GitHub makes 'AI Scan for pull requests', which finds vulnerabilities in PR changes, generally available

Verified (fact)

GitHub has made its code scanning feature 'AI Scan for pull requests' generally available. It complements CodeQL by detecting vulnerabilities in pull request changes for languages and frameworks that CodeQL does not yet support.

Why it matters (interpretation)

Combined with Agentic autofix (automatic alert fixing), which also became generally available the same day, GitHub now offers an AI-driven workflow for finding and fixing vulnerabilities as standard features. Organizations using languages CodeQL could not cover can expand the scope of their security checks.

Sources

• Official AI Scan for pull requests generally available GitHub

More about GitHub

• 2026-10-15 P2 Dev tools Generally available AI securityAgents GitHub
  GitHub makes Agentic autofix, which uses an agent to fix code scanning alerts, generally available

  GitHub has made Agentic autofix for code scanning alerts generally available (GA). It resolves alerts the way a developer would,...

• 2026-10-15 P1 Dev tools Generally available AgentsLanguage modelsAI platforms & solutions GitHub
  GitHub revamps Copilot's 'HydraFusion' with an updated model pool and better orchestration, adds 'HydraFusion Max'

  GitHub updated the model pool behind HydraFusion, improved its orchestration workflow, and released a new option, HydraFusion Max. Both...

• 2026-10-14 P1 Dev tools Generally available Language modelsAgents GitHubGoogle
  Gemini 4 Argon is now generally available in GitHub Copilot

  GitHub made Gemini 4 Argon, Google's latest frontier model, generally available in GitHub Copilot. The model targets complex coding,...

• 2026-10-14 P2 Dev tools Generally available AI security GitHubAnthropicSalesforce
  GitHub secret scanning blocks Anthropic API key pushes by default and adds Salesforce as a partner

  GitHub secret scanning now detects new secret types from Salesforce, Anthropic, and Cloudsmith. New Anthropic secret types are blocked...

• 2026-10-14 P3 Dev tools Generally available AI platforms & solutionsAI security GitHub
  GitHub lets admins enforce latest managed settings on Copilot clients and adds AI Scan metrics dashboard

  Enterprise admins can now force Copilot clients to fetch the latest managed settings from the server at every startup instead of using...