Skip to main content

禁用 Copilot Autofix 进行代码扫描

可以选择为整个企业禁用 GitHub Copilot Autofix,或在组织和存储库级别禁用 GitHub Copilot Autofix。

谁可以使用此功能?

GitHub Copilot Autofix for code scanning 适用于 GitHub.com 上的所有公共存储库。 GitHub Copilot Autofix for code scanning 也可用于使用 GitHub Enterprise Cloud 并拥有 GitHub Advanced Security 许可证的组织所拥有的专用存储库。 有关详细信息,请参阅“关于 GitHub 高级安全性”。

About disabling Copilot Autofix for code scanning

GitHub Copilot Autofix is a GitHub Copilot-powered is an expansion of code scanning that provides users with targeted recommendations to help them fix code scanning alerts so they can avoid introducing new security vulnerabilities. To learn more about Copilot Autofix for code scanning, see "Responsible use of Copilot Autofix for code scanning."

Note

You do not need a subscription to GitHub Copilot to use GitHub Copilot Autofix. Copilot Autofix is available to all public repositories on GitHub.com, as well as private repositories in GitHub Enterprise Cloud enterprises that have a license for GitHub Advanced Security.

Copilot Autofix is allowed by default and enabled for every repository that uses CodeQL, regardless of whether it uses default or advanced setup for code scanning. Administrators at the enterprise, organization and repository levels can choose to opt out and disable Copilot Autofix.

Note that disabling Copilot Autofix at any level will close all open Copilot Autofix comments. If Copilot Autofix is disabled and then subsequently enabled, Copilot Autofix won't automatically suggest fixes for any pull requests that are already open. The suggestions will only be generated for any pull requests that are opened after Copilot Autofix is enabled, or after re-running CodeQL analysis on existing pull requests.

Blocking use of Copilot Autofix for an enterprise

Enterprise administrators can disallow Copilot Autofix for their enterprise. If you disallow Copilot Autofix for an enterprise, Copilot Autofix cannot be enabled for any organizations or repositories within the enterprise.

Note that allowing Copilot Autofix for an enterprise does not enforce enablement of Copilot Autofix, but means that organization and repository administrators will have the option to enable or disable Copilot Autofix.

Disallowing Copilot Autofix at the enterprise level will remove all open Copilot Autofix comments across all repositories of all organizations within the enterprise.

  1. In the top-right corner of GitHub, click your profile photo, then click Your enterprises.

  2. In the list of enterprises, click the enterprise you want to view.

  3. On the left side of the page, in the enterprise account sidebar, click Policies.

  4. Under "Policies", click Code security and analysis.

  5. Under "Copilot Autofix", use the dropdown menu to choose "Not allowed."

Disabling Copilot Autofix for an organization

If Copilot Autofix is allowed at the enterprise level, organization administrators have the option to disable Copilot Autofix for an organization. If you disable Copilot Autofix for an organization, Copilot Autofix cannot be enabled for any repositories within the organization.

Note that disabling Copilot Autofix at the organization level will remove all open Copilot Autofix comments across all repositories in the organization.

  1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
  2. Next to the organization, click Settings.
  3. In the "Security" section of the sidebar, click Code security then Global settings.
  4. Under the "Code scanning" section, deselect Copilot Autofix.

For more information about configuring global code scanning settings, see "Configuring global security settings for your organization."

Disabling Copilot Autofix for a repository

If Copilot Autofix is allowed at the enterprise level and enabled at the organization level, repository administrators have the option to disable Copilot Autofix for a repository. Disabling Copilot Autofix at the repository level will remove all open Copilot Autofix comments across the repository.

  1. On GitHub, navigate to the main page of the repository.

  2. Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings.

    Screenshot of a repository header showing the tabs. The "Settings" tab is highlighted by a dark orange outline.

  3. In the "Security" section of the sidebar, click Code security and analysis.

  4. In the "Code scanning" section, deselect Copilot Autofix.