Martin Steigerwald <[email protected]> wrote: > I'd expect a wave of AI reports, but once they are fixed, these will not > be reported again. Then maybe after using even better models and agents > there might be another wave of more difficult to find issues that are > reported. But then these are fixed as well. > > I would expect that a peak may be reached where AI only finds issues > rarely anymore.
This sounds akin to proposing that, effectively, there will be (almost) no more security vulnerabilities in our software. I don't see that happening. The imbalance between the cost of identifying and reporting issues versus analyzing and fixing them as well as the cost of software development and maintenance (both monetary as well as in terms of infrastructure, support, and human time and brain cells) in Open Source projects will, I expect, prevent this utopic vision from coming true. -Jan
