# AutoFix for SAST and IaC Issues

{% hint style="info" %}
Aikido Local Scan accounts DO NOT have access to AutoFix within the UI, but it is available for the IDE plugins.
{% endhint %}

The goal of Aikido has always been to save you time by reducing noise, focusing on the issues that truly matter. With the introduction of the **AI Autofix** feature, Aikido takes this one step further.

### Key Features of AI Autofix <a href="#key-features-of-ai-autofix" id="key-features-of-ai-autofix"></a>

* **Preview Changes:** Review detailed previews of AI-generated fixes before implementing them to ensure alignment with your standards.
* **Create Pull Requests (PRs):** Generate pull requests directly in your Source Control Management (SCM) system from the Autofix interface.
* **Direct IDE Integration:** Apply fixes instantly to your codebase via the VS Code integration, saving even more time.

  ![AI-generated patch enhances JSONP security by escaping callback, mitigating XSS vulnerabilities in PHP code.](/files/io5l0RTS2qm2gaSws13X)

***

### Important Info <a href="#important-info" id="important-info"></a>

* **We do not use your code for training / fine-tuning**
  * Code snippets required for generating fixes are securely transmitted to **AWS Bedrock** over encrypted channels. Aikido **nor** [AWS Bedrock](https://aws.amazon.com/bedrock/security-compliance/) use your code for training or fine-tuning AI models.
* **Speed**
  * Simple fixes are typically generated in under 5 seconds. Larger or more complex fixes may take up to 30 seconds, depending on file size and issue complexity.
* **Confidence Levels**
  * Fixes are categorized into confidence levels: **High**, **Medium**, and **Low**. Manual reviews before merging are recommended.

    ![Low confidence warning: Further validation of similar fixes needed.](/files/xyerIhddtkTc4gXN2c5Z)

***

### How to use the AI Autofix functionality <a href="#how-to-use-the-ai-autofix-functionality" id="how-to-use-the-ai-autofix-functionality"></a>

* **Step 1**. Navigate to the SAST or IaC [Autofix Page. ](https://app.aikido.dev/issues/fix/sast)All potential fixes are grouped by type and location.

  ![Aikido Autofix dashboard showing critical SAST issues and options to fix or preview autofix.](/files/PZa1X7NJgS1Z5sn9WaVF)
* **Step 2.** Select one or multiple fixes to preview or create a PR for.

  ![Security scan identifies path traversal vulnerabilities in two PHP files, both with medium severity.](/files/m4tICVoPE7j2vslZXWv6)
* **Step 3.** Preview and Apply.
  * **Create a PR**: Automatically generate a pull request in your SCM.
  * **Apply Directly**: Instantly implement the fix in your codebase via VS Code integration.

![Code patch preview adding file path validation to prevent path traversal vulnerabilities in PHP files.](/files/mhE4Ybm1cPaz7HiUpM8o)

***


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.aikido.dev/autofix-and-remediation/scope/ai-autofix-for-sast-and-iac-issues.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.