GitHub announced agentic autofix for code scanning alerts in public preview on July 10, 2026.
Primary source: GitHub Changelog, July 10, 2026.
The wrong metric is “percentage of alerts with a generated patch.” Generation is only the first transition:
alert -> candidate -> build -> tests -> security oracle
-> human review -> merge -> post-merge observation
