GitHub launches security campaigns with tools like Copilot Autofix to reduce security debt
GitHub has announced the general availability of security campaigns for all GitHub Advanced Security and GitHub Code Security customers. This new feature aims to help organizations manage security debt and risk by enhancing collaboration between developers and security teams. GitHub has integrated tools like Copilot Autofix directly into pull requests, allowing teams to address security issues up to 60% faster, significantly reducing Mean Time to Remediation (MTTR) compared to manual methods.
Autofix aids in identifying vulnerabilities before they reach production, allowing developers to focus more on coding rather than bug fixes. Security campaigns streamline the vulnerability remediation process by bringing together security experts and developers within the workflow. Copilot Autofix can generate code suggestions for up to 1,000 code scanning alerts simultaneously, assisting security teams with triage and prioritization while developers resolve issues efficiently.
Campaigns are supplemented with notifications to ensure developers are aware of their responsibilities regarding alerts. Each campaign has a manager to oversee progress and assist developers, while security managers have an organization-level view on GitHub to track and collaborate as necessary. This setup is designed to foster stronger collaboration between developers and security teams, enhancing the overall security posture of organizations.
- AI Coding Assistant
- Freemium • Proprietary
Related news
External links
- Found means fixed: Reduce security debt at scale with GitHub security campaignsGitHub • Official source
- GitHub Announces General Availability of Security CampaignsSecurityWeek
- GitHub Advanced Security now offers security campaignsInfoWorld
- GitHub introduces security campaigns to help developers reduce security debtSD Times
- GitHub’s New Security Campaigns Fix Security Debt With AIThe New Stack
Comments
Insane. I just wish this A.I. bubble would pop already... It's exhausting seeing A.I. everywhere. It's like a parasite that leeches off everything it can find.
Well, fixing bugs is part of coding. It's like saying that a pianist could spend less time training and more playing. Or a writer less reading and more writing. And code only works once it has been tested, and so been fixed. Gotcha GitHub! you just try to sell a solution to VPs and not to devs. But let's say its Microsoft's fault, trying to sell AI at any cost.