DerCodeFix

DerCodeFix targets the issue of vulnerability patching. Instead of providing a generalized solution, it takes the vulnerable snippet of code and applies necessary changes to eliminate potential security threats.

As with DerTriage, DerCodeFix can be triggered during the scanning stage, or when working with the results.

To activate DerCodeFix at scanning, select the required severity levels of vulnerabilities in the Scan Settings. Additionally, selecting the For confirmed by AI Triage option will only generate fixes for vulnerabilities confirmed by DerTriage. The fixed snippet of code will be available in the Detailed Results > your vulnerability > DerCodeFix tab.

For targeted generation, navigate to the vulnerability in the Detailed Results, then click on Fix with DerCodeFix. Clicking on the line of code will provide a brief explanation of the changes, and the change itself will be highlighted in purple below. To view the original code, use the toggle switch.