GitHub exposes AI Scan for pull requests through REST APIs at org and repo level
GitHub Changelog·medium signal
On 2026-09-10 GitHub put `/orgs/{org}/code-scanning/ai-scan` and `/repos/{owner}/{repo}/code-scanning/ai-scan` in public preview for Advanced Security customers on github.com, not Enterprise Server. The endpoints read and set AI-powered PR security scanning, and an org-level disable blocks repository overrides. The same day GitHub deprecated MAI-Code-1-Flash across Copilot chat, edits and completions in favor of MAI-Code-1.1-Flash, which enterprise admins must enable.