vibehacker
News
Visual Studio Magazine ·

Copilot Autofix in Azure DevOps now fixes vulnerable dependencies and third-party scanner alerts

GitHub Advanced Security for Azure DevOps now uses the Copilot coding agent to propose pull-request fixes for dependency vulnerabilities and third-party scanning findings, following repo instructions and skills in .github or .agents. It also adds EPSS exploit-likelihood percentiles and dev-versus-runtime dependency labels to triage, and you still review and merge every fix yourself.

More news

View all

Spotted something we missed? Start a thread.