Akrites tackles flood of AI-generated open source bug reports

Akrites, an initiative launched by the Linux Foundation in June, is working to handle the surge of inaccurate and duplicative AI-generated vulnerability reports hitting open source maintainers. Akrites CTO Christopher Robinson estimates reviewing a single security pull request can take an engineer up to eight hours, with about 200 seconded engineers involved.

• Reviewing one security pull request can take an engineer up to 8 hours
• AI reports are verbose, inaccurate and overestimate severity
• Models lack project context and produce duplicative reports
• Akrites has about 200 seconded engineers working on the problem