Automatic Creation of Pull Requests
Last updated
Was this helpful?
Aikido allows for automatic Pull Request creation on a daily basis, handling mass dependency updates, fixing SAST issues, updating container base images & fixing pentest issues. You can fine tune the pull request title, description, labels and other settings with "PR Configuration".
Step 1: Go to Autofix Settings page
Step 2: Scroll down to Automated PRs. Enable the toggle for 'Autocreation of PRs'
Step 3: The configuration modal opens. You can enable autocreation for dependencies in code repos, automated fixes for Docker containers or automatically fix SAST/IaC and pentest issues. Make sure to select code repositories and containers for which you want PRs created.
Step 4: Test whether new PRs are created correctly by clicking the Test Autocreation button.
AutoFix creates a maximum of 10 PRs per repo during the daily run.
When you perform SAST scanning on a repository for the first time, you will typically discover a large amount of issues. To keep the number of pull requests manageable be have the following limits when creating PRs for SAST issues:
PRs are only created for issues where AutoFix has medium or high confidence
During the daily run, AutoFix will create a maximum of 2 PRs per repo containing a maximum of 5 changed files.
AutoFix limits the amount of open SAST AutoFix PRs to 10 per repo. Once that limit is hit, AutoFix doesn't automatically create new SAST AutoFix PRs. When you close or merge the PRs, you will receive new PRs during the next daily run.
If you need higher limits, reach out to us in the Aikido UI.
You can configure pull request properties (such as the title, labels, branch name, and commit message) on the AutoFix PR Configuration page. More docs can be found here.
Last updated
Was this helpful?
Was this helpful?