Create an Automation Workflow for Mend AI

Note: This feature is only available with Mend AI Premium.
Contact your Customer Success Manager at Mend.io for more details about Mend AI Premium.

Overview

This article covers the instructions on how to create pre-defined Workflow templates to streamline the automation of security and compliance processes in your organization. These templates allow you to quickly implement best practices for handling Mend AI threats to ensure efficient risk management.

Note: For general guidance on creating and managing automation workflows in the Mend AppSec Platform, refer to the Create an Automation Workflow in the Mend Platform documentation.

Getting it done

1. Log into the Mend Platform.

2. Click Workflows in the top navigation bar.

3. Click Create From Template within the Workflows page.

   

4. In this screen, select ‘AI’ to view the pre-defined templates for Mend AI:

   

There are two available templates for Mend AI:

• Malicious AI Model - This workflow actively identifies and flags products containing malicious machine learning models to mitigate potential threats.

  • Malicious models may exploit vulnerabilities, compromise data, or introduce harmful behavior into applications.

  • Enforcing this workflow ensures early detection and proactive remediation of such risks.

• Llama License Family - This workflow enforces compliance with the Llama license family, addressing key risks:

  • Requires attribution ("Built with Llama") in products and documentation.

  • Mandates explicit approval from Meta for organizations with over 700 million monthly active users.

  • Llama 2: Available for commercial use in the EU under Meta's licensing terms.

  • Llama 3 and 3.2: Certain versions, especially multimodal models, are restricted in the EU due to regulatory concerns.

5. Once you select a pre-defined template, you’ll be navigated to the Workflow creation page with all pre-defined settings applied. You can save this Workflow as the provided Mend template or customize it to your specific needs.

Note: For more information about the configuration parameters of a Workflow, please refer to the Workflow configuration parameters in the Mend Platform documentation.

Note that a new Triggering Event is available for you in the wizard, AI Analysis:

• Available “When” conditions for AI Models:

  • Model Name

  • Model Age

  • Is Malicious Model

  • Model Licenses

6. Click Create to save this Workflow.

Note: Mend AI workflow violations will be visible in the violations table, like any other violation.
The Violations table view can be accessed directly from a specific Application or Project under the General section in the left-side navigation menu.