Enumerating Security Weaknesses in Public Research Software Repositories

Read full text
Authors: Matthew Armstrong
Cited by: 0

Abstract

cpp.py - runs Flawfinder on C++ repositories in dataset project-checker.py - runs over the dataset file from DOI: 10.1145/3729369 to create Github URLs and check if the project is still available trufflehog.py - runs Trufflehog on repositories in dataset bandit.py - runs Bandit on Python repositories in dataset

Fields of Study & Subjects

Web Application Security Vulnerabilities Software Engineering Research Security and Verification in Computing

Publication details

Journal / source
Zenodo (CERN European Organization for Nuclear Research)
Publication date
6 February 2026