Dedicated security review command now available in Copilot CLI
Quick Answer
GitHub Copilot CLI now includes an experimental /security-review command that allows developers to analyze local code changes for security vulnerabilities.
Quick Take
This feature provides actionable insights on high-impact issues across 11 categories, enhancing the security of code before it reaches production.
Key Points
- /security-review analyzes local code changes for high-confidence security findings.
- It flags vulnerabilities across 11 categories, including injection flaws and XSS.
- The command offers actionable suggestions directly in the terminal.
- This feature complements existing tools like GitHub code scanning and Dependabot.
- To use it, enable experimental mode in Copilot CLI and run the command.
Source Excerpt
You can now run a security review on your code changes directly from GitHub Copilot CLI. The new /security-review slash command is shipping as an experimental feature in public preview,…
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from GitHub Copilot Changelog
See more →
GitHub Copilot for JetBrains adds improved OpenTelemetry configuration and model management
The latest GitHub Copilot for JetBrains update enhances workflow control with OpenTelemetry configuration, improved model management, and support for servers in Claude agent flows, facilitating better observability and cost control for enterprise users.
