{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BFG7FW62RFPZ74CTF5NQULVRTP","short_pith_number":"pith:BFG7FW62","canonical_record":{"source":{"id":"2311.11177","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-11-18T22:12:59Z","cross_cats_sorted":[],"title_canon_sha256":"84da51c2eb8af9e3170366ce27f433f8bc576888624b729866fcd777d0df3925","abstract_canon_sha256":"d957e6f6c08bdf7e907511250f033bdd02f2a1a656273395dfd4fedea58aa009"},"schema_version":"1.0"},"canonical_sha256":"094df2dbda895f9ff0532f5b0a2eb19bf0404b4d152c78bc4e3f50b6e3446ba4","source":{"kind":"arxiv","id":"2311.11177","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11177","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11177v1","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11177","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"pith_short_12","alias_value":"BFG7FW62RFPZ","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"pith_short_16","alias_value":"BFG7FW62RFPZ74CT","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"pith_short_8","alias_value":"BFG7FW62","created_at":"2026-07-05T07:14:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BFG7FW62RFPZ74CTF5NQULVRTP","target":"record","payload":{"canonical_record":{"source":{"id":"2311.11177","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-11-18T22:12:59Z","cross_cats_sorted":[],"title_canon_sha256":"84da51c2eb8af9e3170366ce27f433f8bc576888624b729866fcd777d0df3925","abstract_canon_sha256":"d957e6f6c08bdf7e907511250f033bdd02f2a1a656273395dfd4fedea58aa009"},"schema_version":"1.0"},"canonical_sha256":"094df2dbda895f9ff0532f5b0a2eb19bf0404b4d152c78bc4e3f50b6e3446ba4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:14:29.384017Z","signature_b64":"ZmpC1s7wXxn7OJ0LuIz/PUX1xYRSjCINEyaomXSw+9MUIHziaP1QTu6fViNx+T7gUZe0Z3TeQiGtmadJPHB0DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"094df2dbda895f9ff0532f5b0a2eb19bf0404b4d152c78bc4e3f50b6e3446ba4","last_reissued_at":"2026-07-05T07:14:29.383599Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:14:29.383599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.11177","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:14:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DGEte6KSEkF4owoIyq+NGGaQ3W5IXlzkRTMpythHyeIFMZRo7rU3lWr40e72WD/ZQY7VPPTmvc5SsvKFF+wkDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:48:35.913754Z"},"content_sha256":"78d889d24652ccd5361ab0bc7216cd8626eaadb78a4363d6b46bd9a77ad784f2","schema_version":"1.0","event_id":"sha256:78d889d24652ccd5361ab0bc7216cd8626eaadb78a4363d6b46bd9a77ad784f2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BFG7FW62RFPZ74CTF5NQULVRTP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Assessing the Security of GitHub Copilot Generated Code -- A Targeted Replication Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Amjed Tahir, Arghavan Moradidakhel, Foutse Khomh, Michael Joshua Bishop, Shawn Rasheed, Vahid Majdinasab","submitted_at":"2023-11-18T22:12:59Z","abstract_excerpt":"AI-powered code generation models have been developing rapidly, allowing developers to expedite code generation and thus improve their productivity. These models are trained on large corpora of code (primarily sourced from public repositories), which may contain bugs and vulnerabilities. Several concerns have been raised about the security of the code generated by these models. Recent studies have investigated security issues in AI-powered code generation tools such as GitHub Copilot and Amazon CodeWhisperer, revealing several security weaknesses in the code generated by these tools. As these "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11177","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.11177/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:14:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0K6YMYEKpGpBpw0RRRVoEZRxA1U9B36+/loZmWsFQ7/H+5+FmZIkVCzpN0HeveuaELaUpEFnHpYsnKzGiqq1DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:48:35.914122Z"},"content_sha256":"0cf542fd4ef50ac2aa18502b84389490e3890e00a58218e60c09dde536dc6fd3","schema_version":"1.0","event_id":"sha256:0cf542fd4ef50ac2aa18502b84389490e3890e00a58218e60c09dde536dc6fd3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BFG7FW62RFPZ74CTF5NQULVRTP/bundle.json","state_url":"https://pith.science/pith/BFG7FW62RFPZ74CTF5NQULVRTP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BFG7FW62RFPZ74CTF5NQULVRTP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T15:48:35Z","links":{"resolver":"https://pith.science/pith/BFG7FW62RFPZ74CTF5NQULVRTP","bundle":"https://pith.science/pith/BFG7FW62RFPZ74CTF5NQULVRTP/bundle.json","state":"https://pith.science/pith/BFG7FW62RFPZ74CTF5NQULVRTP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BFG7FW62RFPZ74CTF5NQULVRTP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BFG7FW62RFPZ74CTF5NQULVRTP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d957e6f6c08bdf7e907511250f033bdd02f2a1a656273395dfd4fedea58aa009","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-11-18T22:12:59Z","title_canon_sha256":"84da51c2eb8af9e3170366ce27f433f8bc576888624b729866fcd777d0df3925"},"schema_version":"1.0","source":{"id":"2311.11177","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.11177","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"arxiv_version","alias_value":"2311.11177v1","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.11177","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"pith_short_12","alias_value":"BFG7FW62RFPZ","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"pith_short_16","alias_value":"BFG7FW62RFPZ74CT","created_at":"2026-07-05T07:14:29Z"},{"alias_kind":"pith_short_8","alias_value":"BFG7FW62","created_at":"2026-07-05T07:14:29Z"}],"graph_snapshots":[{"event_id":"sha256:0cf542fd4ef50ac2aa18502b84389490e3890e00a58218e60c09dde536dc6fd3","target":"graph","created_at":"2026-07-05T07:14:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.11177/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI-powered code generation models have been developing rapidly, allowing developers to expedite code generation and thus improve their productivity. These models are trained on large corpora of code (primarily sourced from public repositories), which may contain bugs and vulnerabilities. Several concerns have been raised about the security of the code generated by these models. Recent studies have investigated security issues in AI-powered code generation tools such as GitHub Copilot and Amazon CodeWhisperer, revealing several security weaknesses in the code generated by these tools. As these ","authors_text":"Amjed Tahir, Arghavan Moradidakhel, Foutse Khomh, Michael Joshua Bishop, Shawn Rasheed, Vahid Majdinasab","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-11-18T22:12:59Z","title":"Assessing the Security of GitHub Copilot Generated Code -- A Targeted Replication Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.11177","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:78d889d24652ccd5361ab0bc7216cd8626eaadb78a4363d6b46bd9a77ad784f2","target":"record","created_at":"2026-07-05T07:14:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d957e6f6c08bdf7e907511250f033bdd02f2a1a656273395dfd4fedea58aa009","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2023-11-18T22:12:59Z","title_canon_sha256":"84da51c2eb8af9e3170366ce27f433f8bc576888624b729866fcd777d0df3925"},"schema_version":"1.0","source":{"id":"2311.11177","kind":"arxiv","version":1}},"canonical_sha256":"094df2dbda895f9ff0532f5b0a2eb19bf0404b4d152c78bc4e3f50b6e3446ba4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"094df2dbda895f9ff0532f5b0a2eb19bf0404b4d152c78bc4e3f50b6e3446ba4","first_computed_at":"2026-07-05T07:14:29.383599Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:14:29.383599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZmpC1s7wXxn7OJ0LuIz/PUX1xYRSjCINEyaomXSw+9MUIHziaP1QTu6fViNx+T7gUZe0Z3TeQiGtmadJPHB0DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:14:29.384017Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.11177","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:78d889d24652ccd5361ab0bc7216cd8626eaadb78a4363d6b46bd9a77ad784f2","sha256:0cf542fd4ef50ac2aa18502b84389490e3890e00a58218e60c09dde536dc6fd3"],"state_sha256":"bf7b3a4c7b432b20d20f248ad7f9ce87e4a5909747b96037db19cd0d579c1d4e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1nQR7sLPpiMYqXdCJ5UpoMdhC9W4LiZem3UK58MRuKfZSRXWQlGBSFtYjUhdMgNWuZVAkCXi+F9fspAWVcl6Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T15:48:35.916086Z","bundle_sha256":"b486267c5cc175c2836fcb27f2fc446145ae117cb75cb870fe637ff86fcdd7a5"}}