GitHub's AI Scan reads the files CodeQL skips, but it can't block a merge and a spent budget looks like a clean scan
AI Scan for pull requests went GA on 15 October 2026. It covers Terraform, Dockerfiles and shell, which agents write a lot of. Here's what it does and the three settings to check before you trust it.
6 min read
