Dataset: 2026-10-27-catalog-ai-v2
Ruleset: b2e8889c66f7
Scanned: 2026-10-27
Window: February–September 15, 2026

Catalog tracking observation. This repository is measured with the same fixed window and ruleset, but it is not part of the published benchmark or its aggregate claims.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

01Result

github/codeql ↗

github/codeql AI coding statistics: 12.3%

of 3,402 commits in February–September 15, 2026 were committed by an AI agent — a floor, not an estimate

12.3% agent · top contributor 24%44 contributors

org-wide

Adoption is broad. Many contributors are committing agent-authored work, which is what a real organisational rollout looks like.

420

agent commits

2,982

other considered commits

agent contributors

24%

largest contributor

02Drivers

What shapes this result

Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.

Assisted or autonomous

319assisted

101autonomous

Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.

Agent share by month

Peak month: 19.9%. Bars are scaled to that peak, not to 100%.

Which agents

Agent	Vendor	Commits	Share
GitHub Copilot	GitHub	397	11.7%
Claude Code	Anthropic	23	0.7%

03Evidence

Inspect the matches

Public commit samples let you inspect the signatures behind the aggregate result.

Matched commit samples

be6d5b76 on GitHubAddress peer review: Replace 'pull_request_target' with a schedule for theGitHub Copilot
82c2fd1c on GitHubDeprecate ParenExpr and remove all referencesGitHub Copilot
ff260f57 on GitHubSkip extracting ast.ParenExpr nodesGitHub Copilot
f5fa0103 on GitHubAdd addContentTypeParser, drop after and ready, and date the change note iClaude Code
2b19c841 on GitHubJS: recognize Fastify servers reached through chainable server methodsClaude Code
cf4c3d09 on GitHubC#: address further OData review commentsClaude Code

04Method

What entered the denominator

The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.

Exclusion ledger

Commits in window	4,454
Merge commits removed	−945
CI / dependency bots removed	−107
Considered	3,402

Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.

Continue exploring

Claude Code commitsBrowse repositories with detected Claude Code signatures →GitHub Copilot commitsBrowse repositories with detected GitHub Copilot signatures →GitHub AI commit analyzerInspect another repository with the same evidence model →

Reproduce this observation

Run the same detector locally.

Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.

npx qmmit-cli github/codeql

Scan another repository

Try

Month	Agent share	Considered commits
2026-02	3.7%	464
2026-03	6.3%	394
2026-04	9.7%	393
2026-05	13.5%	384
2026-06	15%	494
2026-07	19.2%	317
2026-08	19.9%	523
2026-09	11.3%	433