AI Scan for pull request APIs in public preview
New org and repo REST endpoints let admins enable or disable AI Scan for pull requests across repositories without using the UI.
Admins can now turn GitHub code scanning's AI Scan for pull requests on or off through REST API endpoints instead of the UI. AI Scan uses an AI-based engine to flag security issues in pull requests for languages and frameworks CodeQL doesn't cover, including PHP, Shell/Bash, Terraform (HCL) and Dockerfiles.
The new organization and repository endpoints let teams read and update AI Scan's enabled status programmatically, so it can be rolled out across selected repositories without configuring each one by hand. Organization-level settings control whether scans can run at all across the org; repository settings can only opt individual repos out, and can't override an organization-level disabled state.
This is a public preview available on github.com for GitHub Advanced Security customers. GitHub Enterprise Server is not supported.
