Catalog Systems Use-case-specific agent harnesses GitHub Copilot Autofix

GitHub Copilot Autofix

https://github.blog/2024-03-20-found-means-fixed-introducing-code-scanning-autofix-powered-by-github-copilot-and-codeql/

GitHub's CodeQL-powered auto-fix for code-scanning alerts; combines static analysis with Copilot model suggestions to generate patches for vulnerabilities. Launched Mar-2024 (public beta), GA Aug-2024 for GitHub Advanced Security customers.

Active · Verified 2026-10-28 · fresh as of 2026-10-28 · 19 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Automated code-vuln-fix agent (CodeQL + Copilot) vendor fix
Tier
T2
Section
Use-case-specific agent harnesses
Created
2024-03 (public beta) vendor fix
Latest release
not applicable — wrong section fix
License
not applicable — not OSS fix
GitHub
not applicable — no GitHub repo fix
Pricing
Included in GitHub Code Security at $30 per active committer/month (Team and Enterprise); free on public repositories repo fix
Funding
not applicable — wrong section fix
Freshness
2026-10-28 fix
Layer
agent-infra repo fix
Licensing
commercial repo fix
Deployment locus
cloud repo fix
Platform vs product
product vendor fix

When to use

Optimised for: auto-generated SAST/SCA fix PRs at GitHub scale

Anti-fit: not applicable — wrong section

Pros & cons

Pros

Backed by CodeQL data + Copilot model; PR-ready fixes integrated into GitHub workflow; broad language coverage.

Cons

Tied to GitHub Advanced Security tier; auto-fix quality bounded by CodeQL signal depth; some classes still require human edit.

Claims & capabilities

Launched Mar-2024 (beta); GA Aug-2024; covers 90%+ of JS/TS/Java/Python alert categories per GitHub; turns CodeQL findings into PR-ready fixes

Technical surface

API surface
not applicable — wrong section
Backend storage
not applicable — wrong section
Deployment
GitHub SaaS
Embedding model
not applicable — not a memory product
Multi-tenancy
not applicable — wrong section
MCP
not applicable — wrong section
A2A
not applicable — wrong section
OpenTelemetry
not applicable — wrong section

Alternatives to GitHub Copilot Autofix → live options ranked by shared design, licence, hosting and MCP support

Similar systems

Other use-case-specific agent harnesses in the catalog, ranked by inbound references.

  • Calypso AI (now F5 AI Guardrails) T2

    Dublin / NYC founded 2018; GenAI security and content scanning. $23M Series A-1 Aug-2024 (Paladin Capital + Lockheed Martin Ventures). Pivoted from defence ML to enterprise GenAI guardrails 2023-24.

  • Salesforce Agentforce T1

    Cross-listing: Salesforce Agentforce already exists under Vertical / Customer-support / voice memory; this row is the Agent-harness framing — Agentforce as the consumer-facing agent IDE / builder on Data Cloud. Agentforce launched Sep-2024; Agentforce 2.0 announced Dec-2024.

  • Lasso Security T2

    Tel-Aviv-founded LLM security platform — adversarial testing, prompt-injection defence, data-leakage prevention. $6M seed Nov-2023 (Entrée Capital + Samsung Next).

  • Pillar Security T2

    Tel-Aviv-founded (Dor Sarig + Ziv Karliner, both ex-IDF cyber); end-to-end LLM security platform — discovery, red-teaming, runtime guardrails. $9M seed Apr-2024 (Shield Capital + Greenfield).

  • Promptfoo T2

    OSS (MIT) prompt-engineering eval and red-team CLI; supports OWASP LLM Top-10 vulnerability tests, jailbreak generation, and CI/CD pipeline integration. $5M seed Mar-2024 (Andreessen Horowitz). Founders ex-Discord + ex-Smile Identity.

  • Protect AI T2

    Founded 2022 by Ian Swanson + Daryan Dehghanpisheh (ex-AWS); AI/ML supply-chain + GenAI security. Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); its capabilities now ship in Prisma AIRS. Products: Recon (red-team), ModelScan (model artifact scanner), Sightline (vulnerability DB).

Sources (18 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-28
    • Pricing “GHAS tier ($49/user/month component)” → “Included in GitHub Code Security at $30 per active committer/month (Team and Enterprise); free on public repositories” source
    #293