# GitHub Copilot app gets a security extension for code scanning alerts

> Original title: Security extension for the GitHub Copilot app

- Source: GitHub Copilot Changelog
- Published: 2026-10-28T15:45:00.000Z
- Bad Influence: https://badinfluence.news/items/im84kdy6w9u0r0sn0djkmkp5u
- Original: https://github.blog/changelog/2026-10-28-security-extension-for-the-github-copilot-app

## Summary

GitHub's new security extension for the GitHub Copilot app, now in public preview, lets developers browse code scanning alerts, ask Copilot to explain or fix them, and run /security-review on local changes without leaving the app. Copilot makes fixes only in the local working copy and does not commit or push them. The extension is available on github.com and GitHub Enterprise Cloud with data residency, but not GitHub Enterprise Server.