GitHub first released a tool for automatic code patching: details and capabilities

GitHub has created a tool to automatically patch code

GitHub has launched a beta version of a new automatic code scanning feature to detect and fix potential security vulnerabilities under the time of its development. This new feature combines the existing capabilities of GitHub Copilot and CodeQL through semantic code analysis.

• GitHub ensures that this new system will be able to automatically fix most of the vulnerabilities found, often without the need for developers to edit the code.
• The company also confirms that automatic code correction will apply to more than 90% of supported language types, including JavaScript, Typescript, Java, and Python.
• Thanks to this feature, developers will be able to focus on more complex tasks, spending more time on routine bug fixes.

How does it work?

GitHub Copilot and CodeQL scan code for potential vulnerabilities. If detected, automatic correction and explanation options are offered, as well as a preview of the proposed code. The developer can accept the proposed fix, make changes, or reject it.

What's next?

GitHub plans to expand support for automatic code correction to other programming languages such as C# and Go. Users are also encouraged to share their feedback and suggestions to help improve this new feature.

The first release of the CodeQL system on GitHub took place in 2019. Since then, the system has undergone several improvements, but one thing remains the same - it is available for free only to researchers and developers of open source projects.

GitHub uses the OpenAI GPT-4 model to generate automatic fixes and explanations.

And while GitHub is confident that the majority of system-proposed code fixes will be correct, the company notes that there may be minor errors.

Questions Answered

Hashtags

Save a link to this article

Discussion of the topic – GitHub first released a tool for automatic code patching: details and capabilities

2024-03-22

GitHub has released a beta version of a new automated code analysis and remediation tool that combines GitHub Copilot and CodeQL.

Vladimir Kosygin
Vladimir Kosygin Copywriter Elbuz

Latest comments

• 

  Alice

  23/03/2024

  Oh, that's interesting! First time hearing about this new GitHub feature. How do you think it will change the work of developers?

• 

  Benjamin

  24/03/2024

  This is a truly outstanding new opportunity! I think it will save developers time and help avoid bugs. An important step forward for the development process.

• 

  Chiara

  25/03/2024

  It is incredibly! Technologies are developing rapidly. This feature will provide a more efficient operation, but can it completely replace manual correction of errors in the code?

• 

  Dimitri

  26/03/2024

  I don't believe in all these latest gadgets. Developers must do everything themselves, without any artificial help. We need to pay more attention to quality, not automation.

Write a comment

4 comments

Write a comment

Your email address will not be published. Required fields are checked *

Name *

Email *

Your comment: *

Captcha

Enter the code

I agree to the personal data policy