GitHub security extension
The GitHub security extension brings repository code scanning alerts into the GitHub Copilot app. It lets users browse and filter alerts, ask Copilot to explain or fix them, and run a security review on current changes.
What it does
Developers can review and address code scanning alerts and inspect potential security issues in local changes before opening a pull request.
- Availability
- Public preview on github.com and GitHub Enterprise Cloud with data residency
- Pricing model
- Explain, Fix, and /security-review consume AI credits; browsing and dismissing alerts do not use AI
- Deployment
- GitHub Enterprise Server isn't supported
- Privacy
- Not established
- Licence
- Not established
Capability
Modality
Access
Deployment
Pricing
Target user
Evidence
6 claims- The security extension is in public preview on github.com and GitHub Enterprise Cloud with data residency. [1]
The security extension is in public preview on github.com and GitHub Enterprise Cloud with data residency.
GitHub. Quoted text is outside CC BY 4.0 and keeps its original rights. - The extension shows open code scanning alerts for repositories where code scanning is enabled and the user has permission to view the alerts. [1]
With code scanning: You can see, fix, and dismiss existing alerts for repositories where code scanning is enabled and you have permission to view the alerts.
GitHub. Quoted text is outside CC BY 4.0 and keeps its original rights. - Users can select alerts and ask Copilot to Explain or Fix them. [1]
Select one or more alerts and ask Copilot to Explain or Fix them.
GitHub. Quoted text is outside CC BY 4.0 and keeps its original rights. - Copilot makes fixes only in the local working copy and doesn't commit or push anything. [1]
Copilot only makes fixes in your local working copy and doesn't commit or push anything.
GitHub. Quoted text is outside CC BY 4.0 and keeps its original rights. - Explain, Fix, and /security-review use the model selected in the app and consume AI credits. [1]
The Explain , Fix , and /security-review actions use the model you've selected in the app and consume AI credits in the same way as any other prompt.
GitHub. Quoted text is outside CC BY 4.0 and keeps its original rights. - GitHub Enterprise Server isn't supported. [1]
GitHub Enterprise Server isn't supported.
GitHub. Quoted text is outside CC BY 4.0 and keeps its original rights.
Sources
1
1
GitHubOwner-controlled
https://github.blog/changelog/2026-10-28-security-extension-for-the-github-copilot-app
Retrieved 2026-10-29 00:29 UTC
Verified
Versions
1| Version | Effective | Change | Changed fields | State |
|---|---|---|---|---|
| 1 | 2026-10-29 00:29 UTC | publication | None | Current |
In briefs
1- One model reads documents; another checks OCR results Daily brief 2026-10-29
Original catalog content is licensed under CC BY 4.0, attributed to wowsuchai. Source quotations and linked content keep their original rights.