--- title: Code scanning shows AI security detections on pull requests description: GitHub code scanning now surfaces AI-powered security detections directly on pull requests, extending vulnerability coverage to languages and frameworks not... canonical: https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Code scanning shows AI security detections on pull requests | daily.dev og:description: GitHub code scanning now surfaces AI-powered security detections directly on pull requests, extending vulnerability coverage to languages and frameworks not... og:url: https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk og:image: https://api.daily.dev/og/posts/44lBf2cdk.png og:image:alt: Code scanning shows AI security detections on pull requests og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Code scanning shows AI security detections on pull requests **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 2 min read · 0 upvotes · 0 comments ## Summary GitHub code scanning now surfaces AI-powered security detections directly on pull requests, extending vulnerability coverage to languages and frameworks not supported by CodeQL. Findings appear inline in PRs, labeled with 'AI' to distinguish them from CodeQL results, and are informational only — they won't block merges. The feature is in public preview for GitHub Advanced Security customers, requires CodeQL default setup to be enabled, and consumes AI credits via a GitHub Copilot license. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AI Scan for pull requests generally available](https://daily.dev/posts/ai-scan-for-pull-requests-generally-available-bkcjbuifg) · GitHub Changelog · 0 upvotes · 0 comments - [Code scanning AI Scan no longer requires CodeQL default setup](https://daily.dev/posts/code-scanning-ai-scan-no-longer-requires-codeql-default-setup-pkewbrezx) · GitHub Changelog · 0 upvotes · 0 comments - [GitHub expands application security coverage with AI‑powered detections](https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer) · GitHub Blog · 0 upvotes · 0 comments - [Code scanning AI Scan metrics in security overview](https://daily.dev/posts/code-scanning-ai-scan-metrics-in-security-overview-pp1heeuj4) · GitHub Changelog · 1 upvotes · 0 comments - [GitHub builds an immune system for AI coding agents running on MCP](https://daily.dev/posts/github-builds-an-immune-system-for-ai-coding-agents-running-on-mcp-kbo1bxvmn) · The New Stack · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#codeql](https://daily.dev/tags/codeql) [View this post on daily.dev](https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Code scanning shows AI security detections on pull requests","url":"https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk"},"datePublished":"2026-07-14T19:41:30.649Z","dateModified":"2026-07-14T20:17:23.095Z","description":"GitHub code scanning now surfaces AI-powered security detections directly on pull requests, extending vulnerability coverage to languages and frameworks not...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0a5c68d4d2d7950dd2770dba8942fbd2?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0a5c68d4d2d7950dd2770dba8942fbd2?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,codeql","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"Code scanning shows AI security detections on pull requests"}]} ```