Hi, On 2026-10-16 20:22:15 -0700, Noah Misch wrote: > On 2026-10-08, Anthropic launched its "OSS Scanner" > (https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source). > The plan is to enroll [email protected] for automated notification of > vulnerabilities it finds. One of the steps is to provide a Dockerfile that > the scanner will use to get a PostgreSQL build. The attached patch adds one > to postgresql.git. It mimics CI.
Can't we just use the actual container used for CI for that? I don't think it's good to have multiple almost equivalent recipes for testing postgres in different forms. Greetings, Andres Freund
