--- title: GitHub expands application security coverage with... description: GitHub is introducing AI-powered security detections in GitHub Code Security to expand vulnerability coverage beyond what CodeQL's static analysis supports... canonical: https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitHub expands application security coverage with AI‑powered detections | daily.dev og:description: GitHub is introducing AI-powered security detections in GitHub Code Security to expand vulnerability coverage beyond what CodeQL's static analysis supports... og:url: https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer og:image: https://api.daily.dev/og/posts/eAlOX7aER.png og:image:alt: GitHub expands application security coverage with AI‑powered detections og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub expands application security coverage with AI‑powered detections **[GitHub Blog](https://daily.dev/sources/ghblog)** · 4 min read · 0 upvotes · 0 comments ## Summary GitHub is introducing AI-powered security detections in GitHub Code Security to expand vulnerability coverage beyond what CodeQL's static analysis supports alone. The new hybrid detection model adds coverage for Shell/Bash, Dockerfiles, Terraform (HCL), and PHP, surfacing findings directly in pull requests. In internal testing, the system processed over 170,000 findings in 30 days with 80%+ positive developer feedback. Copilot Autofix complements detection by suggesting fixes, having resolved over 460,000 security alerts in 2025 with an average resolution time of 0.66 hours. Public preview is planned for early Q2, with a live demonstration at RSAC. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Code scanning shows AI security detections on pull requests](https://daily.dev/posts/code-scanning-shows-ai-security-detections-on-pull-requests-44lbf2cdk) · GitHub Changelog · 0 upvotes · 0 comments - [Microsoft Brings AI-Powered Vulnerability Remediation to Azure DevOps with Copilot Autofix](https://daily.dev/posts/microsoft-brings-ai-powered-vulnerability-remediation-to-azure-devops-with-copilot-autofix-hrji4wjnb) · InfoQ · 0 upvotes · 0 comments - [How exposed is your code? Find out in minutes—for free](https://daily.dev/posts/how-exposed-is-your-code-find-out-in-minutes-for-free-uh0cpjdxe) · GitHub Blog · 0 upvotes · 0 comments - [More accurate Copilot Autofix usage metrics on security overview](https://daily.dev/posts/more-accurate-copilot-autofix-usage-metrics-on-security-overview-gogd5o7b4) · GitHub Changelog · 0 upvotes · 0 comments --- Tags: [#appsec](https://daily.dev/tags/appsec), [#codeql](https://daily.dev/tags/codeql) [View this post on daily.dev](https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitHub expands application security coverage with AI‑powered detections","url":"https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer"},"datePublished":"2026-03-23T16:04:53.029Z","dateModified":"2026-03-23T16:05:12.420Z","description":"GitHub is introducing AI-powered security detections in GitHub Code Security to expand vulnerability coverage beyond what CodeQL's static analysis supports...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9e84d9e6e14ea71bb99711a99b2decdd?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9e84d9e6e14ea71bb99711a99b2decdd?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Blog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/106cf162b88840808484d4b5429b59b1","url":"https://daily.dev/sources/ghblog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/github-expands-application-security-coverage-with-ai-powered-detections-ealox7aer","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"appsec,codeql","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Blog","item":"https://daily.dev/sources/ghblog"},{"@type":"ListItem","position":3,"name":"GitHub expands application security coverage with AI‑powered detections"}]} ```