Agent
Repository visibility enforcement auto-remediation
The Repository visibility enforcement agent prevents accidental exposure of source code by continuously scanning repositories and ensuring they are private by default. When a repository is detected as public, the agent can automatically correct it or create an exception workflow.
What the agent does
For connected SCM providers (for example GitHub or Bitbucket), the SecureSlate agent can:
- Scan all repositories in your org/workspace on a schedule.
- Detect public repos (and optionally ignore known forks or allowed open-source repos).
- Auto-remediate by setting visibility to private where permitted.
- Open an exception ticket when a repo is intended to be public (approval + justification).
- Collect evidence of visibility state and remediation actions.
Run auto-remediation
- Open the failing repository visibility test.
- Click Auto Fix on the SecureSlate AI can fix this card.
- Review which repos will be modified and which ones will generate exception tickets.
Review and approve
You can review:
- Repos flagged as public
- Planned actions (set private vs exception ticket)
- Allowed list (approved open-source repos)
Then choose:
- Approve — The agent applies visibility changes and/or creates the exception workflow.
- Reject — Close without changes.
