BIR - Binary Image Remediation
Binary Image Remediation
Binary Image remediation feature covers the vulnerability detection and remediation within the AIG platform. The system integrates a UI layer, AIG backend services, SSD scanning APIs, and CI/CD pipelines to deliver a deterministic, traceable, and automated remediation workflow.
The process is initiated when the user provides the following inputs through the UI:
GitHub Repository (mandatory) — source code location
Branch (mandatory) — target branch for remediation
Dockerfile Path (mandatory) — used for analysis and patching
Docker Image — used as input for SSD artifact scanning
After receiving the inputs, the AIG backend creates a project in SSD via the Project APIs. Repository metadata (repo URL, branch, Dockerfile path) is registered, establishing a link between AIG and the SSD system.
The system then triggers two independent scans in SSD:
Source Scan API — performs SAST (Static Application Security Testing) for code issues and SCA (Software Composition Analysis) for dependency vulnerabilities.
Artifact Scan API (Binary Scan) — scans the Docker image for OS-level, runtime, and binary vulnerabilities.
The instructions below provide steps to add the inputs, initiate the scans, view the scan results and remediate.
Integrations and Project Setup
You need to add the docker integration and setup the project before starting with the binary scan.
To Add Integration:
Navigate to Integrations > Add Integrations.
In the Add Integration page, select Docker and enter the required configuration details.
Click Connect Docker. The integration is successfully added.
To Add Project
Navigate to Projects > Add Project.
In the Add Project page, enter a project name, set the scan type as Binary.
In the configuration section, add the required details and to upload your docker file using the file upload option.
Select the added docker file, from your local system.
Click Save Project. The project gets queued for scanning.
Viewing Scan Results
Once the project is added, it appears in the project list along with its current scan status.
When the scan completes, click View to open the results. The results are organized into two sections:
Project Dashboard — displays a high-level overview of the scan.
Findings — lists all detected issues.
Click View next to any finding to see its full details.
The Project Dashboard displays the overview of the scan.
The Findings displays the detected results.
You can view the details of the findings by clicking the View option next to each finding.
Remediating Findings
Click Remediate next to a finding to begin remediation. The AI Remediation Assistant will analyze the issue and provide:
A summary of the problem
Recommended fixes
An overall remediation score
You can remediate the findings by clicking the Remediate option next to each finding.
Last updated