$ the-wire · showcase
FFmpeg and Tesseract join OSS Scanner
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
OSS Scanner picked up two long-lived C/C++ projects in the last day, FFmpeg as three parallel sanitizer builds and Tesseract with a maintainer-signed enrollment, extending continuous fuzzing coverage to a codec stack and an OCR engine that ship inside a great many other programs.
Add FFmpeg anthropics/oss-scanner
The enrollment builds FFmpeg master three ways under clang-19 with ASan+UBSan: the tree without assembly, the same with assembly in build-asm, and an --enable-ossfuzz build in build-fuzz from which libFuzzer targets for any decoder, encoder, demuxer, or bitstream filter link on demand. Reports route to the ffmpeg-security address published at ffmpeg.org/security.html, and the FATE samples plus ...
Merge pull request #1277 from michaelni/ffmpeg anthropics/oss-scanner
The FFmpeg enrollment landed as a merge from michaelni's branch, so it is in the tree rather than pending review.
Enroll Tesseract anthropics/oss-scanner
Tesseract's own maintainer filed the enrollment for projects/tesseract, checking off the core-maintainer, terms, and inclusion-criteria boxes; the PR notes it was prepared with OpenCode running qwen3.8-27b-thinking.
Enroll Signal-Android anthropics/oss-scanner
Signal-Android's enrollment is still in review and sets the scanner to use the project's own Gradle heap size, a detail that decides whether the Android build actually completes inside the sandbox.
