攻击型智能体全天候运作，开源维护者却只能下班后干活。这个问题亟待解决。 @coderabbitai 投入 100 万美元为开源维护者提供免费 Deep Scan：覆盖 1,125 个公开仓库，发现 1,215 个高危或严重问题，其中 75 个已修复，项目无需承担任何费用。 @coderabbitai 的 Deep Scan 会先梳理仓库中每个入口点、信任边界和访问检查，再沿着攻击者可能走的路径逐一排查，就像渗透测试人员覆盖整个代码库那样。
Exploit agents work 24/7, open source maintainers work after hours. that problem need to be solved.
@coderabbitai put $1M into free Deep Scans for open-source maintainers: 1,215 high or critical findings across 1,125 public repos, 75 already fixed, at no cost to the projects.
@coderabbitai's Deep Scan first maps every entry point, trust boundary and access check in a repo, then walks the paths an attacker would take, like a penetration tester covering the whole codebase.
在 X 查看被引用的帖子Attackers have AI agents probing open-source code 24/7 & we think maintainers should too!
CodeRabbit ran Deep Scans on 1,125 public repos with 1,215 high or critical findings, 75 of which are already fixed.
Your first Deep Scan is on us, up to $1K for orgs with 2+ people.
来源：Rohan Paul · x.com