GitHub security workshop: Add Copilot-assisted remediation and verification

Goal

Teach a complete remediation loop: understand a CodeQL finding, use Copilot as an optional assistant, review the proposed fix, test it, and verify the security alert is resolved.

Scope

Use the alert introduced by the CodeQL lab. Prompts should ask Copilot to explain the weakness and propose a minimal secure change, but learners must validate the output rather than accept it automatically. Include an equivalent manual remediation path for learners without Copilot.

Acceptance criteria

• The exercise provides model-agnostic example prompts for explanation, remediation, and test generation.
• A manual secure implementation is available as a fallback.
• Learners review the change against the CodeQL data flow and secure coding guidance.
• Focused behavior tests cover the vulnerable path and pass after remediation.
• Learners commit the fix to the lab branch and trigger code scanning again.
• The pull request check passes and the original alert is shown as fixed or absent from the updated analysis.
• The exercise states that Copilot output is untrusted until reviewed and tested.
• No specific optional model or transient UI layout is required.

Start from the alert introduced by the existing CodeQL lab and trace the vulnerable path and its focused behavior tests. Add the Copilot-assisted and manual remediation guidance, then commit the fix to the lab branch, rerun code scanning, and confirm the pull request check passes and the original alert is fixed or absent.