CodeRabbit Secure 免费为开源项目做安全扫描，10 天扫出 1200+ 严重漏洞
CodeRabbit 给开源项目送了个安全体检，10 天扫了 1100 个组织，挖出 1200 多个严重漏洞，还附修复建议。免费门槛不高，自己维护开源仓库的话值得去跑一遍。
CodeRabbit 推出面向开源项目的免费安全扫描服务 Secure。过去 10 天里该服务完成了 100 万美元规模的免费扫描，覆盖 1100 个开源组织，共发现 1200 多个严重级别的漏洞。
Secure 的用法是把代码库交给它扫描，工具会定位其中的安全漏洞，并给出可以直接落地的修复建议，而不是只列出风险清单。对符合条件的开源用户完全免费。
从数据看，1100 个组织里平均每家都有至少一个严重漏洞，说明开源项目的安全问题相当普遍。维护者可以直接申请使用，不必额外采购安全审计服务。
If you are working on an open-source project, do a security scan with @coderabbitai Secure.
It's free for eligible users.
They ran $1M in free scans over 10 days and found 1,200+ critical vulnerabilities across 1,100 open-source organizations.
The security scan will scan your codebase for vulnerabilities and suggest fixes you can implement.
This report is categorized under AITOP's "Products" desk, focusing on US frontier AI labs and Silicon Valley technology leaders. Within our cross-regional analytical framework, it directly maps to AI developer toolchains, coding agents, and engineering workflows and US-China foundation model benchmarks and commercialization comparison. Key entities and technical topics under continuous tracking include CodeRabbit, code security, open-source projects.
Source attribution: curated from Ate-a-Pi (@svpino).
