Trail of Bits and OpenAI launched 'Patch the Planet', a joint initiative pairing security engineers with open-source maintainers and frontier AI models (GPT-5.5-Cyber, Codex) to find and fix vulnerabilities in critical open-source projects. In the first week alone, the effort covered 19 projects including cURL, Python, PyPI, aiohttp, RustCrypto, and Sigstore, producing hundreds of discovered bugs, 64 pull requests, and 51 filed issues — with 37 PRs already merged. Beyond bug reports, contributions include new fuzzing harnesses, CI security scanning, supply-chain tooling, and correctness fixes. The post also offers guidance for maintainers overwhelmed by AI-generated reports, recommending deduplication automation, false-positive filtering, and project-specific AGENTS.md files to improve signal quality.
