<![CDATA[Have you used an LLM to scan for vulnerabilities in an Open Source codebase?]]>Have you used an LLM to scan for vulnerabilities in an Open Source codebase?

]]>https://board.circlewithadot.net/topic/46e5c943-45e7-41b7-8231-f83398c38489/have-you-used-an-llm-to-scan-for-vulnerabilities-in-an-open-source-codebaseRSS for NodeMon, 25 May 2026 12:41:33 GMTMon, 18 May 2026 21:04:37 GMT60<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Tue, 19 May 2026 09:14:44 GMT]]>@evan @coldfish

I've been trying to work out how to run it under Pytorch to see what it can do.

]]>https://board.circlewithadot.net/post/https://tooting.ch/users/spraoi/statuses/116600477098121393https://board.circlewithadot.net/post/https://tooting.ch/users/spraoi/statuses/116600477098121393Tue, 19 May 2026 09:14:44 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Tue, 19 May 2026 02:15:44 GMT]]>@evan yeah, I saw that the other day. Pretty sure it's going to be default, like having spell check.

]]>https://board.circlewithadot.net/post/https://sfba.social/users/coldfish/statuses/116598829488296815https://board.circlewithadot.net/post/https://sfba.social/users/coldfish/statuses/116598829488296815Tue, 19 May 2026 02:15:44 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Tue, 19 May 2026 00:21:30 GMT]]>@coldfish guess what?

Link Preview Image
Chrome silently installs a 4 GB local LLM on your computer

You did remember to opt out of AI, didn't you?

favicon

theregister (www.theregister.com)

]]>https://board.circlewithadot.net/post/https://cosocial.ca/users/evan/statuses/116598380343718141https://board.circlewithadot.net/post/https://cosocial.ca/users/evan/statuses/116598380343718141Tue, 19 May 2026 00:21:30 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Tue, 19 May 2026 00:14:13 GMT]]>@evan I don't know. I think AI is just gonna be here whether we like it or not. I also think that we're going to be roped into it and suddenly it will magically get much more expensive.

So, I've been on a mission to find the "good" in what's happening here. I think if we get more local AI tools to offset the needs for "big AI" then we may be able to come to some kind of direction that isn't just a horrific dystopian future that I tend to see coming.

My last project: Do document analysis on Gemini, but handle all the vector embedding on Ollama locally. The thing is, so much can be done locally that it hard to believe that the next versions of Chrome or Office won't have an LLM built in, if only to offset the load on the remote AI.

]]>https://board.circlewithadot.net/post/https://sfba.social/users/coldfish/statuses/116598351718645712https://board.circlewithadot.net/post/https://sfba.social/users/coldfish/statuses/116598351718645712Tue, 19 May 2026 00:14:13 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Mon, 18 May 2026 23:21:19 GMT]]>@evan no time like the present

]]>https://board.circlewithadot.net/post/https://cosocial.ca/users/mick/statuses/116598143670970719https://board.circlewithadot.net/post/https://cosocial.ca/users/mick/statuses/116598143670970719Mon, 18 May 2026 23:21:19 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Mon, 18 May 2026 23:07:21 GMT]]>@evan I have used them for work because I was asked to.

]]>https://board.circlewithadot.net/post/https://defcon.social/users/manchicken/statuses/116598088761416769https://board.circlewithadot.net/post/https://defcon.social/users/manchicken/statuses/116598088761416769Mon, 18 May 2026 23:07:21 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Mon, 18 May 2026 22:52:21 GMT]]>@coldfish you tell me!

]]>https://board.circlewithadot.net/post/https://cosocial.ca/users/evan/statuses/116598029808188030https://board.circlewithadot.net/post/https://cosocial.ca/users/evan/statuses/116598029808188030Mon, 18 May 2026 22:52:21 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Mon, 18 May 2026 22:07:30 GMT]]>RE: https://mastodon.social/@reiver/116551433907294642

@evan

Yes, my open-source code-bases.

I find this one of the very useful use-cases for these tools. Using as it a code-reviewer to find bugs.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/reiver/statuses/116597853405152302https://board.circlewithadot.net/post/https://mastodon.social/users/reiver/statuses/116597853405152302Mon, 18 May 2026 22:07:30 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Mon, 18 May 2026 21:43:06 GMT]]>@evan I use Ollama locally to scan my own files and server logs. Does that count?

]]>https://board.circlewithadot.net/post/https://sfba.social/users/coldfish/statuses/116597757484785999https://board.circlewithadot.net/post/https://sfba.social/users/coldfish/statuses/116597757484785999Mon, 18 May 2026 21:43:06 GMT<![CDATA[Reply to Have you used an LLM to scan for vulnerabilities in an Open Source codebase? on Mon, 18 May 2026 21:08:26 GMT]]>@evan hell no

]]>https://board.circlewithadot.net/post/https://chaos.social/users/funbaker/statuses/116597621142827810https://board.circlewithadot.net/post/https://chaos.social/users/funbaker/statuses/116597621142827810Mon, 18 May 2026 21:08:26 GMT