Re: OSS Scanner service (Anthropic)

["Alex Bennée" <alex.bennee@linaro.org>]

Stefan Weil via qemu development <qemu-devel@nongnu.org> writes:

> Dear all,
>
> citing https://github.com/anthropics/oss-scanner:
>
> "OSS Scanner is a service by Anthropic to scan critical open-source
> repositories for security vulnerabilities".
>
> Unless QEMU maintainers already have access to the best available AI
> models, this might be a good chance to get such access. I think that
> QEMU matches the required criteria.

There have been offers from re-sellers but they main issue is what would
we do with even more bugs? Are they offering to do the triage work and
filter out the non-virt use case bugs and search for duplicated already
in the bug tracker?

I don't doubt they can find more bugs - but do we have the maintainer
bandwidth to deal with them? Is anyone volunteering to take on the
fire-hose?

>
> Best regards
> Stefan W.

-- 
Alex Bennée
Virtualisation Tech Lead @ Linaro