Mobb User Docs
Start NowBlogsWatch NowContact Us
  • What is Mobb?
  • What's New with Mobb
  • Supported Fixes
  • Getting Started
    • System Requirements
    • Onboarding Guide
      • Registering a Mobb account
      • Try Mobb now!
      • Running Mobb against your own code
      • Automate Mobb in a CI/CD pipeline
    • Working with the Fix Report
    • Mobb CLI Overview
      • Analyze Mode
      • Scan Mode
      • Add SCM Token Mode
      • Review Mode
      • Common Deployment Scenarios
  • Mobb Dashboard
  • Integrating SAST Findings
    • Checkmarx
      • Generating Checkmarx One JSON Report from CLI
    • Snyk
    • SonarQube
      • Generating a SonarQube SAST Report
    • Fortify
    • CodeQL
    • Semgrep/Opengrep
      • Generating a Semgrep SAST Report
      • Generating an Opengrep SAST Report
  • CI/CD Integrations
    • GitHub Actions
      • GitHub Fixer for CxOne
      • GitHub Fixer for Opengrep
    • GitLab Pipeline
    • Azure DevOps
    • Jenkins
    • CircleCI
    • Bamboo
    • Bitbucket Pipeline
  • Administration
    • User Management
    • Project Settings
    • Access Tokens
    • Organization-Level Fix Policy
    • Integrations Page
    • SAML Single Sign-On Flow
  • More Info
    • Mobb Broker
      • Mobb Broker Token Rotation
      • Secure storage of Mobb broker in AWS Secrets Manager
    • Providing Fix Feedback
    • Frequently Asked Questions (FAQ)
    • Data Protection and Retention
    • Service Level Agreement
  • Fixing Guides
    • SQL Injection
    • Path Traversal
    • Log Forging
    • XSS
    • XXE
    • Server Side Request Forgery
    • HttpOnly Cookie Vulnerabilities
    • Hardcoded Domain in HTML
    • Hardcoded Secrets
    • HTTP Response Splitting Attacks
    • Insecure Cookie Vulnerabilities
    • Insecure Randomness
    • Missing Check against Null
    • Missing Rate Limiting
    • Regex Missing Timeout
    • System Information Leakage
  • Mobb REST API Guide
Powered by GitBook
On this page
  • Issue Filters
  • Automatic PR
  • Experimental Fixes

Was this helpful?

  1. Administration

Organization-Level Fix Policy

PreviousAccess TokensNextIntegrations Page

Last updated 5 months ago

Was this helpful?

The "Fix Policy" setting exist on both the organization-level and the project-level. If you only want to modify the fix policy for your own project, please visit the Project Settings page here.

Before you proceed, take note that modifying the fix policy at the organization level will overwrite the fix policy settings at the project level.

The fix policy setting allows you to control the Mobb's behavior around fix recommendations.

To access the fix policy menu, first click on the Settings menu, followed by "Fix Policy".

Issue Filters

The issue filters section gives you granular control over which issue types are used when generating the fix recommendations. To enable issue filters, you must first enable it using the "Enable issues filter" toggle, followed by selecting the checkboxes next to the issues you want Mobb to use.

Automatic PR

Mobb can automatically generate Pull Requests (PRs) for selected issue types. To configure which issue types you wish to enable automatic PR generation, select the boxes next to the issue type as shown below:

Once enabled, Mobb will monitor for future fix reports and automatically generate PRs with the fixed code in your Source Code Repository when the following conditions are met:

  1. The issue type is enabled on the Fix Policy page, as shown above.

  2. The repository URL belongs to an SCM where Mobb is already connected (Authenticated via OAuth).

Experimental Fixes

By default, Experimental Fixes are disabled. To enable, toggle the "Enable Experimental Fixes". To save the changes, click on "Apply Changes" on the top right of the screen.

Once enabled, you should begin seeing experimental fixes when generating a fix report. Experimental fixes are located at the bottom of a fix report, as shown:

Please note that Automatic PR only works when triggered using the Mobb CLI with the --auto-pr flag set, check out the to learn more.

The reported fix is considered a .

The fix report originates directly from Bugsy (Mobb CLI) or via integration with the pipeline with --auto-pr flag enabled. Click to learn more.

Under Fix Policy, you can also enable or disable experimental fixes. If enabled, experimental fixes may be applied to issue types for which Mobb does not yet have .

stable fixes
fresh fix
Mobb CLI guide
here