Question

A backend developer accepts a GitHub Copilot suggestion that implements password hashing using an outdated MD5 algorithm. The developer notices the code compiles and passes existing unit tests. According to responsible AI usage principles, what is the most appropriate next step before merging this code?

Accepted Answer

Independently review and validate the suggestion against current security best practices, replacing MD5 with a stronger algorithm if needed.

Answer

Merge the code since it compiles and passes all existing unit tests, which confirms correctness.

Answer

Trust the suggestion because Copilot is trained on a large corpus of high-quality public code repositories.

Answer

Disable GitHub Copilot entirely, since it produced an insecure suggestion and cannot be relied upon for any task.