github / github/roadmap

Agentic autofix generation for code scanning alerts [Private Preview]

Open
#1,206 1 comment 0 reactions 0 assignees View on GitHub
cloud GitHub Advanced Security (GHAS) Preview Shipped
Dominant language
No language data
Stars
8.9k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

### Value Prop

Users can now assign code scanning alerts—individually or within a security campaign—to an agentic version of Autofix that autonomously creates pull requests to fix the problem. Unlike the current Autofix, this agentic version uses tool calling and advanced agent behaviors to iteratively test, validate, and refine fixes before presenting them to developers.

This release covers the initial public preview, focused on campaigns and individual alerts. A separate GA release will follow.

### Expected Outcome

- Increased rate of security alert remediation across customer organizations
- Higher Autofix acceptance rates compared to current non-agentic version
- Reduced time from alert creation to merged fix
- Decreased manual effort spent on security debt reduction initiatives

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.