Skip to main content
Software security teams face the challenge of managing thousands of dependencies across multiple projects, each with their own vulnerability landscape and upgrade requirements. Most vulnerabilities can be resolved through version upgrades which require careful analysis of compatibility, breaking changes, and dependency conflicts. Endor Labs provides automated upgrade analysis and remediation capabilities that transform vulnerability management from reactive issue identification to proactive, action-based risk resolution. The platform analyzes entire dependency trees to identify optimal upgrade paths and generates specific remediation recommendations using the following two key components: Upgrade Impact Analysis identifies and recommends upgrades for your dependencies. By pinpointing the distinct actions that can resolve your vulnerabilities and mitigate the risks associated with updates, your security program can make more informed risk management decisions and triage issues more effectively. Endor Patches provide backported security fixes to your packages, allowing you to minimize the impact of software updates. You can update the libraries with a minimally viable security patch that reduces the risks of breaking changes, bugs, or performance issues associated with an upgrade. Automated Pull Requests automatically generate pull requests with dependency upgrades and security fixes directly in GitHub, GitLab, Azure DevOps, and Bitbucket Cloud development workflows. This capability integrates remediation recommendations into existing CI/CD processes, enabling teams to review and merge security fixes through standard code review workflows.
Maximum number of remediation PRsBy default, Endor Labs keeps a maximum of 20 open remediation PRs per project. To change the limit, set spec.remediation_parameters.automated_pr_parameters.max_open_prs in the scan profile of the project. See Scan profiles to manage scan profiles.
The following diagram demonstrates an example of a vulnerability prioritization process performed by security teams: Vulnerability Prioritization

​
Remediation support matrix

The following table describes the level of remediation support available for different languages.