BriefsToolAvailable now
GitHub makes agentic autofix for code scanning alerts generally available
GitHub's AI agent Copilot can now fix code scanning alerts, check the fix with CodeQL and open a draft pull request, for Enterprise Cloud customers with Code Security or Advanced Security.
Summary
Agentic autofix for code scanning alerts is now generally available. When you assign an alert to Copilot, it explores the codebase, proposes a fix, reruns CodeQL to check it, and opens a draft pull request for review. It is for GitHub Code Security and GitHub Advanced Security customers on GitHub Enterprise Cloud.
What changed
- Assigning a code scanning alert to Copilot now starts an agent that proposes a fix and reruns CodeQL to confirm the alert closes.
- Up to 25 alerts can be selected to be fixed together in a single pull request.
- The Update a Code Scanning Alert REST API can assign alerts to copilot-swe-agent[bot].
- It uses AI Credits from the Code Security budget and GitHub Actions minutes, and needs a Copilot billing method.
- Only alerts on the default branch are supported.
Availability
Available now“Agentic autofix for code scanning alerts is now generally available.”
Founder takeaway
If you run GitHub Enterprise Cloud with Code Security or Advanced Security, ask an enterprise admin to enable the new policy, and check your AI Credit budget first. Otherwise there is nothing to do.
Source
Researched and drafted with AI from the official sources above, then checked automatically before publishing. Spotted a mistake? Tell us.
Related
More briefs
Black Forest Labs puts its FLUX.3 Image Klein AI model into Diffusers
FLUX.3 Image Klein, an AI image model, handles text-to-image, multi-reference editing and bounding-box placement. Two open checkpoints are out.
Hugging Face1 min read
Shopify adds a security check command to its AI Toolkit
The new shopify app security check command scans a Shopify app for common vulnerabilities, and you can run it by asking a coding agent through Shopify AI Toolkit.
Shopify1 min read
Databricks launches Predictive AI Functions in Beta for SQL, Genie and dashboards
Databricks adds four new SQL AI functions and an upgraded ai_forecast so analysts can forecast, find drivers and flag anomalies without building models.
Databricks1 min read
One email, every Monday
Briefs are published here every weekday. Monday Heist is the weekly email: one useful AI workflow, the files to use it, and the catch. Free, and you can leave in one click.
One email. Every Monday.