| From: | Noah Misch <noah(at)leadboat(dot)com> |
|---|---|
| To: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Add Dockerfile for OSS Scanner |
| Date: | 2026-10-17 03:22:15 |
| Message-ID: | 20261017032215.26.noahmisch@microsoft.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On 2026-10-08, Anthropic launched its "OSS Scanner"
(https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source)
The plan is to enroll security(at)postgresql(dot)org for automated notification of
vulnerabilities it finds. One of the steps is to provide a Dockerfile that
the scanner will use to get a PostgreSQL build. The attached patch adds one
to postgresql.git. It mimics CI.
If using the test recipe in the header comment, change "git clone
https://github.com/anthropics/oss-scanner/" to "git clone -b enroll-postgresql
https://github.com/nmisch/oss-scanner/". That's a temporary need until
enrollment completes.
| Attachment | Content-Type | Size |
|---|---|---|
| dockerfile-oss-scanner-v1.patch | text/x-leadboat-lookup-plain | 4.5 KB |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | shihao zhong | 2026-10-17 03:23:05 | Re: [PATCH] Fix grouping-set nulling of variable-free grouping expressions |
| Previous Message | C W | 2026-10-17 03:11:15 | Re: Fix doc: explanation of how postgres works when OOM killer is invoked |