> ## Documentation Index
> Fetch the complete documentation index at: https://docs.backline.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Manual Fix

> When Backline cannot remediate a vulnerability automatically but it is still actionable, it creates a Manual Fix remediation with an explanation and step-by-step guidance.

## Overview

Some vulnerabilities cannot be fixed automatically, but they can still be resolved by a person. Instead of leaving these as a dead-end, Backline creates a **Manual Fix** remediation that explains why automation could not proceed and gives you clear, step-by-step guidance to resolve the issue yourself.

<Note>
  A Manual Fix remediation is **actionable, not failed**. Backline could not safely apply the fix automatically, so it hands you the context and the steps instead.
</Note>

Manual Fix applies to **SCA** (dependency) and **Container Image** vulnerabilities that are identified as unsupported for automatic remediation.

## How a Manual Fix Remediation Looks

A Manual Fix remediation has these characteristics:

* **Mode**: Hybrid — resolving it requires your collaboration.
* **Status**: Manual Fix.
* **Fixability**: Review Needed — Backline cannot apply the fix automatically, so a human should review the guidance before acting. See [Fixability](/get-started/remediations/fixability).
* **No pull request**: Because the fix cannot be automated, no PR is created.
* **Impact**: Calculated the same way as any other remediation.

The associated vulnerabilities move to **Pending Action** and stay open until the fix is verified.

## Where to Find It

Open the remediation to see its Manual Fix details:

* **Remediation side panel → Overview tab** — the summary explaining the automation blocker (why Backline could not remediate automatically).
* **Remediation side panel → Remediation Plan tab** — the manual guidance, written as clear steps you can follow.
* **Vulnerability side panel** — each affected vulnerability shows a short explanation and a **See Remediation Plan** button that opens the remediation with the Remediation Plan tab.

## What the Guidance Explains

The manual guidance is generated for each vulnerability, so the exact steps depend on the specific blocker. It covers:

* What Backline attempted, when applicable.
* Why automatic remediation cannot continue (the blocker).
* Which package, dependency, image, Dockerfile, or base image is involved.
* The manual steps to resolve the issue.
* How Backline will verify the fix.

<Note>
  **Example.** Backline cannot safely upgrade a transitive package that is pinned in place by an npm override policy, because changing that override could affect the rest of your dependency tree. The remediation explains the blocker and offers safe manual paths, such as upgrading the parent package to a version that already depends on a patched release.
</Note>

## Grouping

To avoid duplicate work, Backline groups related vulnerabilities into a single Manual Fix remediation (one per CVE by default):

* **SCA** — vulnerabilities in the **same repository** that share the **same vulnerable package**.
* **Container Image** — vulnerabilities that share the **same base image version** and the **same Dockerfile**, when known.

## Verification

You do not need to close a Manual Fix remediation manually.

After you apply the fix, Backline verifies it automatically on the next scanner ingestion. When the vulnerable package or image is no longer reported at a vulnerable version, all linked vulnerabilities move to **Resolved**.

<Steps>
  <Step title="Review the blocker">
    Open the remediation and read the summary in the Overview tab to understand why automation could not proceed.
  </Step>

  <Step title="Follow the guidance">
    Open the Remediation Plan tab and apply the recommended manual steps.
  </Step>

  <Step title="Let Backline verify">
    On the next scan, Backline confirms the fix and moves the vulnerabilities to Resolved automatically.
  </Step>
</Steps>

## Related Documentation

<CardGroup cols={2}>
  <Card title="Remediations Overview" icon="wrench" href="/get-started/remediations/overview">
    Understand how remediations work in Backline
  </Card>

  <Card title="Fixability" icon="shield-check" href="/get-started/remediations/fixability">
    Learn what the Review Needed badge means
  </Card>

  <Card title="Remediation Summary" icon="file-lines" href="/get-started/remediations/remediation-summary">
    See how Backline explains what a remediation changed
  </Card>

  <Card title="Vulnerabilities Overview" icon="bug" href="/get-started/vulnerabilities/overview">
    Understand vulnerability statuses, including Pending Action
  </Card>
</CardGroup>