Anthropic launches OSS Scanner
A free, opt-in service that scans open source repositories for security vulnerabilities using Anthropic's strongest models
Designed for eligible open source projects, it provides periodic security scans and private reports with reproducible findings and proposed patches
I've already submitted Here's how to submit yours:
- Add a Dockerfile to your repo that installs dependencies and builds your project
- Optional: Create a threat_model.md describing security risks and critical components
- Fork anthropics/oss-scanner
- Create projects//project.yaml with your repo URL, contact email, and configuration paths
- Validate with python tools/validate.py and test with tools/check
- Open a PR, complete the checklist, and sign the CLA
- Wait for Anthropic to review and approve your submission
Once accepted, you'll receive security reports directly by email
Repository:
显示更多