OpenSSF Finding and Fixing Vulnerabilities Using AI

3 Decide on approaches

There are many ways to use AI to find and fix vulnerabilities, so the first step is to decide on the overall approach. In this chapter we’ll cover some principles: don’t ignore AI, don’t wait for the best models, do simple things first, and don’t presume AI can fix everything. We’ll then cover why and how to guide AI with processes, some example tools and services, and why you’ll need to run AI more than once.