DEVOPSdigest

GitHub announced the general availability of Copilot Autofix in GitHub Advanced Security (GHAS).

With Copilot Autofix, GitHub is moving software security toward a future where developers can not only fundamentally prevent vulnerabilities from ever being introduced into code but also eradicate vulnerabilities in all existing software – none of which is scalable as a function of humans but is enabled with the help of AI.

Copilot Autofix finds vulnerabilities in code, explains why they matter, and offers code suggestions that help developers fix new and existing vulnerabilities.

Highlights of what's new:

- Speeds time to remediation: Copilot Autofix has been shown to fix vulnerabilities in new code more than three times faster than a manual fix, and customers including Optum and Otto Group estimate saving up to thousands of hours a month that would've otherwise been spent on remediation.

- Burns through security debt: Software vulnerabilities continue to be a leading cause of costly breaches, and as we know far too well, can live dormant forever. Copilot Autofix is now also designed to help developers solve for existing vulnerabilities with more speed and confidence.

- Available for open source for free: Open source is the backbone of all modern day technology. Knowing its pivotal role in the software ecosystem, GitHub is also making Copilot Autofix in the pull request free for open source developers.

With this update, GitHub is betting big on AI not just bringing more automation to security, but adding a security-specialized AI agent that works alongside human developers.