anthropics/oss-scanner

No repository description was reported by the source.

Open original source ↗

Older snapshot: check the original source for current information.

From the publisher

README & documentation

Source preview

Read the project’s overview, installation instructions and usage examples. The original README is the source of truth.

OSS Scanner is a service by Anthropic to scan critical open-source repositories for security vulnerabilities. Learn more about the service at red.anthropic.com/oss-scanner. Note, use of this tool is subject to the terms and conditions outlined in the OSS Scanner terms. Enroll an open-source project by opening a pull request that adds one directory: Our security scanner builds your project in an isolated VM, then analyses it with no Internet access and emails what it finds to primarycontact (and any CCs), each with a reproducer and a proposed patch where available. Reports are model-generated and are not reviewed by a human. Because of this we do not place a 90-day disclosure period on these findings and will not make them public. Project owners should provide project.yaml (to configure the scanner), a Dockerfile (stating how to build the project), and optionally a threatmodel.md (providing project-specific threat modeling). Start from templates/project.yaml: repo and…

anthropics/oss-scanner on GitHub A short preview, not the full document.

Read the full README ↗ · Preview checked 2026-10-28T11:25:55.253Z

Inside the original README — Document outline
  1. OSS Scanner
  2. How to sign up
  3. project.yaml
  4. What happens after the merge
  5. Security considerations
  6. Learn more

Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.

Documentation belongs to its respective authors. Reported project/model license: Apache-2.0. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.

What this repository does

The source does not provide a repository description. Read the project README before evaluating it.

Repository facts

Owner
anthropics
Primary language
Dockerfile
Stars
1,024
Forks
544
Open issues + pull requests
187
License
Apache-2.0
Archived
No
Default branch
main
Created
2026-10-08T17:25:19.000Z
Last push
2026-10-15T10:29:33.000Z

Topics and intended use

No topics were included in the latest source metadata.

Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.

Evaluate before installing

Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.

README and project files

Issues and maintenance discussion

Releases and changelog

Source and freshness

Source: GitHub. Metadata observed 2026-10-15T12:08:24.329Z. Daily imports are snapshots, not real-time monitoring.

Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.

Open original source

Related repositories

mikeroyal/Self-Hosting-Guide