Tag

CodeQL

4 articles

Latest in CodeQL

GitHub Brings AI Security Scanning to Pull Requests CodeQL Can’t Cover

GitHub’s AI Scan brings AI-powered vulnerability detection to pull requests involving languages, scripts and infrastructure files beyond CodeQL’s existing coverage. Paired with the general availability of agentic autofix, the rele…

Oct 20, 20263 min

All CodeQL Articles

Showing 1–4 of 4

Sep28

Blogs

GitHub’s Security Autofix Agent Now Remembers What It Fixed

GitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, r…

3 min

Sep11

Blogs

GitHub Widens the Door on Advanced Security Trials

GitHub raised its self-serve Advanced Security trial cap from 100 to 300 licenses, letting more mid-size Enterprise Cloud orgs test for free.

3 min

Aug04

Blogs

Shift Left Security: 4 Automated Security Gates in GitHub Actions

Learn how to add four automated security gates to GitHub Actions using npm audit, Snyk, Trivy, CodeQL and OWASP ZAP—without an enterprise licence.

3 min

Tag

CodeQL

4 articles

Latest in CodeQL

GitHub Brings AI Security Scanning to Pull Requests CodeQL Can’t Cover

Oct 20, 20263 min

All CodeQL Articles

Showing 1–4 of 4

Sep28

Blogs

GitHub’s Security Autofix Agent Now Remembers What It Fixed

GitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, r…

3 min

Sep11

Blogs

GitHub Widens the Door on Advanced Security Trials

GitHub raised its self-serve Advanced Security trial cap from 100 to 300 licenses, letting more mid-size Enterprise Cloud orgs test for free.

3 min

Aug04

Blogs

Shift Left Security: 4 Automated Security Gates in GitHub Actions

Learn how to add four automated security gates to GitHub Actions using npm audit, Snyk, Trivy, CodeQL and OWASP ZAP—without an enterprise licence.

3 min