IBL News | New York
Anthropic, this month, launched OSS Scanner, a vulnerability scanner designed to discover vulnerabilities in open-source projects.
The feature is part of Anthropic’s Project Glasswing. The San Francisco lab invited open-source maintainers to join and receive thorough, periodic security scans at no cost.
Anthropic said it has discovered over 29,000 candidate vulnerabilities but has only been able to manually review and triage approximately 6,000 of them.
“We are working on scaling our vulnerability disclosures. Meanwhile, more frequently, maintainers who receive our first reports simply ask us for a bulk submission of all unverified reports with proposed patches,” said the company in a blog post.
To date, Anthropic has sent nearly 5,000 reports directly to maintainers.
Core maintainers of eligible projects can enroll by submitting a PR to this GitHub repo.