Skip to main content

​
New features

​
Oplane Fixes

Oplane can now write the code fix for a security requirement, so nobody on your team has to leave the review to go and write it. When a review on a pull request or merge request finds unresolved requirements, the Oplane Security Review comment gets a Fix with Oplane button. Click it to open the requirements with a suggested fix next to each one. Every suggested fix shows why the requirement applies and which files it touches, next to the diff in split or unified view. Each fix is written to pass the requirement’s verification cases, and it brings along the imports, helpers, service registration or config it depends on. Oplane only offers a fix that closes the whole requirement. When the complete fix would turn into a large refactor, you get a plan that names every place that has to change. When it depends on a decision only your team can make, such as how tenants should be scoped, Oplane lays out the options and leaves the choice in the PR or MR. Every fix starts out selected, and you untick the ones you’d rather write yourself. When you click Implement all, the Oplane app commits the selected fixes to the PR or MR branch in one commit, exactly as you reviewed them. If any of them can’t be applied cleanly, for example because two fixes change the same lines or someone pushed to the branch after the review, Oplane commits nothing. Oplane records who applied the fixes in its audit log. Applying a fix doesn’t mark the requirement as resolved. The new commit triggers a follow-up review, and the requirement only changes state once that review has assessed the new code. This means a requirement can still show as unresolved for a few minutes after you apply its fix. Oplane doesn’t build your project or run your tests either, so your CI pipeline checks the commit like any other change. Fixes is in early access and available on request, granted per organisation. Once your organisation has it, a workspace owner or org admin turns on suggested fixes repository by repository in workspace settings. The Oplane app needs write access to those repositories because it makes the commit. See Click to fix for setup and what each error message means. For the reasoning behind the design, read Introducing Oplane Fixes.