{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:AML6G55CFXUG6GFORK3EJBICHV","short_pith_number":"pith:AML6G55C","canonical_record":{"source":{"id":"2211.06953","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-13T16:54:49Z","cross_cats_sorted":[],"title_canon_sha256":"7209b8f11ad8390c4edf219073ca7b64299046adf375593353e1133382221514","abstract_canon_sha256":"4a9dfc1820bc52593dbc8af47439f8f6910ed65e2e4ac2dee7ed71db8362b447"},"schema_version":"1.0"},"canonical_sha256":"0317e377a22de86f18ae8ab64485023d7bd2eff876e544e6ab66c287e745076a","source":{"kind":"arxiv","id":"2211.06953","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.06953","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"arxiv_version","alias_value":"2211.06953v2","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.06953","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"pith_short_12","alias_value":"AML6G55CFXUG","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"pith_short_16","alias_value":"AML6G55CFXUG6GFO","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"pith_short_8","alias_value":"AML6G55C","created_at":"2026-07-05T05:19:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:AML6G55CFXUG6GFORK3EJBICHV","target":"record","payload":{"canonical_record":{"source":{"id":"2211.06953","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-13T16:54:49Z","cross_cats_sorted":[],"title_canon_sha256":"7209b8f11ad8390c4edf219073ca7b64299046adf375593353e1133382221514","abstract_canon_sha256":"4a9dfc1820bc52593dbc8af47439f8f6910ed65e2e4ac2dee7ed71db8362b447"},"schema_version":"1.0"},"canonical_sha256":"0317e377a22de86f18ae8ab64485023d7bd2eff876e544e6ab66c287e745076a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:19:20.614730Z","signature_b64":"yWYvI2+Ej6A6D4k3jtcgGX6w9xqVkuS8uIED+DeXyXRZJ+2DG9QJgJXm2ew5do1HwgS5AD8OrZYK0hlJmttdCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0317e377a22de86f18ae8ab64485023d7bd2eff876e544e6ab66c287e745076a","last_reissued_at":"2026-07-05T05:19:20.614272Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:19:20.614272Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.06953","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:19:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"91AMX8WZFHXrR7/kVLeaLVyTczaj29cp9DK8kd5OituFHGN2LsloM81FDubHWSKwtLShz6eLLy36vxPCKN8jBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:50:07.153253Z"},"content_sha256":"e6a41bc206044cec4c4e784518e47eb2fcaadab0e7b422934c4b7a9a23dbf669","schema_version":"1.0","event_id":"sha256:e6a41bc206044cec4c4e784518e47eb2fcaadab0e7b422934c4b7a9a23dbf669"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:AML6G55CFXUG6GFORK3EJBICHV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Collaborative Application Security Testing for DevSecOps: An Empirical Analysis of Challenges, Best Practices and Tool Support","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Mansooreh Zahedi, Muhammad Ali Babar, Roshan Namal Rajapakse","submitted_at":"2022-11-13T16:54:49Z","abstract_excerpt":"DevSecOps is a software development paradigm that places a high emphasis on the culture of collaboration between developers (Dev), security (Sec) and operations (Ops) teams to deliver secure software continuously and rapidly. Adopting this paradigm effectively, therefore, requires an understanding of the challenges, best practices and available solutions for collaboration among these functional teams. However, collaborative aspects related to these teams have received very little empirical attention in the DevSecOps literature. Hence, we present a study focusing on a key security activity, App"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.06953","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.06953/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:19:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2HBowqUaTRW8A0+DdY+aORYVHwXM85mrssK33/OlRVSUlPHo2lbQfNlOVA/2RLpIsi1QhvKZB/YajJ96q+yBDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:50:07.153774Z"},"content_sha256":"b63303d67b06ac9cafe6e9e0b287f9bef7ffe83394515b3ccb49be8782448d35","schema_version":"1.0","event_id":"sha256:b63303d67b06ac9cafe6e9e0b287f9bef7ffe83394515b3ccb49be8782448d35"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AML6G55CFXUG6GFORK3EJBICHV/bundle.json","state_url":"https://pith.science/pith/AML6G55CFXUG6GFORK3EJBICHV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AML6G55CFXUG6GFORK3EJBICHV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T21:50:07Z","links":{"resolver":"https://pith.science/pith/AML6G55CFXUG6GFORK3EJBICHV","bundle":"https://pith.science/pith/AML6G55CFXUG6GFORK3EJBICHV/bundle.json","state":"https://pith.science/pith/AML6G55CFXUG6GFORK3EJBICHV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AML6G55CFXUG6GFORK3EJBICHV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:AML6G55CFXUG6GFORK3EJBICHV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4a9dfc1820bc52593dbc8af47439f8f6910ed65e2e4ac2dee7ed71db8362b447","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-13T16:54:49Z","title_canon_sha256":"7209b8f11ad8390c4edf219073ca7b64299046adf375593353e1133382221514"},"schema_version":"1.0","source":{"id":"2211.06953","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.06953","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"arxiv_version","alias_value":"2211.06953v2","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.06953","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"pith_short_12","alias_value":"AML6G55CFXUG","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"pith_short_16","alias_value":"AML6G55CFXUG6GFO","created_at":"2026-07-05T05:19:20Z"},{"alias_kind":"pith_short_8","alias_value":"AML6G55C","created_at":"2026-07-05T05:19:20Z"}],"graph_snapshots":[{"event_id":"sha256:b63303d67b06ac9cafe6e9e0b287f9bef7ffe83394515b3ccb49be8782448d35","target":"graph","created_at":"2026-07-05T05:19:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.06953/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DevSecOps is a software development paradigm that places a high emphasis on the culture of collaboration between developers (Dev), security (Sec) and operations (Ops) teams to deliver secure software continuously and rapidly. Adopting this paradigm effectively, therefore, requires an understanding of the challenges, best practices and available solutions for collaboration among these functional teams. However, collaborative aspects related to these teams have received very little empirical attention in the DevSecOps literature. Hence, we present a study focusing on a key security activity, App","authors_text":"Mansooreh Zahedi, Muhammad Ali Babar, Roshan Namal Rajapakse","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-13T16:54:49Z","title":"Collaborative Application Security Testing for DevSecOps: An Empirical Analysis of Challenges, Best Practices and Tool Support"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.06953","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e6a41bc206044cec4c4e784518e47eb2fcaadab0e7b422934c4b7a9a23dbf669","target":"record","created_at":"2026-07-05T05:19:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4a9dfc1820bc52593dbc8af47439f8f6910ed65e2e4ac2dee7ed71db8362b447","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-13T16:54:49Z","title_canon_sha256":"7209b8f11ad8390c4edf219073ca7b64299046adf375593353e1133382221514"},"schema_version":"1.0","source":{"id":"2211.06953","kind":"arxiv","version":2}},"canonical_sha256":"0317e377a22de86f18ae8ab64485023d7bd2eff876e544e6ab66c287e745076a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0317e377a22de86f18ae8ab64485023d7bd2eff876e544e6ab66c287e745076a","first_computed_at":"2026-07-05T05:19:20.614272Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:19:20.614272Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yWYvI2+Ej6A6D4k3jtcgGX6w9xqVkuS8uIED+DeXyXRZJ+2DG9QJgJXm2ew5do1HwgS5AD8OrZYK0hlJmttdCg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:19:20.614730Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.06953","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e6a41bc206044cec4c4e784518e47eb2fcaadab0e7b422934c4b7a9a23dbf669","sha256:b63303d67b06ac9cafe6e9e0b287f9bef7ffe83394515b3ccb49be8782448d35"],"state_sha256":"9b3e76ef3e4736348431d879cb4e47fb07002004f43cd06640779074a70da091"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lNbopK1lk3gGJsHs84Qw2t6F1pn7WCQbALRFOUz8TgqTWxDj1Z/aYBCmvhrj4Qdabz8ADAJnzdxI8e3ZyUPFCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T21:50:07.159249Z","bundle_sha256":"a98a92873cb547a58b6505d60b4bb6fa9328f28b8a1065f89a7899c612e325fa"}}