We’re releasing various improvements to security campaigns to help security teams and developers collaborate more effectively to resolve security debt with the help of Copilot Autofix.
Security campaigns with Copilot Autofix were released in public preview at GitHub Universe.
Available as part of GitHub Advanced Security, security campaigns help you rapidly reduce your backlog of application security debt. With security campaigns, you can make sure your developers focus on the most important security alerts across your portfolio. Copilot Autofix also automatically generates contextual explanations and suggests fixes for alerts in a campaign.
Today we are announcing multiple improvements based on the customer feedback we have received during the security campaigns public preview:
- The repository limit for security campaigns has increased from 100 to 1000, making it easier to create campaigns from more of your critical repositories.
- Multiple users or teams can now be specified as campaign managers, giving application security teams greater flexibility in assigning responsibility for monitoring campaign progress and collaborating with developers on fixing alerts.
- We’ve added a new contact link field in the security campaigns user interface to facilitate better communication between security teams and developers during campaigns.
- Email notifications are now consolidated when security campaigns are created or closed. Developers watching multiple repositories included in the same campaign will receive a single email including details of all relevant repositories rather than one email per repository.
- Security campaigns are available for users of GitHub Advanced Security on GitHub Enterprise Cloud.
For more information about security campaigns, see About security campaigns in the GitHub documentation. If you have any feedback on security campaigns, join the discussion in the GitHub Community.