Mend AI Configuration

Overview

This page lists the various Mend AI settings you may want to configure in the Mend AppSec Platform, to tailor the Shadow AI discovery behavior to your organization’s preferences.

Getting it done

To administer Mend AI, log into the Mend AppSec Platform as an organization administrator.
Click the cowheel icon and select Administration.

Select AI Configuration from the left-pane Administration menu:

This will take you to the AI Configurations screen, where you can create a new configuration by clicking on the +Create button () at the upper-right corner of the page.
This will take you to the Snippets Configuration screen.

Snippets Configuration

As a Mend AI user, there are two scenarios to consider when it comes to snippets:

1. Sending Snippets: You do not want the snippets to be sent to the server at all.

2. Storing Snippets: You want the snippets to be sent but not stored on the server.

The settings in the Snippets Configuration screen allow you to configure the desired behavior for these scenarios.

1. Configuration Name - Type in a name for your configuration.

2. Enable Mend AI Code Scanning Capabilities (e.g. detect inference providers) - Enable/disable Mend AI’s code scanning. Enabled by default.

3. Store Snippets on Server (improves visibility of findings) - Enable/disable the sending of snippets.
   This setting only becomes available when “Mend AI Code Scanning Capabilities” is enabled.

4. Number of Snippet Lines to Store - Enter the number of lines to store. This helps you review findings more effectively for better triage and remediation. Set to 0 to disable storage or leave blank to default to 10.

Assigning Configurations

You can turn your newly created AI configuration into the default configuration for all of the projects in the organization by clicking the relevant configuration’s menu button () and selecting Set as default:

Upon doing so, the configuration in question will be labelled Default ().

Assigning Configurations to Applications

After the configuration has been created, navigate to your Applications via the left-pane Administration menu, select the application to which you wish to assign the configuration and click the Assign AI Config button to select the configuration to assign.

This will spawn the Assign AI Configuration menu, in which you can select the desired configuration from the drop-down menu. Click Assign Configuration to complete the configuration assignment:

Assigning Configurations to Projects

Once assigned to an application, all the projects in the application will inherit that configuration.
If you wish to assign a different configuration to a project or projects in the application, you can do so by creating a new configuration and assigning it to that desired project or projects.
This action will override the configuration inherited from the application.

To create a new configuration and assign it to a project or projects, perform the steps described in the previous 2 sections (sequentially) but for the latter use the Projects administration menu instead of Applications.