GitHub makes AI Scan for pull requests and agentic autofix for code scanning alerts generally available

In an October 15, 2026 changelog entry, GitHub said code scanning AI Scan for pull requests is generally available; it looks for vulnerabilities in pull request changes for languages and frameworks CodeQL does not currently cover, such as PHP, Shell/Bash, Terraform (HCL), and Dockerfiles. GitHub says AI Scan findings are advisory, do not fail the code scanning check, and cannot block merges, and that a GitHub Copilot license is not required. In a separate October 15 entry, GitHub said agentic autofix for code scanning alerts is generally available for GitHub Code Security and GitHub Advanced Security customers on GitHub Enterprise Cloud: when an alert is assigned to Copilot, it proposes a fix, reruns CodeQL to confirm the alert is closed, and opens a draft pull request for review.12

USASI. (2026, October 17). GitHub makes AI Scan for pull requests and agentic autofix for code scanning alerts generally available. United States of America Superintelligence. https://unitedstatesofamericasuperintelligence.com/news/github-makes-ai-scan-and-agentic-autofix-generally-available/

@misc{usasi_news_github_makes_ai_scan_and_agentic_autofix_generally_available,
  author = {{USASI}},
  title = {GitHub makes AI Scan for pull requests and agentic autofix for code scanning alerts generally available},
  year = {2026},
  month = oct,
  howpublished = {\url{https://unitedstatesofamericasuperintelligence.com/news/github-makes-ai-scan-and-agentic-autofix-generally-available/}},
  note = {United States of America Superintelligence. Last updated 2026-10-17}
}