From the source
Agentic autofix for code scanning alerts is now generally available.
It remediates alerts by working across your codebase the way a developer would: it explores relevant files, proposes a fix, and reruns CodeQL to confirm the fix closes the alert before opening a pull request for your review.
Agentic autofix is available to GitHub Code Security and GitHub Advanced Security customers on GitHub Enterprise Cloud, including GitHub Enterprise Cloud with data residency.
When you assign a code scanning alert to Copilot, it: Explores relevant files across your codebase.
Generates a proposed fix.
Validates the fix works by rerunning CodeQL.
Iterates if needed, then opens a draft pull request ready for your review.
The pull request includes a summary of the fix, why it closes the alert, and the validation steps Copilot took to confirm that it works.
When the pull request containing the fix is ready, you can instruct Copilot to make further changes to it by commenting on the pull request or interacting with the session in the Agents tab of your repository.
…
