{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:BROU7J4NFEYDAHHHGERXI2XY4S","short_pith_number":"pith:BROU7J4N","schema_version":"1.0","canonical_sha256":"0c5d4fa78d2930301ce73123746af8e490d68f43acbb0edd16a78febcf1508b2","source":{"kind":"arxiv","id":"2403.09537","version":1},"attestation_state":"computed","paper":{"title":"Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Fabio Massacci, Francesco Minna, Katja Tuma","submitted_at":"2024-03-14T16:26:40Z","abstract_excerpt":"Background: Helm is a package manager that allows defining, installing, and upgrading applications with Kubernetes (K8s), a popular container orchestration platform. A Helm chart is a collection of files describing all dependencies, resources, and parameters required for deploying an application within a K8s cluster. Objective: The goal of this study is to mine and empirically evaluate the security of Helm charts, comparing the performance of existing tools in terms of misconfigurations reported by policies available by default, and measure to what extent LLMs could be used for removing miscon"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2403.09537","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-03-14T16:26:40Z","cross_cats_sorted":[],"title_canon_sha256":"2caa80ccb27821d33353fc0e156cf18a3bb498b28f7a8896ef12042e05926d25","abstract_canon_sha256":"a8b976425e2b1dc0aee5c6783594ca26e6b1ca58c959b29aa136af4aa06c297d"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:56:11.092057Z","signature_b64":"loJJI5na0CZjkuTzK5u46M7A6nmkVarKzcDbrwDNSLKmx6jA4YnEkR0HjdiGhVW/lRQbtr8YKzDfvIykxa8yDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0c5d4fa78d2930301ce73123746af8e490d68f43acbb0edd16a78febcf1508b2","last_reissued_at":"2026-07-05T07:56:11.091561Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:56:11.091561Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Fabio Massacci, Francesco Minna, Katja Tuma","submitted_at":"2024-03-14T16:26:40Z","abstract_excerpt":"Background: Helm is a package manager that allows defining, installing, and upgrading applications with Kubernetes (K8s), a popular container orchestration platform. A Helm chart is a collection of files describing all dependencies, resources, and parameters required for deploying an application within a K8s cluster. Objective: The goal of this study is to mine and empirically evaluate the security of Helm charts, comparing the performance of existing tools in terms of misconfigurations reported by policies available by default, and measure to what extent LLMs could be used for removing miscon"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.09537","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.09537/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2403.09537","created_at":"2026-07-05T07:56:11.091621+00:00"},{"alias_kind":"arxiv_version","alias_value":"2403.09537v1","created_at":"2026-07-05T07:56:11.091621+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.09537","created_at":"2026-07-05T07:56:11.091621+00:00"},{"alias_kind":"pith_short_12","alias_value":"BROU7J4NFEYD","created_at":"2026-07-05T07:56:11.091621+00:00"},{"alias_kind":"pith_short_16","alias_value":"BROU7J4NFEYDAHHH","created_at":"2026-07-05T07:56:11.091621+00:00"},{"alias_kind":"pith_short_8","alias_value":"BROU7J4N","created_at":"2026-07-05T07:56:11.091621+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2507.12472","citing_title":"A Survey of AIOps in the Era of Large Language Models","ref_index":91,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S","json":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S.json","graph_json":"https://pith.science/api/pith-number/BROU7J4NFEYDAHHHGERXI2XY4S/graph.json","events_json":"https://pith.science/api/pith-number/BROU7J4NFEYDAHHHGERXI2XY4S/events.json","paper":"https://pith.science/paper/BROU7J4N"},"agent_actions":{"view_html":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S","download_json":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S.json","view_paper":"https://pith.science/paper/BROU7J4N","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2403.09537&json=true","fetch_graph":"https://pith.science/api/pith-number/BROU7J4NFEYDAHHHGERXI2XY4S/graph.json","fetch_events":"https://pith.science/api/pith-number/BROU7J4NFEYDAHHHGERXI2XY4S/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S/action/storage_attestation","attest_author":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S/action/author_attestation","sign_citation":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S/action/citation_signature","submit_replication":"https://pith.science/pith/BROU7J4NFEYDAHHHGERXI2XY4S/action/replication_record"}},"created_at":"2026-07-05T07:56:11.091621+00:00","updated_at":"2026-07-05T07:56:11.091621+00:00"}