From 23bb1bbda3deb221c552b2ea4ea94b73c75dc899 Mon Sep 17 00:00:00 2001 From: Tofik Hasanov Date: Tue, 19 May 2026 17:50:47 -0400 Subject: [PATCH] fix(cloud-tests): remove "Fix button supported" from scan-engine picker MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Comp AI Scanners card listed "Fix button supported" as a differentiator, but the Fix button also works for Security Hub findings (we wired evidence.findingKey on the SecHub adapter and the AI fix pipeline is input-agnostic — a SecHub finding flows through the same Fix code path, just with a small amber disclosure banner). So the badge and the "Full Fix button support." sentence in the description were misleading: they implied SecHub findings can't be fixed when in fact they can. Removed both. The actual differences between the two modes — cost profile and native compliance mapping — are still on the cards. 6 AwsScanModeStep tests still pass. Co-Authored-By: Claude Opus 4.7 (1M context) --- .../[slug]/components/AwsScanModeStep.tsx | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/apps/app/src/app/(app)/[orgId]/integrations/[slug]/components/AwsScanModeStep.tsx b/apps/app/src/app/(app)/[orgId]/integrations/[slug]/components/AwsScanModeStep.tsx index 13e22bf94..59f563d39 100644 --- a/apps/app/src/app/(app)/[orgId]/integrations/[slug]/components/AwsScanModeStep.tsx +++ b/apps/app/src/app/(app)/[orgId]/integrations/[slug]/components/AwsScanModeStep.tsx @@ -30,11 +30,15 @@ interface AwsScanModeStepProps { * performs their cloud security scans. Two radio cards, mutually * exclusive: * - * 1. Comp AI Scanners (default) — our service adapters, free, - * full Fix button support. + * 1. Comp AI Scanners (default) — our service adapters running + * directly against AWS APIs, free. * 2. AWS Security Hub — read findings from the customer's existing * Security Hub deployment, surface native NIST 800-53 / CIS / PCI - * mapping, Fix button available with a small disclosure. + * mapping. + * + * Note: Fix button works for findings from BOTH modes (Security Hub + * findings just get a small disclosure banner in the Fix dialog). + * Fix support isn't a differentiator and isn't listed as a card badge. * * Pure UI — no API calls, no side effects. The parent owns state and * passes the choice into the createConnection payload via the @@ -57,10 +61,10 @@ export function AwsScanModeStep({ subtitle="Recommended" description={ 'Run our security checks directly against your AWS account. ' + - 'No additional AWS cost. Full Fix button support. Covers IAM, ' + - 'CloudTrail, S3, EC2, RDS, KMS, GuardDuty, and 40+ other services.' + 'No additional AWS cost. Covers IAM, CloudTrail, S3, EC2, RDS, ' + + 'KMS, GuardDuty, and 40+ other services.' } - badges={['Free', 'Fix button supported']} + badges={['Free']} />