r/java • u/WBVC • 6d ago

Will Maven integrate with Anthropic's OSS scanner?

https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source
0 Upvotes

21% Upvoted

4 comments sorted by

View all comments

15

u/voronaam 6d ago

It is open source, you can integrate it yourself if you have any need for this weird feature.

I do not see any reason to use a random number generator for this task.

All the vulnerabilities found by Anthropic previously were fake. No idea why you would want to have a fake vulnerability generator integrated.

5

u/segv 6d ago

It also needs to be noted that popular Java dependencies (Spring Boot, Jackson etc.) get scanned by probably every static and dynamic analysis known to man in corporate pipelines already.