Code scanning AI Scan metrics in security overview
Organization and enterprise administrators can now view metrics showing AI Scan findings generated and resolved in the security overview dashboard, providing visibility into the impact of AI-powered code scanning on pull requests.
Organization and enterprise administrators can now observe the impact of AI Scan for pull requests in security overview. New metrics show how many AI Scan findings were generated, resolved, the remediation rate, which repositories generated findings, trends over the selected reporting period, and how often developers applied autofix suggestions.
The “CodeQL pull requests” page is now named “Code scanning on pull requests” and includes separate CodeQL and AI Scan tabs. The AI Scan tab shows total findings and how many findings include or do not include an autofix suggestion. Metrics from the “CodeQL pull requests” page are now under the CodeQL tab.
These metrics help security teams evaluate the effectiveness of AI Scan across their organization or enterprise, understand developer response, and make informed rollout and investment decisions without reviewing individual pull requests.
This public preview is available on github.com, including GitHub Enterprise Cloud, for customers with GitHub Code Security or GitHub Advanced Security. GitHub Enterprise Server isn’t supported for this release.
Learn more about AI Scan for pull requests and join the AI Scan Community discussion.
The post Code scanning AI Scan metrics in security overview appeared first on The GitHub Blog.
Source: original entry ↗
More from GitHub
Follow GitHub to get its new changes in your feed and email digest.
GitHub App improvements for least privilege and management
GitHub has released improvements to GitHub Apps that enable developers to migrate away from classic personal access tokens, enhance app management capabilities, and request fewer sensitive permissions for better security.
Gemini 4 Argon now available in GitHub Copilot
Google's Gemini 4 Argon frontier model is now generally available in GitHub Copilot, designed for complex coding, agentic, and reasoning tasks to enhance developer productivity.
Audit GitHub Code Quality finding dismissals and reopenings
Users can now review manual dismissals and reopenings of GitHub Code Quality findings in their organization or enterprise audit log, enabling better tracking and governance of code quality decisions.