Dedicated security review command now available in Copilot CLI

Published June 10, 2026 · Category: AI Create

Overview

You can now run a security review on your code changes directly from GitHub Copilot CLI. The new /security-review slash command is shipping as an experimental feature in public preview, giving you a fast, AI-driven way to catch security vulnerabilities before they reach production code.

What it does

/security-review analyzes your local code changes and returns:

• High-confidence security findings, scored by severity and confidence.
• Actionable suggestions you can apply without leaving the terminal.
• A focused review that lives in your existing workflow.

The scan is tuned to flag common, high-impact vulnerability classes such as injection flaws, cross-site scripting, insecure data handling, path traversal, and weak cryptography.

This is a Copilot-driven scan that doesn’t rely on GitHub code scanning, Dependabot, or GitHub secret scanning. It complements those tools by giving you a lightweight, on-demand way to review your changes before you commit.

Details

This is an experimental command. To try it, turn on experimental mode in Copilot CLI, then run /security-review in any project to scan your current changes.

Join the discussion and share your feedback within the GitHub Community.

The post Dedicated security review command now available in Copilot CLI appeared first on The GitHub Blog.

Source

Originally published at github.blog.

Related Articles

• How Preply combines AI and human tutors to personalize learning
• Our new community investments in Virginia support local jobs and expand energy affordability.
• BBVA puts AI at the core of banking with OpenAI