Anthropic 推出 OSS Scanner，免费为开源项目做 AI 安全扫描
Anthropic launches free AI security scans for open-source projects
Anthropic 推出名为 OSS Scanner 的新服务，为选择加入的开源项目提供由自家最强模型执行的定期安全扫描，且不收费。该服务可让开源项目更早获知潜在安全问题，但代价是扫描报告不附带人工复核。Anthropic 表示，AI 工具近几个月已帮助发现一些重大开源安全漏洞，例如 5 月影响几乎所有 Linux 发行版的 Copy Fail 漏洞，同时部分开源项目正疲于应对 AI 生成的大量漏洞报告。
推荐理由
AI 评分 60
Anthropic 免费为开源项目做安全扫描，但报告不含人工复核，读者可据此判断这类自动化漏洞发现的能力边界。
主题
正文
当前显示原文，中文全文译文尚未就绪。
Anthropic’s offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner . It says open-source projects that opt-in will get “thorough, periodic security scans by our strongest models at no cost.” That could mean open-source projects get alerted about possible security issues sooner, but the trade-off is that OSS Scanner’s reports don’t come with human review:
OSS Scanner is far from the first AI bug hunting helper out there. AI tools have helped find some major security flaws in open-source software over recent months, like the “Copy Fail” bug that impacted nearly every Linux distro in May. At the same time, some open-source projects are struggling to keep up with the sudden onslaught of AI-generated bug reports, including Linus Torvalds and even Google .