Question
What are the potential risks associated with relying heavily on code generated from GitHub Copilot? Each correct answer presents part of the solution. (Choose two.)
- A. GitHub Copilot may introduce security vulnerabilities by suggesting code with known exploits. Correct
- B. GitHub Copilot’s suggestions may not always reflect best practices or the latest coding standards. Correct
- C. GitHub Copilot may increase development lead time by providing irrelevant suggestions.
- D. GitHub Copilot may decrease developer velocity by requiring too much time in prompt engineering.
Explanation
Copilot learns from large amounts of public code, so its suggestions can reproduce insecure patterns and must be reviewed and tested like any other code. For the same reason, suggestions can reflect outdated libraries, deprecated APIs or practices that do not match current standards. Irrelevant suggestions or prompt effort are minor productivity costs that a developer can simply ignore, not the core risks of relying on generated code.
