{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:MWHIPDNT4PC43F7PFBNF2FC77A","short_pith_number":"pith:MWHIPDNT","canonical_record":{"source":{"id":"2107.02096","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-05T15:42:15Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"0931824948e15dc053c5f94f2018032321df9ff003860a1cd42eec850148971e","abstract_canon_sha256":"58cf2f2981e1cd5eb7131a539daea276434a6d7f418621504e5ef3a27a939610"},"schema_version":"1.0"},"canonical_sha256":"658e878db3e3c5cd97ef285a5d145ff81709f5465dece248233efec6ff2b8366","source":{"kind":"arxiv","id":"2107.02096","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.02096","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"arxiv_version","alias_value":"2107.02096v3","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.02096","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"pith_short_12","alias_value":"MWHIPDNT4PC4","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"pith_short_16","alias_value":"MWHIPDNT4PC43F7P","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"pith_short_8","alias_value":"MWHIPDNT","created_at":"2026-07-05T02:58:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:MWHIPDNT4PC43F7PFBNF2FC77A","target":"record","payload":{"canonical_record":{"source":{"id":"2107.02096","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-05T15:42:15Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"0931824948e15dc053c5f94f2018032321df9ff003860a1cd42eec850148971e","abstract_canon_sha256":"58cf2f2981e1cd5eb7131a539daea276434a6d7f418621504e5ef3a27a939610"},"schema_version":"1.0"},"canonical_sha256":"658e878db3e3c5cd97ef285a5d145ff81709f5465dece248233efec6ff2b8366","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:58:43.717059Z","signature_b64":"8v5qu6cjyk0cbGn8KbvOcfIYdSY9MVacrgj1I/gqJLqXB2IuyLaR70XjFtq20XHPCkmXR8/G7HwB8xjpijK5Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"658e878db3e3c5cd97ef285a5d145ff81709f5465dece248233efec6ff2b8366","last_reissued_at":"2026-07-05T02:58:43.716463Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:58:43.716463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.02096","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:58:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7rbhmvAQ88xTS7YrLvAIwZ2Z7sxZlv9T3+fwJrkj5h4KepULICbnulchlYCwmqgXPG+R5f/mKXvU9LbachgMCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T16:56:37.057669Z"},"content_sha256":"322c86c2dbbefab11d737e95230403760af5e48022890608fe825d212b4ffd8d","schema_version":"1.0","event_id":"sha256:322c86c2dbbefab11d737e95230403760af5e48022890608fe825d212b4ffd8d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:MWHIPDNT4PC43F7PFBNF2FC77A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Mansooreh Zahedi, Muhammad Ali Babar, Roshan Namal Rajapakse","submitted_at":"2021-07-05T15:42:15Z","abstract_excerpt":"Background: Security tools play a vital role in enabling developers to build secure software. However, it can be quite challenging to introduce and fully leverage security tools without affecting the speed or frequency of deployments in the DevOps paradigm. Aims: We aim to empirically investigate the key challenges practitioners face when integrating security tools into a DevOps workflow in order to provide recommendations to overcome them. Method: We conducted a study involving 31 systematically selected webinars on integrating security tools in DevOps. We used a qualitative data analysis met"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.02096","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.02096/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:58:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NeXpkcibF+9UNOfR3zHzjHonPI7kngzPJwWYjgYOy+DZLugGkNTCJRNHLxuqzDN0flbmx7nMa+X38xR24LBgDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T16:56:37.058183Z"},"content_sha256":"84e6ffae6504aec7dc13f4964b8f7307a6bae0fd1b46bb6511fdafabcfc7e7a8","schema_version":"1.0","event_id":"sha256:84e6ffae6504aec7dc13f4964b8f7307a6bae0fd1b46bb6511fdafabcfc7e7a8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MWHIPDNT4PC43F7PFBNF2FC77A/bundle.json","state_url":"https://pith.science/pith/MWHIPDNT4PC43F7PFBNF2FC77A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MWHIPDNT4PC43F7PFBNF2FC77A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T16:56:37Z","links":{"resolver":"https://pith.science/pith/MWHIPDNT4PC43F7PFBNF2FC77A","bundle":"https://pith.science/pith/MWHIPDNT4PC43F7PFBNF2FC77A/bundle.json","state":"https://pith.science/pith/MWHIPDNT4PC43F7PFBNF2FC77A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MWHIPDNT4PC43F7PFBNF2FC77A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:MWHIPDNT4PC43F7PFBNF2FC77A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"58cf2f2981e1cd5eb7131a539daea276434a6d7f418621504e5ef3a27a939610","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-05T15:42:15Z","title_canon_sha256":"0931824948e15dc053c5f94f2018032321df9ff003860a1cd42eec850148971e"},"schema_version":"1.0","source":{"id":"2107.02096","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.02096","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"arxiv_version","alias_value":"2107.02096v3","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.02096","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"pith_short_12","alias_value":"MWHIPDNT4PC4","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"pith_short_16","alias_value":"MWHIPDNT4PC43F7P","created_at":"2026-07-05T02:58:43Z"},{"alias_kind":"pith_short_8","alias_value":"MWHIPDNT","created_at":"2026-07-05T02:58:43Z"}],"graph_snapshots":[{"event_id":"sha256:84e6ffae6504aec7dc13f4964b8f7307a6bae0fd1b46bb6511fdafabcfc7e7a8","target":"graph","created_at":"2026-07-05T02:58:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.02096/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Background: Security tools play a vital role in enabling developers to build secure software. However, it can be quite challenging to introduce and fully leverage security tools without affecting the speed or frequency of deployments in the DevOps paradigm. Aims: We aim to empirically investigate the key challenges practitioners face when integrating security tools into a DevOps workflow in order to provide recommendations to overcome them. Method: We conducted a study involving 31 systematically selected webinars on integrating security tools in DevOps. We used a qualitative data analysis met","authors_text":"Mansooreh Zahedi, Muhammad Ali Babar, Roshan Namal Rajapakse","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-05T15:42:15Z","title":"An Empirical Analysis of Practitioners' Perspectives on Security Tool Integration into DevOps"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.02096","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:322c86c2dbbefab11d737e95230403760af5e48022890608fe825d212b4ffd8d","target":"record","created_at":"2026-07-05T02:58:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"58cf2f2981e1cd5eb7131a539daea276434a6d7f418621504e5ef3a27a939610","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-05T15:42:15Z","title_canon_sha256":"0931824948e15dc053c5f94f2018032321df9ff003860a1cd42eec850148971e"},"schema_version":"1.0","source":{"id":"2107.02096","kind":"arxiv","version":3}},"canonical_sha256":"658e878db3e3c5cd97ef285a5d145ff81709f5465dece248233efec6ff2b8366","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"658e878db3e3c5cd97ef285a5d145ff81709f5465dece248233efec6ff2b8366","first_computed_at":"2026-07-05T02:58:43.716463Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:58:43.716463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8v5qu6cjyk0cbGn8KbvOcfIYdSY9MVacrgj1I/gqJLqXB2IuyLaR70XjFtq20XHPCkmXR8/G7HwB8xjpijK5Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:58:43.717059Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.02096","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:322c86c2dbbefab11d737e95230403760af5e48022890608fe825d212b4ffd8d","sha256:84e6ffae6504aec7dc13f4964b8f7307a6bae0fd1b46bb6511fdafabcfc7e7a8"],"state_sha256":"d0579b8398ddd83eafa8962882f87afdb9e8134918f04ab4e6b290ea1c6f73f4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hjNZ2E1j11njRkc4je7BgBiF7tNSNmX2NjyPX7iJUZwauYNKdoOXxsOSREhbfRNdma0lMtgENlad86DHEvskCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T16:56:37.063107Z","bundle_sha256":"936a8f7514eae0bd2482fb54de2c641c48d9242021e60991f27e6be1dd9e728d"}}