SBOM Starter Kit: Get Your Copy
Understand and reduce the potential risks that can come from using generative AI tools in software development.
Generative AI tools like GitHub Copilot have become increasingly popular among software developers, and for good reason. These tools can significantly improve productivity and even strengthen developer satisfaction. But for all of their benefits, AI coding tools pose potential risks, too. There are concerns related to open source license compliance, security, code maintainability, privacy, and more.
FOSSA helps organizations tag AI-produced code, identify AI tool-assisted snippets, and manage AI coding tool-related license compliance and security concerns — mission-critical elements of an effective risk-management strategy.
Maintain an accurate component inventory, and get visibility into potential license compliance and security risks from AI-assisted code.
Track where you’ve included AI tool-assisted code in your applications. Stay prepared for regulatory and/or policy changes that may require you to rip and replace ML-assisted portions.
Implement process-based guardrails for an additional layer of protection in areas like open source license compliance, maintainability, and code privacy.
Enable GitHub Copilot’s “Duplication Detection” filter to avoid using exact matches of existing open source libraries in your code
Closely review comments generated by Copilot (or other AI coding tools) to make sure you understand and agree with them
Decline to grant GitHub Copilot permission to use your code snippets for product improvements
