Patched

1. What are the key features of Patched?

Patched includes key features such as customizable workflows, AutoFix, PR Review, and Dependency Upgrade. AutoFix automatically repairs vulnerabilities detected by SAST scanners or identified in a SARIF file. PR Review summarises and comments on pull requests based on code repository changes. Dependency Upgrade automatically updates vulnerable versions of dependencies in your repository to the fixed versions, mitigating breaking changes. Users can create their own workflows, either from scratch or with the aid of a patchflow generator. Patched seamlessly integrates with development and security solutions like GitHub, Gitlab, Jira, and AWS.

2. How does the AutoFix feature of Patched work?

AutoFix in Patched creates a pull request that fixes vulnerabilities found by a SAST scanner or identified in a SARIF file. It can be run using the Patchwork command 'patchwork AutoFix'.

3. What is the role of the PR Review in Patched?

PR Review in Patched automatically summarizes and comments on pull requests based on the changes made to the code repository. It can be initialized with the command 'patchwork PRReview'.

4. How does Patched handle Dependency Upgrade?

Patched manages Dependency Upgrade by automatically updating vulnerable versions of dependencies in your repository to the fixed versions while mitigating breaking changes. The process can be initiated by the command 'patchwork DependencyUpgrade'.

5. Can I create my own workflows in Patched?

Yes, users of Patched have the option to create their own workflows. These can be either built from scratch or created with the assistance of the patchflow generator.

6. What is the function of the patchflow generator in Patched?

In Patched, the patchflow generator assists users in creating workflows without the need to write code. Users can create their own patchflows using available steps and prompts or write one from scratch if needed.

7. What makes Patched a privacy-respecting tool?

Patched respects user privacy by allowing developers to deploy the tool within their own infrastructure using their own API keys, making sure that data stays within their domain and control.

8. How does Patched integrate with GitHub, Gitlab, Jira, and AWS?

Patched integrates with GitHub, Gitlab, Jira, and AWS among others by running as a part of your development pipeline. It readily collaborates with your existing development and security solutions, enabling you to create complex, multi-step flows with ease.

9. Is Patched really free of cost?

Yes, Patched is completely free. The open-source tool can be adopted and used without any charges.

10. What additional benefits does the Patched App offer?

The Patched App is a managed service option that lets users utilize Patchwork without managing infrastructure or API costs. It provides a user-friendly GUI for those who prefer it over the command-line interface.

11. How user-friendly is Patched's GUI?

The GUI provided by Patched is designed to be user-friendly. It offers a visually intuitive environment that allows developers to use Patchwork without the necessity of command-line scripting.

12. How does Patched help in automating development tasks?

Patched uses AI to automate common development chores, streamlining the development lifecycle with customizable workflows. Tasks such as vulnerability repairs, PR reviews, and dependency upgrades are automated saving developers valuable time and reducing the chance of human error.

13. What tasks can I automate using Patched?

With Patched, users can automate tasks such as vulnerability patching, dependency upgrades, analysing pull requests, generating documentation, triaging issues, improving code quality, and creating tickets among other mundane development tasks.

14. Can Patched identify and fix vulnerabilities in my code automatically?

Yes, Patched can identify and fix vulnerabilities in your code automatically using its AutoFix feature. It creates a pull request that fixes vulnerabilities detected either by a SAST scanner or identified in a SARIF file.

15. How does Patched comment on pull requests?

Patched comments on pull requests by summarising the changes made in the code repository and adding these summarised notes as comments on the pull requests. This is handled by the PR Review feature of Patched.

16. Does Patched offer options for custom workflows?

Yes, Patched enables the creation of custom workflows. Users can build workflows from scratch or with the assistance of the patchflow generator, tailoring to their specific development needs.

17. Can I deploy Patched within my own infrastructure?

Yes, Patched can be deployed within your own infrastructure. Its design respects privacy, and allows you to use your own API keys, hence giving you control over your data.

18. How does Patched manage infrastructure or API costs?

Patched manages infrastructure or API costs through the Patched App. This managed service offers a GUI interface to use Patchwork without the burden of provisioning infrastructure or managing various LLM endpoints and API expenses.

19. How can I get started with Patched?

To get started with Patched, you can follow the step-by-step instructions on the Github repository for usage via the Command Line Interface (CLI). Alternatively, you can use the 'Get Started' button on the top right corner of the site to use its managed service, the 'Patched App'.