Code scanning adds a mitigated alert dismissal reason

UpdateAug 20, 2026VerifiedAdded Sep 22, 2026

You can now dismiss a code scanning alert with the reason Mitigated when a vulnerability remains in the code but external controls, such as a web application firewall or network policy, mitigate its risk.

Governance Security Observability Developer tools

Read GitHub's release notes

https://github.blog/changelog/2026-08-20-code-scanning-adds-a-mitigated-alert-dismissal-reason

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityAug 20, 2026

Track GitHub Code Quality enablement changes in the audit log

GitHub Code Quality now writes an audit log event whenever someone enables, disables, or changes its settings on a repository. Three new events give you that history: repo.code_quality_enabled records when someone turns on Code Quality for a repository. repo.code_quality_disabled records when someone turns it off.

UpdateSQLPricingObservabilitySource

GitHub Advanced SecurityAug 19, 2026

Track organization code quality trends

The organization-level Code Quality dashboard now includes a Trends tab that shows how code quality has changed across your repositories over time. Instead of a point-in-time snapshot, you can see whether open findings are trending up or down and which repositories are driving the change.

GAPricingBIObservabilitySource

GitHub Advanced SecurityAug 18, 2026

Credential revocation and deauthorization by token type

Building on our self-service credential revocation experiences for incident response, you can now take token-type and user-specific actions to deauthorize and revoke user credentials during a security incident. This gives you finer-grained control when responding to a compromise.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityAug 25, 2026

Block users directly from security advisories

You can now block a user directly from a security advisory page in public repositories owned by either an organization or a personal account. This brings the streamlined moderation experience available for issues and pull requests to security advisories.

UpdateStreamingSecurityObservabilitySource

GitHub Advanced SecurityAug 13, 2026

License data quality improvements

GitHub now uses package registries like npmjs.org and PyPI to determine license information for software components in the dependency graph. This improves the accuracy and completeness of the licenses shown in dependency insights, software bills of materials (SBOMs), the open source license compliance feature in GitHub Advanced Security, and the dependency...

UpdateGovernanceSecuritySource

GitHub Advanced SecurityAug 7, 2026

Secret scanning coverage updates

This release expands secret scanning’s coverage with more secrets blocked by push protection, one new secret scanning partner, and richer metadata on alerts. Secret scanning partnership program Lovable Labs is now a GitHub secret scanning partner. Secret scanning now automatically detects the following new secret type in your repositories.

UpdateLLMsSecuritySource

GitHub Advanced SecuritySep 3, 2026

Multiple trusted publishing configurations for npm

We’re continuing to make trusted publishing smoother for npm publishers, guided by maintainers feedback. Three updates to npm publishing are now generally available: Multiple trusted publishing configurations per package Staged packages can only be approved after malware scanning is complete Maintainers can see their staged history in the package versions...

GASource

GitHub Advanced SecurityAug 4, 2026

Customize code scanning default setup at scale

You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL scans your code for security vulnerabilities, whether that’s on one repository or across your whole organization.

UpdateSecurityDeveloper toolsSource

Also shipped on Aug 20, 2026

Google Cloud BigQueryAug 20, 2026

BigQuery adds ML.TREND, ML.SEASONALITY and ML.DETECT_CHANGE_POINTS in preview

New table-valued functions in the query editor and conversational analytics identify trends, repeating seasonal patterns and structural change points in time series data.

PreviewSQLSource

Google Cloud BigQueryAug 20, 2026

BigQuery Graph core processing limited to Enterprise editions from April 26, 2027

Standard edition and on-demand billing support for BigQuery Graph core graph processing is deprecated, with processing restricted to Enterprise and Enterprise Plus from April 26, 2027. Graph measures remain available except in Standard edition.

DeprecationSQLPricingSource

Google Cloud BigQueryAug 20, 2026

The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server

The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server. AI agents can now execute advanced BigQuery operations, such as job scheduling, job management, and reservation management, through a managed MCP endpoint. For more information, see Use the Cloud CLI remote MCP server . This feature is in Preview .

PreviewAI agentsMCPSQLSource

Snowflake Snowflake Cortex AIAug 20, 2026

AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (General availability)

AI_EXTRACT and AI_PARSE_DOCUMENT now support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics:

GAGovernanceSecurityDeveloper toolsSource

Snowflake Snowflake Cortex AIAug 20, 2026

Cortex Agent code execution tool (Preview)

The Cortex Agent code execution tool is now in public preview. When you enable the tool on an agent, the agent can generate and run Python in a secure, isolated sandbox to process data, perform calculations, and produce visualizations.

PreviewAI agentsBISource

Databricks LakeflowAug 20, 2026

Salesforce connector mTLS authentication is now generally available

Mutual TLS (mTLS) authentication for the Salesforce connector in Lakeflow Connect is now generally available. With mTLS, Databricks and Salesforce exchange and verify client certificates to establish two-way trust, combined with the OAuth client credentials flow. Choose it for API-only users or when your organization requires mTLS.

GASecurityData integrationDeveloper toolsSource