Add Dockerfile for OSS Scanner

From: Noah Misch <noah(at)leadboat(dot)com>
To: pgsql-hackers(at)postgresql(dot)org
Subject: Add Dockerfile for OSS Scanner
Date: 2026-10-17 03:22:15
Message-ID: 20261017032215.26.noahmisch@microsoft.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 2026-10-08, Anthropic launched its "OSS Scanner"
(https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source)
The plan is to enroll security(at)postgresql(dot)org for automated notification of
vulnerabilities it finds. One of the steps is to provide a Dockerfile that
the scanner will use to get a PostgreSQL build. The attached patch adds one
to postgresql.git. It mimics CI.

If using the test recipe in the header comment, change "git clone
https://github.com/anthropics/oss-scanner/" to "git clone -b enroll-postgresql
https://github.com/nmisch/oss-scanner/". That's a temporary need until
enrollment completes.

Attachment Content-Type Size
dockerfile-oss-scanner-v1.patch text/x-leadboat-lookup-plain 4.5 KB

Browse pgsql-hackers by date

  From Date Subject
Next Message shihao zhong 2026-10-17 03:23:05 Re: [PATCH] Fix grouping-set nulling of variable-free grouping expressions
Previous Message C W 2026-10-17 03:11:15 Re: Fix doc: explanation of how postgres works when OOM killer is invoked