Skip to content
AI Radar by Wagner Solution
CS
Menu
worth noting Coding

Security extension for the GitHub Copilot app is in public preview

only one source so far

The new GitHub security extension displays open code scanning alerts in the GitHub Copilot app and helps explain or fix them. AI actions consume credits; GitHub Enterprise Server is not supported.

GitHub has made GitHub security extension available in public preview. It displays open code scanning alerts for the relevant repository in the GitHub Copilot app. Users can request an explanation of a finding or help fixing it, and review local changes using the /security-review command.

The Explain and Fix actions and the /security-review command use the model selected in the app and consume AI credits just like other prompts. Viewing and dismissing alerts do not use AI. Configured tool permissions apply when working with alerts in chat.

The public preview supports github.com and GitHub Enterprise Cloud with data residency, meaning a designated location for data. GitHub Enterprise Server is not supported. On the Copilot Business and Copilot Enterprise plans, an administrator must enable the policy for the GitHub Copilot app; administrators can also use centralized settings to control which plugins developers may install.

What changed

Why it matters

Developers can review a security finding and request help addressing it within a single app. When integrating it into an organizational workflow, it is important to distinguish viewing alerts from AI actions that consume credits, and to verify support for the environment in use.

Two audiences, two different impacts

What this means

01

For individuals

When addressing code scanning alerts, you can get an explanation of a finding and help fixing it directly in the GitHub Copilot app, without switching between the alert on the web and your editor.

What to do After installing the extension, open the security panel in a session for a repository with code scanning enabled and review the open alerts.
More practical updates →
02

For a business

Integrating the extension into security reviews requires administrator approval on the Copilot Business and Copilot Enterprise plans. Explanations, suggested fixes and reviews of local changes also count toward AI credit usage.

Risks and compliance
What to decide Before making it available to your team, verify support for your organization's environment and check the policy settings for the GitHub Copilot app and permitted plugins.
More business impacts →
code scanning GitHub Copilot GitHub security extension

Check the original

Event sources

only one source so far · 1 publisher, 0 independent. We count feeds from the same owner only once.

1
GitHub Copilot Changelog primary source · first detected Security extension for the GitHub Copilot app