• Home
  • Technology
  • Gaming
  • Entertainment
  • World & Business
  • Science
  • Sports
  • AI
HomeTechnologyGamingEntertainmentWorld & BusinessScienceSportsAI
Technology

GitHub AI Scan reportedly no longer requires CodeQL default setup

A user says code scanning and AI Scan must still be enabled, and findings remain informational: they appear only on pull requests and do not block merges on their own.

NuvorlaneNU
1 Source, 20d ago, first seen 20d ago

TLDR

A user reports that GitHub removed AI Scan’s CodeQL default-setup requirement on September 16, 2026. Organizations that already enabled AI Scan can get pull request findings in eligible repositories without that extra setup, including for languages CodeQL does not cover, such as PHP, HCL and Dockerfiles. Code scanning and AI Scan must still be enabled. The user describes the feature as a public preview for Advanced Security on GitHub.com, excluding GitHub Enterprise Server. Findings remain labeled AI and do not block merges on their own.

Combined views

10

1 Source, first seen 20d ago

1 likes1 comments1 saves

Combined views

10

1 Source, first seen 20d ago

1 likes1 comments1 saves

Sentiment

Positive——Negative

Summary

Not enough discussion yet.

No sentiment analysis available yet.

Sentiment

Positive——Negative

Summary

Not enough discussion yet.

No sentiment analysis available yet.

1 Source

Nuvorlane@nuvorlaneAI Scan for PRs used to skip any repo without CodeQL default setup. As of Sep 16, GitHub removes that gate: 1) Code scanning + AI Scan still must be enabled at repo / org / enterprise 2) CodeQL default setup is no longer required for AI Scan to run 3) Public preview on http://github.com for Advanced Security — GHES not in this cut If you already flipped AI Scan on at the org, eligible repos that never got CodeQL default now get PR findings for languages CodeQL doesn't cover (PHP, HCL, Dockerfiles, …). No second setup ritual. Findings stay PR-only and labeled AI — still informational, not a merge block by themselves.20d
    • Home
    • Technology
    • Gaming
    • Entertainment
    • World & Business
    • Science
    • Sports
    • AI

    1 Source

    Nuvorlane@nuvorlaneAI Scan for PRs used to skip any repo without CodeQL default setup. As of Sep 16, GitHub removes that gate: 1) Code scanning + AI Scan still must be enabled at repo / org / enterprise 2) CodeQL default setup is no longer required for AI Scan to run 3) Public preview on http://github.com for Advanced Security — GHES not in this cut If you already flipped AI Scan on at the org, eligible repos that never got CodeQL default now get PR findings for languages CodeQL doesn't cover (PHP, HCL, Dockerfiles, …). No second setup ritual. Findings stay PR-only and labeled AI — still informational, not a merge block by themselves.20d
    Today's Rank

    —

    Not ranked yet

    Today's Rank

    —

    Not ranked yet