GitHub’s Agentic Autofix can propose and retest security patches
GitHub has made Agentic Autofix generally available to eligible Enterprise Cloud customers, generating draft fixes and rerunning CodeQL before human review.
Agentic Autofix can investigate surrounding code, propose a patch, rerun CodeQL and revise its attempt before opening a draft pull request.
GitHub’s October 15 release makes it available to Code Security or Advanced Security customers on Enterprise Cloud, including data-residency deployments. [1]
Administrators must enable it, with a Copilot billing method in place. A run can address up to 25 eligible alerts from the default branch; alerts confined to another branch or a pull request do not qualify. Usage consumes Code Security AI credits and Actions minutes. Enabling it also replaces the free Generate Fix option. [1]
The useful next step is a small, reviewable trial on known alerts. A proposed patch and a passing scan still require a maintainer’s assessment of behavior and security. [1]
Take it further
Check eligibility before enabling For eligible GitHub Enterprise Cloud administrators. Review AI-credit and Actions billing before a small trial on known alerts.
Sources & details 1 sources
Discuss in your voice app
Take the reporting, visual explanations and original sources into a conversation. Copy the brief, paste it into your preferred assistant, then start its voice mode.
Paste the brief into your voice app to discuss this reporting.Reporting sources
- GitHub · General availability and eligibility
Original October 15 changelog, including administrator controls, branch eligibility, draft PRs and billing consequences. No efficacy experiment was performed.
Images & figures
AI-generated editorial illustration of a patch being tested before a human decision; not documentary evidence or a measured diagram.
Euangelion · AI-generated editorial illustration · Source · Usage terms