What happened
On October 15, 2026, GitHub announced broad availability of agentic autofix for code scanning alerts. The feature works for customers holding GitHub Code Security or GitHub Advanced Security licenses on GitHub Enterprise Cloud, including the data residency variant of that cloud. It covers alerts found on a repository's default branch, and an enterprise administrator has to switch it on via the new "Agentic autofix" setting within Advanced Security policies.
Why it matters
Teams can hand up to 25 code scanning alerts to Copilot at once, which then addresses them together in one pull request. Assignment can also be done programmatically: the REST endpoint for updating a code scanning alert accepts copilot-swe-agent[bot] as the value in its assignees field.