| From: | Andres Freund <andres(at)anarazel(dot)de> |
|---|---|
| To: | Noah Misch <noah(at)leadboat(dot)com> |
| Cc: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: Add Dockerfile for OSS Scanner |
| Date: | 2026-10-17 15:58:20 |
| Message-ID: | ds6kxeinpqwginrjbw75nfjhxh26dekjqc3yrzz4jpnauqbfsp@q3l6wiuuey4f |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Hi,
On 2026-10-16 20:22:15 -0700, Noah Misch wrote:
> On 2026-10-08, Anthropic launched its "OSS Scanner"
> (https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source)
> The plan is to enroll security(at)postgresql(dot)org for automated notification of
> vulnerabilities it finds. One of the steps is to provide a Dockerfile that
> the scanner will use to get a PostgreSQL build. The attached patch adds one
> to postgresql.git. It mimics CI.
Can't we just use the actual container used for CI for that? I don't think
it's good to have multiple almost equivalent recipes for testing postgres in
different forms.
Greetings,
Andres Freund
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Mihail Nikalayeu | 2026-10-17 16:10:00 | Re: Resetting snapshots during the first phase of [CREATE |RE]INDEX CONCURRENTLY |
| Previous Message | Ayush Tiwari | 2026-10-17 15:46:58 | Re: Add Dockerfile for OSS Scanner |