Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Auto-Fix Remediation with Gold Components

Remediate vulnerability findings with Lineaje AI-curated Gold Open Source components.

Auto-Fix remediates vulnerability findings by applying a Lineaje AI-curated remediation plan. The plan uses Gold Open Source components.

Review the plan, select Gold components, and assess the risk change. Then trigger the fix with one click. The AI Remediate workflow runs the fix and tracks it to completion.

This guide covers the end-to-end flow:

  1. Open Projects and select a project.

  2. Open the AI Remediate tab.

  3. Review the AI-curated plan and select the Gold plan.

  4. Select the Gold components to remediate.

  5. Review the change in risk posture.

  6. Click Auto Fix to execute.

  7. Track the remediation in the AI Remediate tab.

Auto-Fix operates on a project's vulnerability findings. These are policy violations from vulnerability-related checks. A project needs at least one vulnerability finding before a plan is available.

Step 1 — Navigate to Project and select a project

From the main navigation, select Project. Select the project you want to remediate. The project page shows Findings and Vulnerabilities counts. Vulnerabilities are grouped by Critical, High, Medium, and Low severity.

Project page showing project findings and vulnerability counts
Navigate to Project, then select the project you want to remediate.

Select the AI Remediate tab for that project. Lineaje AI presents a remediation plan for components affected by vulnerability findings.

The screen has three panels:

  1. ① Select a plan

  2. ② Review change in risk posture

  3. ③ Execute

The remediable components appear below these panels.

Step 2 — Select a plan

The ① Select a plan panel includes:

  • Total Vulnerabilities — the project's full vulnerability count by severity. Select View details to inspect them.

  • Vulnerabilities that can be fixed with available Gold plans — vulnerabilities remediable by Lineaje Gold hardened open-source components.

Two plans are available:

  • Gold — applies Gold Open Source components. These packages are hardened and rebuilt from source.

  • Custom — lets you tailor the selected fixes.

Select Gold to remediate with Gold components. Select View details on the Gold row to view addressed vulnerabilities.

Step 3 — Select the Gold components

The component table lists the fixes included in the plan.

Column
Meaning

Component Name

The affected component and current coordinates, such as npm:minimist:1.2.5.

Version

The currently used version.

Selected Fixed Version

The Gold Open Source version Auto-Fix applies, such as 1.2.8.

Build Breaking Change

Whether the upgrade is expected to break the build. No indicates a compatible upgrade.

Use the table legend to interpret each recommendation:

  • Gold Open Source

  • Compatible

  • Incompatible

Select each component to include. Recommended Gold components are selected by default. Select Expand all to review recommendation details. Select Learn more about this recommendation to view its rationale.

Prefer Compatible components with Build Breaking Change = No. These upgrades should not require code changes. Review incompatible or build-breaking components before including them.

Step 4 — Review the change in risk posture

The ② Review change in risk posture panel displays a risk matrix. It plots Integrity Levels from LCAL0 to LCAL4 against Risk Levels: CIRL, HIRL, MIRL, LIRL, and ZIRL.

The matrix marks the project's current position. A second marker shows the projected position after the plan. Confirm that selected fixes move the project toward lower risk and higher integrity.

Step 5 — Execute with Auto Fix

The ③ Execute panel summarizes the action. For example:

Selecting Auto Fix would initiate Gold remediation plan of 1 component associated with notification-service: v1 project.

Select Auto Fix to start remediation. The selected Gold plan runs as an AI Remediate workflow. The workflow applies the Gold component upgrades as an automated task.

Step 6 — Track remediation in AI Remediate

After Auto-Fix starts, work runs as an AI Plan & AI Remediation task. Monitor it from AI Remediate in the left navigation.

The Tasks view provides a live summary and detailed task list. Dashboard cards group tasks by ownership and status:

AI Remediate tasks page showing remediation workflow status
Track the Auto-Fix workflow from the AI Remediate Tasks view.

  • Assigned to me

  • Created by me

  • All Tasks

Each group shows Pending, In Progress, Blocked, and Completed counts.

The task table includes:

  • Task Name and Project

  • Type — AI Plan & AI Remediation

  • Status — workflow progress

  • Assigned To — the Lineaje AI Agent

  • Created By and Last Modified

Use Time Range, Task Type, and Assigned to filters to find a run. You can also use Search by name. When a task reaches Completed, Auto-Fix has applied the remediation.

The Lineaje AI Agent executes Auto-Fix runs. Each run appears as an AI Plan & AI Remediation task. Track the task from In Progress to Completed to confirm the fix landed.

Quick reference

  1. Go to Project and select your project.

  2. Select AI Remediate, then select Gold.

  3. Select Gold components. Prefer compatible, non-build-breaking upgrades.

  4. Confirm the risk-posture improvement.

  5. Select Auto Fix.

  6. Track the run in AI Remediate until it is Completed.

PreviousLineaje AI
NextJIRA Integration

Last updated