Contrast AI SmartFix for organizations with Northstar only
Legal Disclaimer
When you use Contrast AI SmartFix you agree that your code and other data will be submitted to an LLM of your choice. Both the submission of data to the LLM and the output generated by the LLM will be subject to the terms of service of that Contrast AI SmartFix LLM. Use of Contrast AI SmartFix is entirely at your own risk.
Contrast AI SmartFix supports organizations that use Northstar exclusively without a Contrast teamserver connection. In this configuration, SmartFix generates remediation for issues and observations captured directly in Northstar.
For organizations that use both Contrast teamserver and Northstar see Contrast AI SmartFix.
Note
Whether an organization uses Northstar is controlled by the Northstar Settings option in the SuperAdmin interface, under the organization's settings. The option has four values: Off, Data Only, Preview, and Northstar Only. An organization is Northstar-only when this is set to Northstar Only. This setting is managed internally and is not something you configure yourself; Contact Support if you are unsure which mode your organization is in.
How this differs from hybrid organizations
Source of findings: SmartFix generates fixes from Northstar issues and observations instead of the Contrast teamserver vulnerability
Pull request (PR) linking: The pull requests that SmartFix open link back to the Northstar issue rather than to a Contrast teamserver vulnerability. The hostname and organization ID in the link correspond to your own Contrast instance.
Status and activity: Remediation status and activity for the issue update in Northstar rather than in the Contrast teamserver Vulnerabilities page. When SmartFix opens a PR, it adds a comment to the issue. When a SmartFix PR is merged, SmartFix marks the issue as Closed and adds a comment about the merged PR to the issue.
Before you begin
Your organization is configured for Northstar only
SmartFix is enabled for your organization
You have a connected source code management (SCM) integration, so SmartFix can open pull requests