GitHub has rolled out significant enhancements to its GitHub Copilot coding agent, transforming it from a background assistant into a more autonomous and secure development partner. These updates, detailed on the GitHub Blog, include a model picker, self-review capabilities, built-in security scanning, custom agents, and improved CLI handoff.
Designed to handle delegated tasks like bug fixes, test generation, and code cleanup, the Copilot coding agent now delivers pull requests that are closer to production-ready. These recent advancements aim to streamline developer workflows and reduce manual oversight.
Smarter Task Execution and Review
Developers can now select specific AI models for different tasks via the Agents panel. This allows for optimization, using faster models for routine work such as unit tests, or more robust models for complex refactors. This granular control, currently available for Copilot Pro and Pro+ users, ensures efficient resource allocation.
A critical upgrade introduces self-review, where the agent uses Copilot code review to iterate on its own changes before opening a pull request. This process, observed to catch and rectify issues like overly complex string concatenations, significantly reduces the cleanup burden on human reviewers, delivering higher-quality code from the outset.
Enhanced Security and Customization
Security is now integrated directly into the agent's workflow. The Copilot coding agent automatically runs code scanning, secret scanning, and dependency vulnerability checks, flagging potential issues like committed API keys or known CVEs before a pull request is even created. This proactive approach, including GitHub Advanced Security features at no additional cost for agent-generated code, shifts security left in the development lifecycle.
