codeql security

The codeql security tag covers Microsoft’s use of CodeQL alerts to identify application vulnerabilities and support remediation in developer workflows. Current coverage focuses on Copilot Autofix for GitHub Advanced Security for Azure DevOps, a limited public preview that uses AI-generated suggestions to address findings in Azure Repos. The process connects CodeQL alerts with Copilot’s coding agent and reviewable pull requests inside Azure DevOps, helping teams move from vulnerability discovery toward fixes. Coverage also emphasizes that generated changes require engineering review rather than serving as an automatic patch, making this relevant to application security, development teams, and organizations using Azure DevOps.