GitHub broadens AI Scan beyond CodeQL default setup

GitHub says AI Scan for pull requests can now find security vulnerabilities even when CodeQL default setup is not configured. The expansion is in public preview for GitHub Advanced Security customers on github.com; code scanning and AI Scan still have to be enabled, and GitHub Enterprise Server is excluded.

Published 16 Sept 2026, 02:00 · Updated 16 Sept 2026, 17:20