01 What happened
As of October 28, 2026, GitHub Copilot’s security extension is in public preview, enabling developers to browse and address code scanning alerts directly within the app.
02 Key details
- The GitHub Copilot security extension is in public preview, allowing developers to view and fix code scanning alerts without leaving the app.
- Alerts are listed by severity; users can select one or more and ask Copilot to Explain or Fix them. Fixes remain local and are not committed automatically.
- The `/security-review` command checks current changes proactively; the extension notifies when code has changed since the last review.
- Available for any Copilot plan on github.com and GitHub Enterprise Cloud; GitHub Enterprise Server is not supported.
03 Why it matters
The extension reduces context switching by consolidating alert management and remediation in one environment, and uses Copilot AI assisting in analyzing and addressing vulnerabilities.
04 Who it matters to
Software developers, information security specialists, AI product developers, technical directors and voice interface developers.
Original source