Something like Claude Mythos, ChatGPT Cyber and maybe V12? Not sure if latter offers free plan for FOSS projects.
Community can share some other too if they offer free plan for FOSS projects and with sources of actual findings reported by FOSS maintainers and not benchmaxxing or sloppy articles about how good it is at finding “security vulnerabilities”.
I agree. If this hasn’t been done yet, I would very much desire for this to be done.
This seems to be some very low-hanging fruit since the overall process should not take long (applying and possibly undertaking the tests) while chances are good that at least some low-severity vulnerabilities are found.
Judging from the speed that Opus 5 (in non-fast mode) moves through my Qubes test bench with dom0 access, I would say that their models are fast in their digital movements and tests with Mythos shouldn’t take too long.
To be fair though, I also judge from marketing materials in this post.