Contrast AI SmartFix

Version updated for https://github.com/Contrast-Security-OSS/contrast-ai-smartfix-action to version v1.0.20.

  • This publisher is shown as ‘verified’ by GitHub.

  • This action is used across all versions by 5 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

SmartFix is an AI-powered GitHub Action that automates the remediation of security vulnerabilities identified by Contrast Security. It integrates seamlessly into existing workflows via GitHub Actions, generating Pull Requests (PRs) with proposed fixes. Key benefits include automated remediation, developer-focused PR creation, and accurate vulnerability context. Users can choose from SmartFix’s internal coding agent or integrate with GitHub Copilot or Anthropic’s Claude Code bot for customized vulnerability fixes.

What’s Changed

Contrast AI SmartFix Release

SmartFix is an AI-powered agent that automatically generates code fixes for vulnerabilities identified by Contrast Assess. It integrates into your developer workflow via GitHub Actions, creating Pull Requests (PRs) with proposed remediations.

Please see our README here: https://github.com/Contrast-Security-OSS/contrast-ai-smartfix-action.

v1.0.20 Highlights

This release adds support for remediating static SAST vulnerabilities found by Contrast Code in a repository for NorthStar-only customers.

What’s Changed

Full Changelog: https://github.com/Contrast-Security-OSS/contrast-ai-smartfix-action/compare/v1...v1.0.20