On Sat, Oct 17, 2026 at 11:58:20AM -0400, Andres Freund wrote:
> On 2026-10-16 20:22:15 -0700, Noah Misch wrote:
> > On 2026-10-08, Anthropic launched its "OSS Scanner"
> > (https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source)
> > The plan is to enroll security(at)postgresql(dot)org for automated notification of
> > vulnerabilities it finds. One of the steps is to provide a Dockerfile that
> > the scanner will use to get a PostgreSQL build. The attached patch adds one
> > to postgresql.git. It mimics CI.
>
> Can't we just use the actual container used for CI for that?
I had not realized it was that easy. Attached.