The GitHub security extension lets you browse code scanning alerts, ask Copilot to explain or fix them, and run /security-review without leaving the Copilot app.