Assigning Vulnerabilities to Copilot to “Just Fix It”—GitHub's Agentic Autofix Checks Its Own Work with CodeQL Before Opening a PR
On October 15, GitHub made Agentic Autofix—which automatically remediates code scanning alerts—generally available. The agent explores the codebase to apply fixes, re-runs CodeQL to confirm for itself whether the alert is closed, and only then opens a draft PR. It supports bulk remediation of up to