GitHub AI Scan for pull requests generally available
AI Scan is GA: it complements CodeQL by auto-scanning PR diffs for languages/frameworks CodeQL does not cover (PHP, Shell, Terraform HCL, Dockerfiles, JSP, Blazor, etc.), surfaces advisory findings with explanations and suggested autofix, and consumes Code Security AI Credits without blocking merges.