Agentic autofix for code scanning alerts is now generally available

GitHub says agentic autofix for code scanning alerts is now generally available to GitHub Code Security and GitHub Advanced Security customers on GitHub Enterprise Cloud, including data residency.

When a developer assigns an alert to Copilot, it explores the codebase, proposes a fix, reruns CodeQL to validate it, and opens a draft pull request for review.

Enterprise administrators must enable the "Agentic autofix" policy in Advanced Security policies, and the feature consumes AI Credits from the Code Security budget and GitHub Actions minutes.