Code scanning AI Scan no longer requires CodeQL default setup
By Steven Van ·
AI Scan for pull requests now works without CodeQL default setup, in public preview for GitHub Advanced Security customers on github.com.
AI Scan for pull requests can now run on repositories without CodeQL default setup enabled. Previously, AI Scan only found vulnerabilities on repositories where CodeQL default setup was already configured; now it runs independently of CodeQL's status, so organizations that have already turned on AI Scan will see it cover more of their eligible repositories.
Code scanning and AI Scan still need to be enabled at the repository, organization, or enterprise level, and there is no new setup step required. The change is in public preview for organization-owned and personal repositories on github.com for GitHub Advanced Security customers; GitHub Enterprise Server is not supported. See the full announcement for details.
