waysregistry
DocsGitHub
registry
incu/securityway

Incu Security Remediation

Incu's security-remediation flow — scan → findings → scope gate → plan → fix per finding → re-scan → resolution → PRs.

securityconformant — validation tier: Passes the conformance rules: real gates, documents and state are declared.byincuv1.0.00 installs
$ npx ways.sh add github:incu-tech/incuway

Installs the way at the repository root. The CLI cannot yet target a manifest inside a repo, so ways/incu-security/way.yaml is not addressable on its own — use the registry name below to identify it until ways add can resolve one.

registry nameincu/security
pinneded7bee6bc2 · ways/incu-security/way.yaml

The flow

spec.flow — 8 phases · 5 gates
01

Intake & scan

scan
02

Findings report

findings
FINDINGS.mdrequireddocs/security/{slug}/FINDINGS.md
Scope confirmationgate: scope
blockingneeds your approval
03

Remediation plan

plan
PLAN.mdrequireddocs/security/{slug}/PLAN.md
Plan approvalgate: plan
blockingneeds your approvalwaits for: scope
04

Fix per finding

implementation
05

Re-scan & resolution

validation
RESOLUTION.mdrequireddocs/security/{slug}/RESOLUTION.md
Validation sign-offgate: resolution
blockingneeds your approvalwaits for: plan
06

PR fix→develop

pr-develop
PR fix→developgate: pr-develop
blockingneeds your approvalwaits for: resolution
07

PR develop→main

pr-main
PR develop→maingate: pr-main
blockingneeds your approvalwaits for: pr-develop
08

Done

done

Bind & require

what it needs from your environment

Capability slots

spec.needs — bind to your tools

Version-control hostvcs-host
ways.dev/vcs-host@1

Hosts the repo and PRs — where this way opens and gates the remediation pull requests.

githubgitlabbitbucket

declared by the way

Static application security testingsast
ways.dev/sast@1

Produces the first-party code findings this flow triages, remediates and re-scans.

snyksemgrep

declared by the way

Software composition analysissca
ways.dev/sca@1

Produces the dependency findings this flow triages, remediates and re-scans.

snyk

declared by the way

Requires

spec.requires — checked by ways doctor

gitmustgit --version
ghmustgh --version · >=2.0.0

Source

indexed, not hosted
repohttps://github.com/incu-tech/incuway
refmain
commited7bee6bc22b86e07e52542774ec3a4dc696ccef
manifestways/incu-security/way.yaml
validated