VS Code Silently Tags Commits with Co-Authored-by Copilot Even Without AI Usage
Original: VS Code inserting Co-Authored-by Copilot into commits regardless of usage View original →
What Happened
GitHub PR #310226 revealed that VS Code appends Co-Authored-by: GitHub Copilot to commit messages even when no Copilot feature was used. The story hit near the top of Hacker News with over 680 points.
The Broader Issue
Co-authorship metadata carries legal meaning in open-source projects. When an AI tool inserts itself into authorship records without explicit action, it pollutes that signal. Developers are demanding opt-in rather than opt-out for AI attribution in commits.
Related Articles
Microsoft’s Project Ire classified a 253 KB LOTUSLITE-like Windows DLL as malicious from one decompiler-based run. The sample had only 1 of 72 VirusTotal detections on May 28 and still missed several major EDRs a week later.
Microsoft announced Microsoft 365 E7 Frontier Suite on March 9, 2026 as a premium enterprise package that combines Copilot, Agent 365, and advanced security, identity, and compliance controls. The company said the suite will be available on May 1, 2026 for $99 per user per month, alongside a Frontier program that includes Claude and a research preview called Cowork.
The open-source project Memento sparked a heated debate on Hacker News: as AI writes more code, should the AI session itself become part of the commit history? It raises fundamental questions about code provenance in the age of AI-assisted development.