{"id":638,"date":"2026-10-19T13:18:17","date_gmt":"2026-10-19T13:18:17","guid":{"rendered":"https:\/\/gilnas.synology.me\/wordpress\/638\/"},"modified":"2026-10-19T13:18:17","modified_gmt":"2026-10-19T13:18:17","slug":"github-ai-%eb%b3%b4%ec%95%88-%ec%97%90%ec%9d%b4%ec%a0%84%ed%8a%b8-%ec%a0%95%ec%8b%9d-%ec%b6%9c%ec%8b%9c-pr%c2%b7%eb%b9%84%eb%b0%80%ea%b0%92%c2%b7%eb%b9%84%ec%9a%a9%ec%9d%84-%ec%9a%b4%ec%98%81","status":"publish","type":"post","link":"https:\/\/gilnas.synology.me\/wordpress\/638\/","title":{"rendered":"GitHub AI \ubcf4\uc548 \uc5d0\uc774\uc804\ud2b8 \uc815\uc2dd \ucd9c\uc2dc: PR\u00b7\ube44\ubc00\uac12\u00b7\ube44\uc6a9\uc744 \uc6b4\uc601\ud558\ub294 \ubc95 | Operating GitHub AI Security Agents"},"content":{"rendered":"<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/gilnas.synology.me\/wordpress\/wp-content\/uploads\/2026\/10\/2026-10-19-ai-card.png\" alt=\"GitHub AI \ubcf4\uc548 \uc5d0\uc774\uc804\ud2b8 \uc815\uc2dd \ucd9c\uc2dc: PR\u00b7\ube44\ubc00\uac12\u00b7\ube44\uc6a9\uc744 \uc6b4\uc601\ud558\ub294 \ubc95 | Operating GitHub AI Security Agents\" \/><\/figure>\n<p><strong>\ud575\uc2ec \ub2f5\ubcc0:<\/strong> \uc774\ubc88 \uc8fc AI \uac1c\ubc1c \ub3c4\uc785\uc5d0\uc11c \uc0c8\ub85c \ud655\uc778\ud560 \uac83\uc740 \u201c\uc5d0\uc774\uc804\ud2b8\uac00 \uace0\uce5c\ub2e4\u201d\ub294 \ubb38\uad6c\uac00 \uc544\ub2c8\ub77c, \uadf8 \uc5d0\uc774\uc804\ud2b8\uac00 \uc5b4\ub5a4 \uacbd\uace0\ub97c \ub300\uc0c1\uc73c\ub85c \uc5b4\ub5a4 \uad8c\ud55c\uc73c\ub85c PR\uc744 \ub9cc\ub4e4\uace0 \uc5bc\ub9c8\ub97c \uc4f0\ub294\uac00\uc785\ub2c8\ub2e4. GitHub\ub294 10\uc6d4 15\uc77c \ucf54\ub4dc \uc2a4\uce90\ub2dd \uacbd\uace0\ub97c Copilot\uc5d0\uac8c \ubc30\uc815\ud574 \uc218\uc815 PR\uc744 \ub9cc\ub4dc\ub294 agentic autofix\uc640 PR\uc6a9 AI Scan\uc744 \uc815\uc2dd \ucd9c\uc2dc\ud588\uc2b5\ub2c8\ub2e4. 10\uc6d4 7\uc77c\uc5d0\ub294 \ubb38\ub9e5\uc744 \uc77d\uc5b4 \ud615\uc2dd\uc774 \uc77c\uc815\ud558\uc9c0 \uc54a\uc740 \ube44\ubc00\uac12\ub3c4 \ucc3e\ub294 \uc0c8 \ud0d0\uc9c0 \ubaa8\ub378\uacfc, \ud5a5\ud6c4 \uacfc\uae08\ub418\ub294 \ud478\uc2dc \ucc28\ub2e8\u00b7\ubcf4\uc548 \ub9ac\ubdf0 \uacc4\ud68d\uc744 \uacf5\uac1c\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ud300\uc5d0 AI \ucf54\ub529 \ub3c4\uad6c\uac00 \uc774\ubbf8 \ub4e4\uc5b4\uc640 \uc788\ub2e4\uba74 \uc774 \ubcc0\ud654\ub294 \ub2e8\uc21c\ud55c \uae30\ub2a5 \ucd94\uac00\uac00 \uc544\ub2d9\ub2c8\ub2e4. \ubcf4\uc548 \uacbd\uace0\uac00 \uc774\uc288 \ubaa9\ub85d\uc5d0\uc11c \ub05d\ub098\uc9c0 \uc54a\uace0 \uc800\uc7a5\uc18c \ud0d0\uc0c9, \uc218\uc815 \uc81c\uc548, CodeQL \uc7ac\uc2e4\ud589, \ucd08\uc548 PR\uc774\ub77c\ub294 \uac1c\ubc1c \ud750\ub984\uc73c\ub85c \ub4e4\uc5b4\uc635\ub2c8\ub2e4. \ubc18\ub300\ub85c AI Scan \uacb0\uacfc\ub294 \ubcd1\ud569\uc744 \ub9c9\uc9c0 \uc54a\ub294 \uad8c\uace0\uc774\uace0, fork\ub098 Dependabot PR\uc5d0\ub294 \uc2e4\ud589\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc790\ub3d9\ud654\uac00 \ub298\uc5c8\ub2e4\uace0 \uae30\uc874 \ub9ac\ubdf0\u00b7\ud14c\uc2a4\ud2b8\u00b7\uad8c\ud55c \uc124\uacc4\ub97c \uc904\uc5ec\ub3c4 \ub41c\ub2e4\ub294 \ub73b\uc740 \uc544\ub2d9\ub2c8\ub2e4.<\/p>\n<p>\uadf8\ub798\uc11c \uc624\ub298 \ud560 \uc77c\uc740 \uc804\uccb4 \uc870\uc9c1\uc5d0 \ucf1c\ub294 \uac83\uc774 \uc544\ub2c8\ub77c, \ud55c\ub450 \uac1c \uc800\uc7a5\uc18c\uc5d0\uc11c \uacbd\uace0 \uc720\ud615\u00b7\ube44\uc6a9\u00b7\ub9ac\ubdf0 \uc2dc\uac04\uc744 \uce21\uc815\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \ud2b9\ud788 AI \uc5d0\uc774\uc804\ud2b8\uac00 \ub9cc\ub4e0 \ubcc0\uacbd\uc740 \uc0ac\ub78c\uc774 \ub9cc\ub4e0 PR\uacfc \uac19\uc740 \uae30\uc900\uc73c\ub85c \ud14c\uc2a4\ud2b8\ud558\uace0, \ube44\ubc00\uac12\u00b7\ubc30\ud3ec \uad8c\ud55c\uc740 \uc5ec\uc804\ud788 \ubcc4\ub3c4 \uacbd\uacc4\ub85c \ub0a8\uaca8\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<h2>\ubb34\uc2a8 \uc77c\uc774 \uc788\uc5c8\ub098<\/h2>\n<p>GitHub\ub294 <a href=\"https:\/\/github.blog\/changelog\/2026-10-15-agentic-autofix-for-code-scanning-alerts-general-availability\/\" target=\"_blank\" rel=\"noopener\">2026\ub144 10\uc6d4 15\uc77c agentic autofix<\/a>\uc758 \uc77c\ubc18 \uacf5\uac1c\ub97c \ubc1c\ud45c\ud588\uc2b5\ub2c8\ub2e4. \uae30\ubcf8 \ube0c\ub79c\uce58\uc758 \ucf54\ub4dc \uc2a4\uce90\ub2dd \uacbd\uace0\ub97c Copilot\uc5d0 \ubc30\uc815\ud558\uba74 \uad00\ub828 \ud30c\uc77c\uc744 \uc0b4\ud3b4\ubcf4\uace0 \uc218\uc815\uc548\uc744 \ub9cc\ub4e4\uba70, CodeQL\uc744 \ub2e4\uc2dc \uc2e4\ud589\ud574 \uacbd\uace0\uac00 \ub2eb\ud788\ub294\uc9c0 \uac80\uc99d\ud55c \ub4a4 \ub9ac\ubdf0\uc6a9 \ucd08\uc548 PR\uc744 \uc5fd\ub2c8\ub2e4. \ud55c PR\uc5d0\uc11c \ucd5c\ub300 25\uac1c \uacbd\uace0\ub97c \ud568\uaed8 \ucc98\ub9ac\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc0ac\uc6a9 \ub300\uc0c1\uc740 GitHub Enterprise Cloud\uc758 Code Security \ub610\ub294 GitHub Advanced Security \uace0\uac1d\uc774\uba70, \uc5d4\ud130\ud504\ub77c\uc774\uc988 \uc815\ucc45\uacfc \uacb0\uc81c \uc218\ub2e8 \uc124\uc815\uc774 \uba3c\uc800 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n<p>\uac19\uc740 \ub0a0 \uacf5\uac1c\ub41c <a href=\"https:\/\/github.blog\/changelog\/2026-10-15-ai-scan-for-pull-requests-generally-available\/\" target=\"_blank\" rel=\"noopener\">PR\uc6a9 AI Scan<\/a>\uc740 CodeQL\uc774 \ub2e4\ub8e8\uc9c0 \uc54a\ub294 PHP, Shell\/Bash, Terraform HCL, Dockerfile \uac19\uc740 \uc5b8\uc5b4\u00b7\uc124\uc815 \ud30c\uc77c\uc758 PR \ubcc0\uacbd\uc744 \ubcf4\uc644\ud569\ub2c8\ub2e4. \uacb0\uacfc\ub294 Conversation\uacfc Files changed\uc5d0 AI \ud45c\uc2dc\ub85c \ub098\ud0c0\ub098\uace0 \uc218\uc815 \uc81c\uc548\ub3c4 \ubc1b\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\ub9cc \uc774 \uacb0\uacfc\ub294 \uad8c\uace0\uc774\uba70 \ucf54\ub4dc \uc2a4\uce90\ub2dd \uccb4\ud06c \uc2e4\ud328\ub098 ruleset \ubcd1\ud569 \ucc28\ub2e8\uc73c\ub85c \uc5f0\uacb0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uacf5\uac1c \uc800\uc7a5\uc18c\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc9c0\ub9cc \ube44\uacf5\uac1c\u00b7\ub0b4\ubd80 \uc800\uc7a5\uc18c\ub294 \ud574\ub2f9 \ubcf4\uc548 \uc81c\ud488 \ub77c\uc774\uc120\uc2a4\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n<p>\ube44\ubc00\uac12 \ucabd\ub3c4 \ubcc0\ud654\uac00 \uc788\uc2b5\ub2c8\ub2e4. GitHub\ub294 <a href=\"https:\/\/github.blog\/changelog\/2026-10-07-purpose-built-model-for-leaked-secret-detection\/\" target=\"_blank\" rel=\"noopener\">10\uc6d4 7\uc77c \uc0c8 AI \ube44\ubc00 \ud0d0\uc9c0 \ubaa8\ub378<\/a>\uc744 \ubc1c\ud45c\ud588\uc2b5\ub2c8\ub2e4. \ucf54\ub4dc \uc8fc\ubcc0 \ubb38\ub9e5\uc744 \uc77d\uc5b4 \uc815\ud615 \ud1a0\ud070\uc774 \uc544\ub2cc \ube44\ubc00\ubc88\ud638 \ud6c4\ubcf4\uae4c\uc9c0 \ucc3e\ub294 \ubaa8\ub378\uc774\uba70, \uae30\uc874 AI-detected Password alert \uace0\uac1d\uc740 \uc790\ub3d9\uc73c\ub85c \uc0c8 \ubaa8\ub378\uc744 \ubc1b\uc2b5\ub2c8\ub2e4. AI \uae30\ubc18 \ud478\uc2dc \ucc28\ub2e8\uacfc Copilot <code>\/security-review<\/code>\uc758 \ube44\ubc00 \ud0d0\uc9c0\ub294 \uc544\uc9c1 opt-in \ubbf8\ub9ac\ubcf4\uae30 \ub610\ub294 \uc608\uc815 \uc0c1\ud0dc\uc774\uace0 AI Credits\ub97c \uc18c\ube44\ud569\ub2c8\ub2e4. <a href=\"https:\/\/github.blog\/changelog\/2026-10-13-secret-scanning-blocks-anthropic-keys-by-default-adds-salesforce\/\" target=\"_blank\" rel=\"noopener\">10\uc6d4 13\uc77c<\/a>\ubd80\ud130 Anthropic \uc11c\ube44\uc2a4\u00b7\uc0ac\uc6a9\uc790 API \ud0a4\ub294 \uae30\ubcf8 \ud478\uc2dc \ubcf4\ud638 \ud0d0\uc9c0\uae30\uc5d0 \ucd94\uac00\ub418\uc5b4, secret scanning\uc774 \ucf1c\uc9c4 \uc800\uc7a5\uc18c\uc5d0\uc11c\ub294 \ucee4\ubc0b\uc774 \ucc28\ub2e8\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uc65c \uc911\uc694\ud55c\uac00<\/h2>\n<p>AI \ubcf4\uc548 \uae30\ub2a5\uc744 \ubaa8\ub378 \uc131\ub2a5 \uacbd\uc7c1\uc73c\ub85c \ubcf4\uba74 \uc801\uc6a9 \ud310\ub2e8\uc774 \ud750\ub824\uc9d1\ub2c8\ub2e4. \uc2e4\uc81c \uc6b4\uc601 \uad00\uc810\uc5d0\uc11c\ub294 \uacbd\uace0\uac00 PR\uc774 \ub418\uba74\uc11c \uad8c\ud55c, \ube44\uc6a9, \uac80\ud1a0 \ub300\uae30\uc5f4\uc774 \ud55c \ubc88\uc5d0 \ubc14\ub01d\ub2c8\ub2e4. agentic autofix\ub294 \uc2a4\uc2a4\ub85c \ubcd1\ud569\ud558\uc9c0 \uc54a\uace0 \ucd08\uc548 PR\uc744 \ub9cc\ub4e4\uc9c0\ub9cc, \uc800\uc7a5\uc18c\ub97c \ub113\uac8c \uc77d\uace0 \uc218\uc815\uc548\uc744 \uc5ec\ub7ec \ubc88 \uc2dc\ub3c4\ud569\ub2c8\ub2e4. \ub530\ub77c\uc11c \ubcf4\uc548 \ub2f4\ub2f9\uc790\ub294 \u201c\uacbd\uace0\ub97c \uc904\uc600\ub294\uac00\u201d\ubfd0 \uc544\ub2c8\ub77c \u201c\uc218\uc815 PR\uc774 \ud14c\uc2a4\ud2b8\ub97c \ud1b5\uacfc\ud588\ub294\uac00, \uc0ac\ub78c\uc774 \ub418\ub3cc\ub9b0 \ube44\uc728\uc740 \uc5bc\ub9c8\uc778\uac00\u201d\ub97c \ubd10\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<p>\ub610\ud55c AI Scan\uc740 CodeQL\uc758 \ub300\uccb4\uc81c\uac00 \uc544\ub2d9\ub2c8\ub2e4. \uc815\uc801 \ubd84\uc11d \uaddc\uce59\uc774 \uac15\ud55c \uc601\uc5ed\uc740 CodeQL\uacfc \uae30\uc874 \ube44\ubc00 \uc2a4\uce94\uc774 \uacc4\uc18d \uae30\uc900\uc120\uc785\ub2c8\ub2e4. AI Scan\uc740 PR \ub2e8\uc704\uc758 \ucd94\uac00 \uc2e0\ud638\ub85c \ucde8\uae09\ud574\uc57c \ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4 <code>server\/api\/admin\/export.get.ts<\/code>\uc5d0 \uc0c8 \uc178 \ud638\ucd9c\uc744 \ub123\ub294 PR\uc5d0\uc11c AI Scan\uc774 \uc704\ud5d8\ud55c \uc778\uc790 \uc870\ud569\uc744 \uc54c\ub824\uc904 \uc218 \uc788\uc9c0\ub9cc, \uadf8 \uacb0\uacfc\ub9cc\uc73c\ub85c merge\ub97c \ub9c9\uc744 \uc218\ub294 \uc5c6\uc2b5\ub2c8\ub2e4. \uaddc\uce59 \uae30\ubc18 \ucc28\ub2e8, \ub2e8\uc704\u00b7\ud1b5\ud569 \ud14c\uc2a4\ud2b8, \uc0ac\ub78c \ub9ac\ubdf0\ub97c \ud568\uaed8 \ud1b5\uacfc\ud558\ub294 \ud750\ub984\uc774 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n<h3>\uc5d0\uc774\uc804\ud2b8 \uc218\uc815 PR: \u201c\ub2eb\ud78c \uacbd\uace0\u201d\uc640 \u201c\uc548\uc804\ud55c \ubcc0\uacbd\u201d\uc740 \ub2e4\ub985\ub2c8\ub2e4<\/h3>\n<p>agentic autofix\ub294 \uad00\ub828 \ud30c\uc77c\uc744 \ud0d0\uc0c9\ud558\uace0 CodeQL\uc744 \uc7ac\uc2e4\ud589\ud55c\ub2e4\ub294 \uc810\uc5d0\uc11c \ub2e8\uc21c \ucf54\ub4dc \uc81c\uc548\ubcf4\ub2e4 \ud55c \ub2e8\uacc4 \ub354 \ub098\uc544\uac11\ub2c8\ub2e4. \uadf8\ub7ec\ub098 CodeQL \uacbd\uace0\uac00 \uc0ac\ub77c\uc84c\ub2e4\ub294 \uc0ac\uc2e4\uc774 \uc11c\ube44\uc2a4 \ub3d9\uc791 \ubcf4\uc874\uae4c\uc9c0 \ubcf4\uc7a5\ud558\uc9c0\ub294 \uc54a\uc2b5\ub2c8\ub2e4. \uc778\uc99d \ubbf8\ub4e4\uc6e8\uc5b4\ub97c \uace0\uce58\ub2e4\uac00 <code>middleware\/auth.ts<\/code>\uc758 \uc608\uc678 \uacbd\ub85c\uac00 \ub2ec\ub77c\uc9c0\uac70\ub098, \uc785\ub825 \uac80\uc99d\uc744 \ucd94\uac00\ud558\uba74\uc11c API \ud638\ud658\uc131\uc774 \uae68\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uccab \uc801\uc6a9\uc5d0\uc11c\ub294 \uc790\ub3d9 \uc218\uc815 PR\uc758 \ud544\uc218 \uccb4\ud06c\ub97c \ub298\ub9ac\uae30\ubcf4\ub2e4, \uae30\uc874 CI\ub97c \ubc18\ub4dc\uc2dc \ud1b5\uacfc\ud558\uac8c \ud558\uace0 \ub9ac\ubdf0 \ud15c\ud50c\ub9bf\uc5d0 \u201c\uacbd\uace0 ID\u00b7\ubcc0\uacbd \ud30c\uc77c\u00b7\uc7ac\ud604 \ud14c\uc2a4\ud2b8\u00b7\uad8c\ud55c \uc601\ud5a5\u201d \ub124 \ud56d\ubaa9\uc744 \ub123\ub294 \ud3b8\uc774 \uc88b\uc2b5\ub2c8\ub2e4. \ucd08\uc548 PR\uc774 \uc5f4\ub838\uc744 \ub54c \ubcc0\uacbd \uc804\ud6c4\uc758 CodeQL \uacb0\uacfc\uc640 <code>pnpm test<\/code>, API \uacc4\uc57d \ud14c\uc2a4\ud2b8\ub97c \ud655\uc778\ud558\uc2ed\uc2dc\uc624. \uc218\uc815\uc774 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ucffc\ub9ac\ub098 \uad8c\ud55c \ud310\uc815\uc5d0 \ub2ff\uc73c\uba74 \ub2f4\ub2f9 \ud300\uc758 \uc2b9\uc778\ub3c4 \uc694\uad6c\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<h3>AI Scan: PR \uc2e0\ud638\ub97c \ubcd1\ud569 \uc815\ucc45\uc73c\ub85c \ubc14\uafb8\uae30 \uc804\uc5d0 \uc624\ud0d0\uc744 \uce21\uc815\ud569\ub2c8\ub2e4<\/h3>\n<p>AI Scan\uc740 CodeQL\uc774 \ud604\uc7ac \ud3ec\uad04\ud558\uc9c0 \uc54a\ub294 \ud30c\uc77c \ud615\uc2dd\uacfc \uc5b8\uc5b4\ub97c \uaca8\ub0e5\ud569\ub2c8\ub2e4. Dockerfile\uc758 \uc704\ud5d8\ud55c \ub2e4\uc6b4\ub85c\ub4dc, Terraform\uc758 \uacfc\ub3c4\ud55c \uacf5\uac1c \ubc94\uc704, \uc178 \uc2a4\ud06c\ub9bd\ud2b8\uc758 \uc778\uc790 \uc804\ub2ec\ucc98\ub7fc \ub9ac\ubdf0\uc5d0\uc11c \ub193\uce58\uae30 \uc26c\uc6b4 \ubd80\ubd84\uc5d0\ub294 \uc720\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud558\uc9c0\ub9cc GitHub \uacf5\uc2dd \ubc1c\ud45c\ub300\ub85c \uc774 \uacbd\uace0\ub294 advisory\uc785\ub2c8\ub2e4. fork PR\uacfc Dependabot PR\uc5d0\ub294 \uc2e4\ud589\ub418\uc9c0 \uc54a\ub294 \ubc94\uc704\ub3c4 \uc788\uc73c\ubbc0\ub85c, \u201c\ubaa8\ub4e0 PR\uc774 \uc2a4\uce94\ub41c\ub2e4\u201d\ub294 \uc804\uc81c\ub85c SLA\ub97c \uc124\uacc4\ud558\uba74 \uc548 \ub429\ub2c8\ub2e4.<\/p>\n<p>\ud55c \uc800\uc7a5\uc18c\uc5d0\uc11c 2\uc8fc \uc815\ub3c4 AI Scan \uacb0\uacfc\ub97c \ub77c\ubca8\ub85c \ubaa8\uc544 \uc2e4\uc81c \ucde8\uc57d\uc810, \uc548\uc804\ud55c \uc624\ud0d0, \uc560\ub9e4\ud55c \uc124\uacc4 \ubb38\uc81c\ub85c \ubd84\ub958\ud574 \ubcf4\uc2ed\uc2dc\uc624. \uadf8 \ub4a4\uc5d0\uc57c \uc704\ud5d8\ub3c4\uac00 \ub192\uc740 \uacbd\ub85c, \uc608\ub97c \ub4e4\uba74 <code>infra\/<\/code>\ub098 <code>scripts\/release.sh<\/code>\uc5d0\ub9cc \ucd94\uac00 \ub9ac\ubdf0\uc5b4\ub97c \ubd99\uc77c\uc9c0 \ud310\ub2e8\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. AI Scan \ubc1c\uacac\uc744 \uace7\ubc14\ub85c ruleset \ucc28\ub2e8 \uc870\uac74\uc73c\ub85c \ud749\ub0b4 \ub0b4\uae30\ubcf4\ub2e4, \uba3c\uc800 \uc0ac\ub78c\uc774 \ud310\ub2e8 \uac00\ub2a5\ud55c \uc2e0\ud638\uc778\uc9c0 \ud655\uc778\ud558\ub294 \ub2e8\uacc4\uac00 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n<h3>\ube44\ubc00 \ud0d0\uc9c0: .env\ub97c \ubcf4\uc9c0 \uc54a\ub294 \uad6c\uc870\uac00 \uba3c\uc800\uc785\ub2c8\ub2e4<\/h3>\n<p>\ubb38\ub9e5 \uae30\ubc18 \ud0d0\uc9c0\ub294 \uaddc\uce59\ud615 \ud0d0\uc9c0\uc5d0\uc11c \ube60\uc9c8 \uc218 \uc788\ub294 \ube44\ubc00\ubc88\ud638\ub97c \uc7a1\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \ud0d0\uc9c0\uae30\uac00 \uc788\ub2e4\ub294 \uc774\uc720\ub85c \uc800\uc7a5\uc18c\uc5d0 \ube44\ubc00\uac12\uc744 \ub450\ub294 \uad00\ud589\uc744 \ud5c8\uc6a9\ud558\uba74 \uc548 \ub429\ub2c8\ub2e4. <code>.env<\/code>\ub294 gitignore\uc5d0 \ub450\uace0, CI\ub294 OIDC\ub098 \ud50c\ub7ab\ud3fc\uc758 secret store\uc5d0\uc11c \uc9e7\uc740 \uc218\uba85\uc758 \uc790\uaca9 \uc99d\uba85\uc744 \uc8fc\uc785\ud558\ub294 \ubc29\uc2dd\uc774 \uc6b0\uc120\uc785\ub2c8\ub2e4. Anthropic \ud0a4\ucc98\ub7fc \uae30\ubcf8 \ud478\uc2dc \ubcf4\ud638 \ub300\uc0c1\uc774 \ub298\uba74, \uc624\ub798\ub41c \uc608\uc81c \ud30c\uc77c\uc774\ub098 \ub85c\uceec \ud14c\uc2a4\ud2b8 \uc2a4\ud06c\ub9bd\ud2b8\uac00 \ud478\uc2dc \ub2e8\uacc4\uc5d0\uc11c \uba48\ucd9c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ucc28\ub2e8\uc744 \ub9cc\ub0ac\uc744 \ub54c \uac1c\ubc1c\uc790\uac00 \ubb34\uc2ec\ucf54 \uc6b0\ud68c\ud558\uc9c0 \uc54a\ub3c4\ub85d \uc808\ucc28\ub97c \uc815\ud574\ub450\uc2ed\uc2dc\uc624. \uba3c\uc800 \ud0a4\ub97c \ud3d0\uae30\u00b7\uc7ac\ubc1c\uae09\ud558\uace0, \ucee4\ubc0b \uc774\ub825\uc5d0 \ub4e4\uc5b4\uac14\ub294\uc9c0 \ud655\uc778\ud558\uba70, \uc608\uc81c\uc5d0\ub294 \uac00\uc9dc \uac12\ub9cc \ub0a8\uae41\ub2c8\ub2e4. \uacf5\uac1c \uc800\uc7a5\uc18c\uc5d0\uc11c partner secret\uc774 \ubc1c\uacac\ub418\uba74 \uc81c\uacf5\uc790\uc5d0\uac8c \ud1b5\uc9c0\ub420 \uc218 \uc788\ub2e4\ub294 GitHub\uc758 \uc124\uba85\ub3c4 \ud300\uc5d0 \uc54c\ub824\ub458 \ub9cc\ud569\ub2c8\ub2e4. \ud0d0\uc9c0 \uacb0\uacfc\uc5d0\ub294 \ubbfc\uac10\ud55c \uc6d0\ubb38\uc744 \ud2f0\ucf13\uc774\ub098 \ucc44\ud305\uc5d0 \ubcf5\uc0ac\ud558\uc9c0 \uc54a\ub294 \uc6d0\uce59\uc774 \ud544\uc694\ud569\ub2c8\ub2e4.<\/p>\n<h3>\uad8c\ud55c\uacfc \ube44\uc6a9: \ucf1c\ub294 \uc0ac\ub78c\uacfc \uc4f0\ub294 \uc0ac\ub78c\uc774 \ub2ec\ub77c\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4<\/h3>\n<p>agentic autofix\ub294 \uc5d4\ud130\ud504\ub77c\uc774\uc988 \uc815\ucc45, \uc870\uc9c1\u00b7\uc800\uc7a5\uc18c \uc124\uc815, Copilot \uacb0\uc81c \uc218\ub2e8\uc744 \ubaa8\ub450 \uc694\uad6c\ud569\ub2c8\ub2e4. AI Scan\uacfc agentic autofix\ub294 Code Security AI Credits\ub97c \uc18c\ube44\ud558\uace0, \ud6c4\uc790\ub294 GitHub Actions minutes\ub3c4 \uc0ac\uc6a9\ud569\ub2c8\ub2e4. \uc0c8 \ube44\ubc00 \ud0d0\uc9c0\uc758 opt-in \uae30\ub2a5 \uc5ed\uc2dc \ud06c\ub808\ub527\uacfc \ubcc4\ub3c4 SKU \uc608\uc0b0\uc5d0 \uc5f0\uacb0\ub429\ub2c8\ub2e4. \uc608\uc0b0 \uc54c\ub9bc\ub9cc\uc73c\ub85c \uc0ac\uc6a9\uc774 \uba48\ucd94\uc9c0\ub294 \uc54a\ub294\ub2e4\ub294 \uacf5\uc2dd \uc548\ub0b4\ub3c4 \uc911\uc694\ud569\ub2c8\ub2e4.<\/p>\n<p>\ub530\ub77c\uc11c \ubcf4\uc548\ud300\uc774 \uc77c\uad04 \ud65c\uc131\ud654\ud558\uae30\ubcf4\ub2e4, \ud50c\ub7ab\ud3fc \ud300\uc774 \uc608\uc0b0 \uc0c1\ud55c\uacfc \uc54c\ub9bc\uc744 \uba3c\uc800 \uc124\uc815\ud558\uace0 \uc800\uc7a5\uc18c \uad00\ub9ac\uc790\uac00 \uc81c\ud55c\ub41c \ud30c\uc77c\ub7ff\uc744 \uc5ec\ub294 \uc21c\uc11c\uac00 \uc548\uc804\ud569\ub2c8\ub2e4. \uc6d4\ubcc4 \ube44\uc6a9, \uc0dd\uc131\ub41c PR \uc218, \uba38\uc9c0\uc728, \ub418\ub3cc\ub9bc, \ud3c9\uade0 \ub9ac\ubdf0 \uc2dc\uac04\uc744 \ub300\uc2dc\ubcf4\ub4dc\uc5d0 \ud568\uaed8 \uae30\ub85d\ud558\uba74 \u201cAI\uac00 \uc2dc\uac04\uc744 \uc808\uc57d\ud55c\ub2e4\u201d\ub294 \uc8fc\uc7a5\uc744 \ud300 \ub370\uc774\ud130\ub85c \uac80\uc99d\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uac1c\ubc1c\uc790 \uc2e4\ud589 \uacc4\ud68d<\/h2>\n<ol>\n<li><strong>\ubc94\uc704\ub97c \uace0\ub985\ub2c8\ub2e4.<\/strong> \uae30\ubcf8 \ube0c\ub79c\uce58\uc5d0 CodeQL\uc774 \uc774\ubbf8 \uc548\uc815\uc801\uc73c\ub85c \ub3c4\ub294 \ube44\ud575\uc2ec \uc800\uc7a5\uc18c \ud558\ub098\ub97c \ud30c\uc77c\ub7ff\uc73c\ub85c \uc9c0\uc815\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\uad8c\ud55c\uc744 \ud655\uc778\ud569\ub2c8\ub2e4.<\/strong> \uc5d4\ud130\ud504\ub77c\uc774\uc988\uc758 Agentic autofix \uc815\ucc45, \uc800\uc7a5\uc18c Code Security \uc124\uc815, Copilot \uacb0\uc81c\u00b7AI Credit \uc608\uc0b0\uc744 \ubd84\ub9ac\ud574 \uc810\uac80\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>PR \ud15c\ud50c\ub9bf\uc744 \ubcf4\uac15\ud569\ub2c8\ub2e4.<\/strong> \uc790\ub3d9 \uc218\uc815 PR\uc5d0 \uacbd\uace0 \ub9c1\ud06c, \ubcc0\uacbd \uc774\uc720, \uc7ac\uc2e4\ud589\ud55c \uac80\uc0ac, \uc218\ub3d9 \ud14c\uc2a4\ud2b8 \uacb0\uacfc\ub97c \ub0a8\uae30\uac8c \ud569\ub2c8\ub2e4.<\/li>\n<li><strong>CI\ub97c \uae30\uc900\uc120\uc73c\ub85c \ub461\ub2c8\ub2e4.<\/strong> <code>pnpm lint<\/code>, \ub2e8\uc704 \ud14c\uc2a4\ud2b8, API \uacc4\uc57d \ud14c\uc2a4\ud2b8\uc640 \ubc30\ud3ec \uc804 \ubcf4\uc548 \uac80\uc0ac\ub97c \uc6b0\ud68c\ud558\uc9c0 \ubabb\ud558\uac8c \ud569\ub2c8\ub2e4.<\/li>\n<li><strong>AI Scan\uc744 \uad00\ucc30\ud569\ub2c8\ub2e4.<\/strong> 2\uc8fc\uac04 true positive\u00b7\uc624\ud0d0\u00b7\ubbf8\ud310\uc815 \ube44\uc728\uacfc \ub300\uc0c1 PR \uc218\ub97c \uae30\ub85d\ud558\uace0, fork\/Dependabot \uc81c\uc678 \ubc94\uc704\ub97c \ubb38\uc11c\ud654\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\ube44\ubc00\uac12 \uacbd\ub85c\ub97c \uc815\ub9ac\ud569\ub2c8\ub2e4.<\/strong> <code>.env.example<\/code>\uc5d0\ub294 \uac00\uc9dc \uac12\ub9cc \ub0a8\uae30\uace0, \ud0a4 \ub178\ucd9c \ub300\uc751\uc758 \ud3d0\uae30\u00b7\uc7ac\ubc1c\uae09\u00b7\uc774\ub825 \uc815\ub9ac \uc808\ucc28\ub97c \ub9ac\ud5c8\uc124\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\ube44\uc6a9\uacfc \uacb0\uacfc\ub97c \ud568\uaed8 \ubd05\ub2c8\ub2e4.<\/strong> AI Credit, Actions minutes, \uc0dd\uc131 PR, \uba38\uc9c0\u00b7\ub864\ubc31\ub960\uc744 \uac19\uc740 \uae30\uac04\uc73c\ub85c \ube44\uad50\ud569\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>\ub9ac\uc2a4\ud06c\uc640 \ud55c\uacc4<\/h2>\n<p>AI Scan\uc740 \ubcd1\ud569 \ucc28\ub2e8 \ub3c4\uad6c\uac00 \uc544\ub2c8\uba70, \ubaa8\ub4e0 PR\uc744 \ub2e4\ub8e8\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. agentic autofix\ub3c4 \uae30\ubcf8 \ube0c\ub79c\uce58\uc758 \ucf54\ub4dc \uc2a4\uce90\ub2dd \uacbd\uace0\ub9cc \ub300\uc0c1\uc73c\ub85c \ud569\ub2c8\ub2e4. \uc790\ub3d9 \uc218\uc815 PR\uc774 CodeQL\uc744 \ud1b5\uacfc\ud574\ub3c4 \uc131\ub2a5 \uc800\ud558, \ube44\uc988\ub2c8\uc2a4 \uaddc\uce59 \ubcc0\ud654, \uc811\uadfc \uc81c\uc5b4 \ub204\ub77d\uae4c\uc9c0 \uac80\uc99d\ud574 \uc8fc\uc9c0\ub294 \uc54a\uc2b5\ub2c8\ub2e4. \ub530\ub77c\uc11c \ubcf4\ud638\ub41c \ube0c\ub79c\uce58, \ud544\uc218 \ub9ac\ubdf0, CI \uccb4\ud06c\ub97c \ud574\uc81c\ud558\ub294 \uac83\uc740 \ub864\ubc31 \uc870\uac74\uc774 \uc544\ub2c8\ub77c \ud53c\ud574\uc57c \ud560 \uc124\uacc4\uc785\ub2c8\ub2e4.<\/p>\n<p>\ube44\uc6a9\ub3c4 \uc0ac\uc804 \uac80\uc99d \ud56d\ubaa9\uc785\ub2c8\ub2e4. \ubbf8\ub9ac\ubcf4\uae30 \uae30\ub2a5\uc758 \uacfc\uae08 \uc2dc\uc791 \uc2dc\uc810\uacfc \uc0ac\uc6a9\ub7c9\uc740 \uc870\uc9c1\uc758 opt-in\u00b7\uc815\ucc45\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\uc0b0 \uc0c1\ud55c\uc744 \uc124\uc815\ud558\uc9c0 \uc54a\uc740 \uc0c1\ud0dc\uc5d0\uc11c \ub300\ub7c9 \uacbd\uace0\ub97c \ud55c \ubc88\uc5d0 \ubc30\uc815\ud558\uc9c0 \ub9d0\uace0, 1~5\uac74\uc73c\ub85c \uc2dc\uc791\ud574 \uc2e4\uc81c \uc18c\ubaa8\ub7c9\uc744 \ud655\uc778\ud558\uc2ed\uc2dc\uc624. \uc624\ud0d0\uc774 \ub9ce\uac70\ub098 \uc0ac\ub78c\uc774 \ub418\ub3cc\ub9ac\ub294 \uc218\uc815\uc774 \ubc18\ubcf5\ub418\uba74 \uae30\ub2a5\uc744 \ub044\uace0 \uaddc\uce59\u00b7\ud14c\uc2a4\ud2b8 \ud488\uc9c8\uc744 \uba3c\uc800 \uc190\ubcf4\ub294 \uac83\uc774 \ub9de\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>FAQ<\/h2>\n<h3>GitHub agentic autofix\uac00 \ub9cc\ub4e0 PR\uc740 \uc790\ub3d9\uc73c\ub85c \ubcd1\ud569\ub418\ub098\uc694?<\/h3>\n<p>\uc544\ub2d9\ub2c8\ub2e4. \uacf5\uc2dd \ubc1c\ud45c \uae30\uc900\uc73c\ub85c Copilot\uc740 \uac80\uc99d \ub0b4\uc6a9\uc744 \ud3ec\ud568\ud55c \ucd08\uc548 PR\uc744 \uc5f4\uace0, \ud300\uc774 \uac80\ud1a0\u00b7\uc218\uc815\u00b7\ubcd1\ud569\uc744 \uacb0\uc815\ud569\ub2c8\ub2e4. \ubcf4\ud638 \ube0c\ub79c\uce58\uc640 \uae30\uc874 \uc2b9\uc778 \uaddc\uce59\uc744 \uadf8\ub300\ub85c \uc720\uc9c0\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<h3>AI Scan\uc73c\ub85c CodeQL\uc744 \ub300\uccb4\ud560 \uc218 \uc788\ub098\uc694?<\/h3>\n<p>\uc544\ub2d9\ub2c8\ub2e4. AI Scan\uc740 CodeQL\uc774 \ub2e4\ub8e8\uc9c0 \uc54a\ub294 \uc77c\ubd80 \uc5b8\uc5b4\u00b7\ud504\ub808\uc784\uc6cc\ud06c\ub97c \ubcf4\uc644\ud558\ub294 PR \ub2e8\uc704 \uacbd\uace0\uc774\uba70 \uad8c\uace0 \uacb0\uacfc\uc785\ub2c8\ub2e4. CodeQL, secret scanning, \ud14c\uc2a4\ud2b8, \uc0ac\ub78c \ub9ac\ubdf0\ub97c \ud568\uaed8 \uc6b4\uc601\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n<h3>Anthropic API \ud0a4\uac00 \ud478\uc2dc\uc5d0\uc11c \ub9c9\ud788\uba74 \ubb34\uc5c7\uc744 \ud574\uc57c \ud558\ub098\uc694?<\/h3>\n<p>\uc6b0\ud68c\ubd80\ud130 \ud558\uc9c0 \ub9d0\uace0 \ud574\ub2f9 \ud0a4\ub97c \ud3d0\uae30\u00b7\uc7ac\ubc1c\uae09\ud558\uace0, \ucf54\ub4dc\uc640 \uc774\ub825\uc5d0\uc11c \uc81c\uac70\ud55c \ub4a4 secret store\ub85c \uc62e\uae30\uc2ed\uc2dc\uc624. \uc608\uc81c \ud30c\uc77c\uc5d0\ub294 \uc2e4\uc81c \ud0a4\uac00 \uc544\ub2cc \uba85\ud655\ud55c placeholder\ub9cc \ub461\ub2c8\ub2e4.<\/p>\n<h2>\ucd9c\ucc98 \ubc0f \ucd94\uac00 \uc77d\uae30<\/h2>\n<ul>\n<li><a href=\"https:\/\/github.blog\/changelog\/2026-10-15-agentic-autofix-for-code-scanning-alerts-general-availability\/\" target=\"_blank\" rel=\"noopener\">GitHub: Agentic autofix GA<\/a><\/li>\n<li><a href=\"https:\/\/github.blog\/changelog\/2026-10-15-ai-scan-for-pull-requests-generally-available\/\" target=\"_blank\" rel=\"noopener\">GitHub: AI Scan for pull requests GA<\/a><\/li>\n<li><a href=\"https:\/\/github.blog\/changelog\/2026-10-07-purpose-built-model-for-leaked-secret-detection\/\" target=\"_blank\" rel=\"noopener\">GitHub: purpose-built model for leaked secret detection<\/a><\/li>\n<li><a href=\"https:\/\/github.blog\/changelog\/2026-10-13-secret-scanning-blocks-anthropic-keys-by-default-adds-salesforce\/\" target=\"_blank\" rel=\"noopener\">GitHub: Anthropic \ud0a4 \ud478\uc2dc \ubcf4\ud638 \uae30\ubcf8 \uc801\uc6a9<\/a><\/li>\n<li><a href=\"https:\/\/docs.github.com\/enterprise-cloud@latest\/code-security\/concepts\/code-scanning\/autofix-for-code-scanning\" target=\"_blank\" rel=\"noopener\">GitHub Docs: code scanning autofix<\/a><\/li>\n<li><a href=\"https:\/\/docs.github.com\/code-security\/secret-scanning\/introduction\/about-secret-scanning\" target=\"_blank\" rel=\"noopener\">GitHub Docs: secret scanning<\/a><\/li>\n<\/ul>\n<h2>\ub354 \uae4a\uac8c \uc77d\uae30: \uc2e4\uc804 \uac00\uc774\ub4dc<\/h2>\n<p>\uc774 \ub9ac\ud3ec\ud2b8\ub294 \ucd5c\uadfc \ud750\ub984\uc744 \ube60\ub974\uac8c \ud30c\uc545\ud558\uae30 \uc704\ud55c \uc694\uc57d\uc785\ub2c8\ub2e4. \uc2e4\uc81c \ud504\ub85c\uc81d\ud2b8\uc5d0 \uc801\uc6a9\ud560 \ub54c\ub294 \uc544\ub798\uc758 \uae30\uc900 \uae00\uacfc \ud568\uaed8 \ud655\uc778\ud558\uba74 \ub354 \uc548\uc804\ud569\ub2c8\ub2e4.<\/p>\n<ul>\n<li><a href=\"https:\/\/gilnas.synology.me\/wordpress\/113\/\">AI \uc5d0\uc774\uc804\ud2b8\ub780 \ubb34\uc5c7\uc778\uac00?<\/a><\/li>\n<li><a href=\"https:\/\/gilnas.synology.me\/wordpress\/114\/\">\ud504\ub86c\ud504\ud2b8 \uc778\uc81d\uc158 \ubcf4\uc548 \uccb4\ud06c\ub9ac\uc2a4\ud2b8<\/a><\/li>\n<li><a href=\"https:\/\/gilnas.synology.me\/wordpress\/115\/\">AI \ucf54\ub529 \ub3c4\uad6c \uc548\uc804 \uc6cc\ud06c\ud50c\ub85c<\/a><\/li>\n<li><a href=\"https:\/\/gilnas.synology.me\/wordpress\/118\/\">\uac1c\ubc1c\uc790 \ube14\ub85c\uadf8 \uc560\ub4dc\uc13c\uc2a4 \uc2b9\uc778 \uc804\ub7b5<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>GitHub\uc758 agentic autofix\u00b7AI Scan\u00b7\uc0c8 \ube44\ubc00 \ud0d0\uc9c0 \ud750\ub984\uc744 PR \ub9ac\ubdf0, \uad8c\ud55c, \ube44\uc6a9 \uad00\uc810\uc5d0\uc11c \uc801\uc6a9\ud558\ub294 \uc2e4\ubb34 \uc810\uac80\uc785\ub2c8\ub2e4.<\/p>\n","protected":false},"author":1,"featured_media":637,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-638","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-trend"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/posts\/638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/comments?post=638"}],"version-history":[{"count":0,"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/posts\/638\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/media\/637"}],"wp:attachment":[{"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/media?parent=638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/categories?post=638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gilnas.synology.me\/wordpress\/wp-json\/wp\/v2\/tags?post=638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}