GitHub adds AI-powered bug detection to expand security coverage

GitHub is introducing AI-based detections into its Code Security suite to expand vulnerability coverage beyond CodeQL, targeting additional languages and ecosystems (Shell/Bash, Dockerfiles, Terraform, PHP, etc.). The hybrid approach will pair CodeQL's semantic analysis with AI findings, integrate with pull requests and Copilot Autofix for remediation, and is expected to enter public preview in early Q2 2026; the article is a product announcement rather than a report of an incident.