GitHub makes Copilot agentic autofix for code scanning alerts generally available

GitHub's changelog of October 15, 2026 says agentic autofix for code scanning alerts is generally available. When an alert is assigned to Copilot, it explores the codebase, proposes a fix, reruns CodeQL to check the alert closes, and opens a draft pull request with a summary and validation steps.

• Use: it replaces the free Generate Fix option with an Assign to Copilot button. Up to 25 alerts can be fixed together in one pull request, and the Update a Code Scanning Alert REST API accepts copilot-swe-agent[bot] as assignee. Only alerts on the default branch are supported.
• Access: GitHub Code Security or Advanced Security customers on GitHub Enterprise Cloud (including data residency). An enterprise administrator must enable the new "Agentic autofix" policy, and a Copilot billing method must be set.
• Billing: GitHub says it consumes AI Credits from the Code Security budget plus GitHub Actions minutes.