In order to find vulnerabilities in more languages and frameworks than only CodeQL static analysis, GitHub is implementing AI-based scanning for its Code Security tool.
According to the developer collaboration platform, the action is intended to find security flaws in areas that are challenging to support using only standard static analysis.
While AI detections will offer more comprehensive coverage for Shell/Bash, Dockerfiles, Terraform, PHP, and other ecosystems, CodeQL will continue to offer deep semantic analysis for supported languages.
Early Q2 2026 is when the new hybrid model is anticipated to go into public preview, potentially as early as next month. A collection of application security technologies called GitHub Code Security is included right into GitHub workflows and repositories read more about GitHub adds AI-powered bug detection to expand security coverage.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.