GitHub introduces Copilot Autofix, an AI-driven vulnerability remediation tool within GHAS.
GitHub launches Copilot Autofix in manufacturing. GitHub’s Copilot Autofix enables vulnerability analysis in code, clearly articulates the significance of identified issues, and offers actionable suggestions to empower developers to swiftly rectify weaknesses as they arise. Prospects of GitHub Enterprise Cloud subscriptions already have access to Copilot Autofix as part of their package. GitHub has enabled Copilot Autofix as the default setting in GHAS code scanning configurations for a more seamless user experience. As of this September, GitHub’s Copilot Autofix feature is expected to be made available at no additional cost within pull requests for open-source projects.
During the public beta phase, GitHub found that developers leveraging Copilot Autofix were able to resolve code vulnerabilities at a rate more than three times faster when compared to manual efforts, underscoring the transformative potential of AI tools like Copilot Autofix in streamlining and accelerating software development. A new Copilot feature allows developers to generate fixes for numerous types of vulnerabilities, including well-known threats like SQL injection and cross-site scripting, enabling them to dismiss, edit or commit the proposed fixes within their pull requests, according to the company.
