AIWHYS

Technology

code scanning

2 synchronized stories carry this tag.

ReliabilityShipped

CodeQL 2.27.2 expands C++, Go, Rust and JavaScript analysis

GitHub released CodeQL 2.27.2 with C++ regex parsing and SQL-injection sink models, improved Go websocket routing, and Rust and JavaScript analysis changes. GitHub code scanning receives it automatically; manual installations and older GitHub Enterprise Server instances require an upgrade path.

Why it matters: The update changes both detection coverage and query behavior in a security layer used to review AI-generated and human-written code. A Go control-flow-graph change can also affect custom queries, so an automatic engine update is not operationally invisible.

Read storyOriginal source · github.blog
Agents & toolsShipped

GitHub makes agentic code-scanning autofix generally available

GitHub moved Agentic Autofix to general availability for eligible Enterprise Cloud customers. Copilot explores relevant files, proposes a fix, reruns CodeQL and opens a draft pull request; teams can assign up to 25 default-branch alerts into one remediation pull request.

Why it matters: The preview has become an operational remediation workflow, not only a suggestion generator. Re-running CodeQL provides a useful closure check, while repository-wide edits, batch assignment and persistent memory still demand human diff review and scoped…

Read storyOriginal source · github.blog