`cybros fix`

Kick the auto-remediation pipeline on a finding: Cybros drafts a patch, validates it (tests + a security re-scan), opens a pull request, and streams the 6 steps live. On success you get a PR link and branch.

Synopsis

cybros fix FINDING_ID [OPTIONS]

Arguments

Argument	Description
`FINDING_ID`	The finding id to auto-remediate.

Options

Flag	Default	Description
`--timeout`	`600`	Max seconds to wait.
`--no-wait`	off	Trigger the pipeline without waiting.

Plus the global flags: --json, --api-url, --no-color.

Examples

Fix and watch the pipeline

cybros fix fnd_1a2b...

      Remediation rem_9f3a… — running
┏━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━┓
┃ Step            ┃ Status    ┃ Detail            ┃
┡━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━┩
│ analyze         │ completed │ parsed finding    │
│ generate-patch  │ completed │ 1 file changed    │
│ apply           │ completed │                   │
│ run-tests       │ completed │ 42 passed         │
│ security-recheck│ completed │ no new findings   │
│ open-pr         │ running   │                   │
└─────────────────┴───────────┴───────────────────┘
╭─ Fix ready ──────────────────────────────────╮
│ Pull request: https://github.com/acme/api/pull/321 │
│ Branch: cybros/fix-sql-injection-88           │
╰───────────────────────────────────────────────╯

Trigger without waiting

cybros fix fnd_1a2b... --no-wait

Remediation rem_9f3a… started.

JSON (get the PR URL for a script)

cybros --json fix fnd_1a2b... | jq -r '.pr_url'

Notes

The command polls GET /remediations/{id} until the job is terminal (completed/succeeded/failed/cancelled) or --timeout elapses.
If the pipeline fails, the error is shown in a red panel instead of a PR link.

Exit codes

Code	When
`0`	Pipeline finished (PR opened or failed cleanly) / job started.
`1`	Unknown finding, timeout, or API error.
`2`	Not authenticated.

cybros fix