AWS securityagent documentation change
Summary
Expanded repository support to include GitLab, Bitbucket, and GitHub Enterprise Server; generalized pull request terminology to include merge requests
Security assessment
The change broadens platform support for existing security features (code scanning and automated fix generation) but doesn't address a specific vulnerability. It enhances documentation of security capabilities without indicating a security incident.
Diff
diff --git a/securityagent/latest/userguide/what-is.md b/securityagent/latest/userguide/what-is.md index 7df4e4dae..ce719f468 100644 --- a//securityagent/latest/userguide/what-is.md +++ b//securityagent/latest/userguide/what-is.md @@ -27 +27 @@ AWS Security Agent shifts security left by providing real-time security feedback -AWS Security Agent proactively secures applications through two complementary approaches. First, you can create code reviews in the web application to perform comprehensive scans of your full source code from GitHub repositories or S3 buckets, identifying security vulnerabilities and validating compliance with your organizational requirements across your entire codebase. Second, you can enable automated pull request analysis for connected GitHub repositories, where AWS Security Agent reviews code changes and posts security findings directly as pull request comments. In both cases, developers receive remediation guidance, and AWS Security Agent can automatically generate pull requests with code fixes for identified vulnerabilities. This embeds security expertise across all repositories, reducing security-related delays in the development pipeline and scaling evaluation across all codebases. +AWS Security Agent proactively secures applications through two complementary approaches. First, you can create code reviews in the web application to perform comprehensive scans of your full source code from GitHub, GitLab, Bitbucket, or GitHub Enterprise Server repositories or S3 buckets, identifying security vulnerabilities and validating compliance with your organizational requirements across your entire codebase. Second, you can enable automated pull request analysis for connected repositories, where AWS Security Agent reviews code changes and posts security findings directly as pull request or merge request comments. In both cases, developers receive remediation guidance, and AWS Security Agent can automatically generate pull requests or merge requests with code fixes for identified vulnerabilities. This embeds security expertise across all repositories, reducing security-related delays in the development pipeline and scaling evaluation across all codebases.