Security extension for the GitHub Copilot app
You can now work through your repository’s GitHub code scanning alerts without leaving the GitHub Copilot app. The new GitHub security extension, now in public preview, lets you find the…
You can now work through your repository’s GitHub code scanning alerts without leaving the GitHub Copilot app. The new GitHub security extension, now in public preview, lets you find the…
Agents should understand more than your codebase—they should understand how your team works. Your preferences, repository conventions, skills, and custom instructions guide how changes should be made, while code in…
Shared Copilot Automations are rolling out, enabling teams to build and maintain AI-powered workflows together. With Copilot Automations, you can combine prompts, triggers, and tools to design workflows around the…
You can now generate and edit images using natural language in GitHub Copilot. When you ask for an image, your selected reasoning model calls a dedicated image-generation tool powered by…
GitHub Agentic Workflows, an open source project from GitHub Next, is now generally available. With agentic workflows, you can automate reasoning-based tasks like issue triage, CI failure analysis, documentation updates,…
Dependabot alerts can add up faster than a team can work through them. A vulnerable package in your dependency tree doesn’t always mean your code uses the vulnerable part of…
We’re open sourcing Replica, an AI-powered prototyping tool created by GitHub Design that helps anyone on your product team turn ideas into interactive prototypes using your own design system. Music:…
Copilot is now one connected experience in the cloud. Start a cloud task wherever you are, on github.com, GitHub Mobile, the Copilot CLI, the Copilot app, VS Code, or right…
You can now use AI Scan to find vulnerabilities across your whole repository, not just in pull request changes. It covers languages and frameworks that CodeQL doesn’t support and finds…
Code scanning can now detect AI applications and agent vulnerabilities, including indirect prompt injection (XPIA), sensitive information disclosure, excessive agency, and other AI-specific risks as coverage expands. Scans automatically run…
GitHub public monitoring alerts enterprises when their secrets are publicly exposed anywhere on GitHub, helping teams respond quickly to leaks wherever they happen. It’s now generally available to enterprises with…
Issue artifacts attach agent-generated outputs and other important context directly to an issue. By keeping plans, research, links, and visualizations alongside the work, they give coding agents richer context and…
Pull request limits help maintainers manage the volume of incoming contributions from people without write access. You can now add exemption rules to decide which contributors can open pull requests…
The context your agent needs is often outside your repository: a thread in Slack, a design in Figma, an error in Sentry. Until now, giving Copilot that context meant finding…
With Copilot Automations, you can combine prompts, triggers, and tools to design workflows around the way your team works. Triggers define when your automation runs (e.g., “every day at 9am”…
Copilot Automations can now learn from their outcomes and propose improvements to themselves, helping them produce better results over time. It’s easy to create an automation, but harder to build…
Copilot Automations in Visual Studio Code can now run in the cloud. You can create and manage cloud automations from the Agents window without leaving your editor. With Copilot Automations,…
With Agent Merge, Copilot watches your pull request and automatically fixes blockers, (e.g., failing Actions workflows and merge conflicts) that stand in the way of getting your pull request merged.…
GitHub Copilot code review now offers its most thorough review and can approve your pull request when it’s ready to merge. The new Max review effort level is now in…
You can now use GitHub Actions workflow dependency lockfiles in general availability on GitHub Enterprise Cloud, GitHub Enterprise Cloud with data residency, Team, and Free plans. Lockfiles let you keep…
Update (October 28, 2026): The Moderate role feature is not yet available. The Moderate role will be available in the coming weeks. We’ve introduced a new Moderate role that allows…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the key announcements shaping the future of software development.