AIWHYS

Products

GitHub code scanning

2 synchronized stories carry this tag.

ReliabilityShipped

CodeQL 2.27.2 expands C++, Go, Rust and JavaScript analysis

GitHub released CodeQL 2.27.2 with C++ regex parsing and SQL-injection sink models, improved Go websocket routing, and Rust and JavaScript analysis changes. GitHub code scanning receives it automatically; manual installations and older GitHub Enterprise Server instances require an upgrade path.

Why it matters: The update changes both detection coverage and query behavior in a security layer used to review AI-generated and human-written code. A Go control-flow-graph change can also affect custom queries, so an automatic engine update is not operationally invisible.

Read storyOriginal source · github.blog
ReliabilityShipped

GitHub makes AI Scan for pull requests generally available

GitHub moved AI Scan for pull requests to general availability. It runs alongside CodeQL on eligible pull requests and covers additional languages and formats, but its findings remain advisory: they cannot fail the code-scanning check or block merges, and scans skip fork and Dependabot pull requests.

Why it matters: The availability boundary is broader and production-ready, but the enforcement boundary is deliberately weak. Security teams can add model-based review across more stacks without mistaking the result for a merge gate or complete static analysis.

Read storyOriginal source · github.blog