GitHub makes AI Scan for pull requests generally available, covering languages CodeQL does not

GitHub says AI Scan for pull requests is generally available as of Oct. 15. It finds vulnerabilities in PR changes in languages and frameworks CodeQL does not cover, such as PHP, Bash, Terraform and Dockerfiles. Private repos need GitHub Code Security or Advanced Security, no Copilot license is required, and usage draws on Code Security AI Credits.

HEAT

OUTLETS

1

FIRST SEEN

Oct 17, 2026, 08:05 ET

LAST SIGNAL

10h ago