AI News & Tools
Products

GitHub removes the CodeQL default-setup requirement for AI Scan

GitHub says AI Scan can now check pull requests for security vulnerabilities even when a repository has not enabled CodeQL default setup. The change removes that prerequisite; the notice does not establish scanning accuracy or describe other eligibility requirements.

·Primary sources shown for every item

Key points

  1. AI Scan checks pull requests for security vulnerabilities.
  2. Previously, using AI Scan for pull requests required CodeQL default setup.
  3. GitHub now allows its use on repositories where that setup is not enabled.

Why it matters

Repository maintainers can evaluate AI Scan without first enabling CodeQL default setup. That changes the setup decision for teams seeking pull-request security checks, while detection quality remains a separate question.

What to watch

Check GitHub's eligibility and configuration guidance for remaining prerequisites, then look for measured detection and false-positive results on representative pull requests.

Sources