---
metadata:
- name: generator
content: Diplodoc Platform v5.57.3
alternate:
- https://sourcecraft.dev/portal/docs/en/sourcecraft/operations/ca-triage.md
- https://sourcecraft.dev/portal/docs/ru/sourcecraft/operations/ca-triage.md
- href: en/sourcecraft/operations/ca-triage.md
type: text/markdown
title: Markdown version
- href: ../../llms.txt
type: text/markdown
title: llms.txt
---
> **Documentation Index:** Fetch the complete configuration index at https://sourcecraft.dev/portal/docs/en/llms.txt
# AI-powered vulnerability analysis and prioritization in SourceCraft
For issues detected in the course of [static application security testing](https://sourcecraft.dev/portal/docs/en/sourcecraft/security/security-overview.md#sast), there is triage, i.e, AI-generated tips with risk and criticality assessment, false positive probability analysis, and possible fixes.
For issues detected through [scanning of secrets](https://sourcecraft.dev/portal/docs/en/sourcecraft/security/security-overview.md#secret-scanning) and [static application security testing](https://sourcecraft.dev/portal/docs/en/sourcecraft/security/security-overview.md#sast), you can perform triage, i.e., bulk AI-powered alert severity assessment.
{% note tip %}
Using this feature consumes neurocredits. Check your balance and usage history on the [Code Assistant statistics page](https://sourcecraft.dev/me/codeassistant/settings).
{% endnote %}
## Vulnerability analysis {#analysis}
To run AI-powered analysis of a specific vulnerability, follow these steps:
1. Open the SourceCraft [home page](https://sourcecraft.dev).
1. On the  **Home** tab, navigate to  **Repositories** and select a repository.
1. Under  **Security** on the repository page, go to  **Code scanning**.
{% note info %}
Similarly, you can view a general list of issues for all repositories in the organization.
{% endnote %}
1. Select the issue you want to run AI-powered vulnerability analysis for.
1. In the top-right corner, click  Triage with AI.
Wait for  **SourceCraft Security Bot's** comment to appear.
## Vulnerability prioritization {#prioritization}
To run AI-powered prioritization for a group of alerts, follow these steps:
1. Open the SourceCraft [home page](https://sourcecraft.dev).
1. On the  **Home** tab, navigate to  **Repositories** and select a repository.
1. Navigate to one of these sections on the repository page under  **Security**:
*  **Secret scanning**: List of detected secrets.
*  **Code scanning**: List of SAST issues.
1. In the top-right corner, click  **Triage with AI**.
1. In the window that opens, in the **Minimum severity** field, select the minimum alert severity level for the AI to initiate triage: **Critical**, **High**, **Medium**, or **Low**. Only alerts with this severity or higher will be triaged.
1. Click **Triage alerts**.
Once prioritization is complete, an additional icon displaying the AI-estimated severity rating will appear next to each triaged alert in the list.
#### Useful links {#see-also}
* [Demo repository with vulnerabilities](https://sourcecraft.dev/examples/vulnerable-repo)
* [Security in SourceCraft](https://sourcecraft.dev/portal/docs/en/sourcecraft/security/security-overview.md)
* [Setting up a custom security analyzer in SourceCraft](https://sourcecraft.dev/portal/docs/en/sourcecraft/tutorials/custom-security-analyzers.md)
* [Static application security testing in SourceCraft](https://sourcecraft.dev/portal/docs/en/sourcecraft/operations/sast.md)
* [Security dashboard in SourceCraft](https://sourcecraft.dev/portal/docs/en/sourcecraft/operations/security-dashboard.md)
* [Analyzing vulnerabilities in SourceCraft repository dependencies](https://sourcecraft.dev/portal/docs/en/sourcecraft/operations/supply-chain.md)
* [Secret scanning in a SourceCraft repository](https://sourcecraft.dev/portal/docs/en/sourcecraft/operations/secret-scan.md)