Copilot Autofix: found vulnerability is automatically fixed too

GitHub launches Copilot Autofix: when CodeQL finds a security vulnerability in code during a pull request, the AI does not just flag it but also proposes the corrected code to fix it. The developer can accept the fix with one click. In tests, this process is three times faster than manually correcting the vulnerability. It is the first time code security and AI integrate directly into the review workflow, making "found means fixed" a practical reality.