veedna.com/continuous-vulnerability-elimination-factory-cvef/sbom360/auto-fix-remediation-with-gold-components.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
