Updated just now

Related News

GitHub AI Scan is now generally available — but its findings cannot block merges

Oct 16, 2026

GitHub AI Scan is now generally available — but its findings cannot block merges

GitHub’s AI Scan can find pull-request vulnerabilities beyond CodeQL’s current language coverage. Its alerts are advisory, skip forks and Dependabot, and consume Code Security AI Credits.

GitHubAI Scancode scanning
GitHub now blocks Anthropic API keys at push by default

Oct 14, 2026

GitHub now blocks Anthropic API keys at push by default

GitHub Secret Scanning added Anthropic service and user API-key patterns, with push protection enabled by default. The same release adds Cloudsmith detection and makes Salesforce a secret-scanning partner.

GitHubAnthropicsecret scanning
GitHub adds AI Scan findings and autofix metrics to security overview

Oct 13, 2026

GitHub adds AI Scan findings and autofix metrics to security overview

GitHub security overview now separates AI Scan from CodeQL and reports findings, remediation, repository trends and autofix use. The public preview helps rollout decisions, but the dashboard measures workflow activity rather than vulnerability prevention.

GitHubAI Scancode scanning