What changed

GitHub made its Slack and Microsoft Teams agent generally available for investigating bugs, creating issues, implementing changes and opening pull requests from a conversation. Teams adds a Canvas for reviewing plans, diffs and previews, and created issues and PRs now record the originating conversation and username.

Why it matters

Moving coding authority into chat reduces handoff friction but also places repository selection, identity, prompt context and approval inside another collaboration surface. Explicit attribution improves auditability without replacing repository controls or code review.

What to do

Start in a sandbox repository, restrict the app to one channel and least-privilege installation, request a documentation-only pull request, then verify repository selection, chat attribution, branch protection, secret handling and uninstall recovery.

Caveat

GitHub labels the integration generally available, but tenant policies, app permissions and plan eligibility still apply. Conversation attribution does not prove who approved a change, and chat content can expose confidential context to connected services.