What happened
On October 15, 2026, GitHub said its AI Scan feature for pull requests had moved to general release. Working alongside CodeQL, it looks for security flaws in the code changes within a pull request. When first released, it covered public repos belonging to either organizations or individual user accounts. Private and internal repos owned by organizations needed a GitHub Code Security or GitHub Advanced Security plan, and no Copilot license was necessary.
Why it matters
Teams already using code scanning on GitHub can run AI Scan against pull requests. Its results are advisory: they neither fail the code scanning check nor stop merges through ruleset requirements. The tool also skips pull requests opened from forks and those generated by Dependabot.