. ” That could mean open-source projects get alerted about possible security issues sooner, but the trade-off is that OSS Scanner’s analysiss don’t come with human review:
The outputs of this opt-in vulnerability scanner will be fully model-generated, without human review or triage. Th …
Read the full story at The Verge. Anthropic’s offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner. This will enable faster and more frequent scanning, but means that it is possible analysiss will be incorrect or invalid.
