GitHub Introduces Copilot Autofix for Code Scanning Alerts

GitHub has launched a public preview of Copilot Autofix, a feature designed to automatically generate fixes for code scanning alerts in repositories. This tool utilizes large language models, specifically GPT-5.3-Codex, to provide targeted recommendations for addressing vulnerabilities. Users can assign alerts to Copilot, which will initiate an agent session to explore the codebase, generate fixes, and validate them before opening a pull request. The feature is available for both public and private repositories, although it requires specific permissions. Copilot Autofix is intended to help developers remediate vulnerabilities without needing a GitHub Copilot subscription. However, the effectiveness of the autofix is not guaranteed, and it operates on a best-effort basis. Administrators can manage the availability of this feature at different levels within their organizations.

Key Points: • Copilot Autofix is now in public preview, enabling automatic fixes for code scanning alerts. • The tool uses GPT-5.3-Codex to generate targeted recommendations for vulnerability remediation. • Users can assign alerts to Copilot, which validates fixes and opens pull requests automatically.