GitHub’s Copilot now fixes code scanning alerts and reruns CodeQL before it asks you
From Mexico: GitHub made agentic autofix for code scanning alerts GA today. Copilot explores the code, proposes a fix, reruns CodeQL to confirm it, then opens a draft PR. Here’s how it works, what it costs, and where it stops.