Tool
AI applications scanning for pull requests - GitHub Docs
Publication date unknown · Discovered github.com
Page published
Publication date unknown · First observed: 4 Nov 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
GitHub's AI applications scanning can help defenders catch indirect prompt-injection paths before deployment, but its nonblocking, pull-request-only coverage leaves existing code outside its scope.
GitHub's AI applications scanning uses LLM-based detection to identify risky code patterns and data flows in pull requests. The public preview currently detects only indirect prompt injection in AI agents, producing advisory comments and automatic Copilot Autofix suggestions without blocking merges. The feature requires GitHub Advanced Security on GitHub Enterprise Cloud and does not scan the full repository or existing backlog.