动作类型
Each finding can include a human runbook, a ticket template, a PR suggestion, and a safe automated plan when the finding context supports it.
审批政策
Tenant admins control whether automated actions are blocked, require approval, or can complete immediately for low-risk workflows.
活动追踪
Every workflow step is linked back to the originating finding so teams can see recommendation creation, approval, status sync, and completion in one place.
54 个维护的操作手册
Every workspace automatically receives BlackShield's immutable response library. Platform procedures stay current, while your custom runbooks remain separately editable.
推荐操作流程
1. 选择正确的修复路径
Start from surface status or the alert queue, drill into the exact open findings for that repository, cluster, host, or cloud account, then choose the runbook, ticket, PR, or automated plan that matches the change risk.
2. 预先设定批准预期
Use `manual only` for sensitive environments, `approval required` when automation is allowed but must be reviewed, and `auto approve` for lower-risk safe plans.
3. 将状态与证据同步
Update the remediation action with completion, failure, and external reference data so the workflow remains useful to engineering, audit, and leadership reporting.
4. 保持所有权清晰
Link a finding to a locked BlackShield runbook or a tenant-owned custom runbook. Saving action steps and AI generation always produce custom content; managed procedures are never overwritten.
好看的是什么样的
- 每个开放的发现都有一个可见的所有者和建议的下一步行动。
- 自动修复遵循租户策略，而不是绕过批准。
- 工作流程历史记录解释了谁触发、批准或同步了每个操作。
- BlackShield Runbook 会自动显示，租户无法编辑或隐藏。