Anthropic Launches OSS Scanner, a Free AI Vulnerability Scanner
- Anthropic’s OSS Scanner is here, and it’s treating open-source maintainers like meat wallets for its Claude Mythos model. It scans codebases without human review, dumping 77 critical and 803 high findings in 11 days. The trade-off? You get speed, but you also get the triage headache. While 88% of audited bugs were valid, that “no human review” clause means you’re likely drowning in duplicates or inflated severity reports. It’s not a silver bullet; it’s just another layer of bureaucratic friction disguised as automation. If your project isn’t enrolled via PR yet, you’re flying blind while others pay the hash manifest cost. Fix your Dockerfile, validate your patches, and stop expecting AI to do your job for free.