GitHub launches public preview of repository AI vulnerability scanning
Understand this story
GitHub has released a repository AI vulnerability scanning feature, currently in public preview, and the feature may change. The feature uses a proprietary framework combining multiple models to scan the repository's default branch, supports all languages, and is intended to supplement coverage beyond CodeQL. Scans must be triggered manually on demand, each scan consumes Code Security AI credits, and using this feature does not require a GitHub Copilot license. Scan results enter the existing code scanning alerts list, and existing processes such as assignment, agentic autofix, and security activities can be used.
AI overview based on source reports · Updated 6 hr ago
Coverage timeline
Follow the coverage to explore different perspectives.
- Hacker News AIGitHub AI Vulnerability Scans for Repositories
GitHub's AI Scan for repositories, in public preview, uses a proprietary multi-model harness to find security vulnerabilities on a repository's default branch across all languages, adding findings to the existing code scanning backlog alongside CodeQL alerts. Scans are manually triggered, consume Code Security AI credits, and are limited to 30 minutes and 150,000 AI credits per scan, with availability depending on repository owner and visibility.
Activity for this story
- Current comparable activity
- 9
- Peak comparable activity
- 10Nov 8 09:00
- Change in the past 24 hours
- –
Trends compare the same fully observed participants, which may cover fewer participants than current activity. Move the pointer or tap the chart to inspect hourly activity; use the left and right arrow keys with a keyboard.