Hi all, Not sure if any folks have seen this, but Anthropic is now offering free periodic security scans of open source projects:
https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source Given the recent discussion about LLMs, I thought this might be worth looking into as a fairly non-intrusive way to benefit from AI. From what I can tell, it scans every so often and emails a report to some contact (maybe the existing security@ list). It doesn't open issues or PRs. Some more info here: https://github.com/anthropics/oss-scanner WDYT? Thanks, Ethan
