Copilot app security review: preview scope and review limits

The news at the time

GitHub introduced the Copilot app /security-review command in public preview for current workstream changes. The announcement described severity- and confidence-scored findings with actionable suggestions, not a proof that every vulnerability would be found.

The command complements code scanning, Dependabot and secret scanning with an on-demand local-change review. At launch, it was available to Copilot Free, Pro, Business and Enterprise users during public preview; the notice does not establish permanent pricing or continued availability.

Follow-up checked during renewal

No additional follow-up fact was established in this renewal. This does not establish that nothing changed.

What to review before applying this

Confirm installed-app support and current plan terms, then validate each suggestion with tests and review. A clean AI review should not be treated as a security certification or a substitute for release controls.

Editorial review suggestions; no hands-on product experiment was performed.