Developer workflows
As a software developer, Northstar job is to get you a clear, specific problem in your code, not a pile of alerts to sort through. This page covers how findings reach you, how you work through them, and how SmartFix can fix some of them for you.
Your role in Northstar
AppSec teams and SOC Analysts do the triage. Your job starts once a finding has already been narrowed down to an issue, a specific, fixable problem in one application that Contrast groups together from every related observation and CVE underneath it. Where AppSec or a CISO looks at your organization's risk in aggregate, you're working one issue, in one application, at a time.
You'll typically be the one onboarding your applications, getting assigned issues and incidents to fix, and, where SmartFix is enabled, reviewing and merging AI-generated pull requests instead of writing every fix by hand. That feedback loop is also how you write more secure code going forward, catching the patterns Contrast flags today before they ship again tomorrow.