GitHub AI Scan API update enables config management but not automatic scanning

·2026.11.14 19:18

Key point

The new repository_scan setting allows code-based configuration management but requires manual triggering and consumes Code Security AI credits.

GitHub's November 13 public-preview update adds repository_scan to AI Scan settings endpoints, enabling configuration management in code without initiating scans or automatic scanning on push.
Organization settings and enterprise policy take precedence over repository settings; a repository cannot opt in if the organization has disabled the feature.
PATCH requests for pr_scan and repository_scan are atomic; if either requested change is blocked, the entire request fails and neither setting changes.
Actual repository scans remain manually triggered, use Code Security AI credits, and examine the default branch with a time-budgeted agent that does not provide exhaustive coverage.

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.