Code scanning AI Scan no longer requires CodeQL default setup
AI Scan for pull requests can now find security vulnerabilities without requiring CodeQL default setup to be enabled on a repository, expanding its accessibility for security scanning workflows.
You can now use AI Scan for pull requests to find security vulnerabilities, even when CodeQL default setup isn’t enabled on a repository. Previously, AI Scan for pull requests only ran on repositories where CodeQL default setup was configured.
What’s changed
Code scanning and AI Scan for pull requests must still be enabled at the repository, organization, or enterprise level, if the organization belongs to an enterprise. The same permission hierarchy still applies. There’s no new setup step. If you’ve already enabled GitHub code scanning’s AI Scan for your organization, it now runs more broadly across your eligible repositories, regardless of whether CodeQL default setup is configured.
This change is now in public preview for organization-owned and personal repositories on github.com for GitHub Advanced Security customers. GitHub Enterprise Server is not supported for this release.
To learn more, see our docs about AI-powered security detections.
Join the discussion and leave feedback on GitHub Community.
The post Code scanning AI Scan no longer requires CodeQL default setup appeared first on The GitHub Blog.
Source: original entry ↗
More from GitHub
Follow GitHub to get its new changes in your feed and email digest.
New controls and chat improvements in Copilot for JetBrains
GitHub Copilot for JetBrains now offers more control over default models and MCP server configuration, improved diagnostics handling, and enhanced chat navigation and account controls.
GitHub Copilot weekly releases — October 5
Weekly updates to GitHub Copilot improve cross-account and cross-environment usability while enhancing control over agent access and work management.
CodeQL 2.27.2 improves C++, Go, Rust, and JavaScript analysis
CodeQL 2.27.2 adds a C++ regular-expression parser and improves static analysis capabilities across C++, Go, Rust, and JavaScript languages for better code scanning detection.