{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:PJU67DCRHF7QD5C7XMXQG2PP5S","short_pith_number":"pith:PJU67DCR","canonical_record":{"source":{"id":"2407.16235","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-07-23T07:21:14Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f6b1bba740f34ba0763640bdc9ec4ba0ce44cbfd2594ad1369ce07ed359d0e35","abstract_canon_sha256":"a1007b1fa9b96f9eb12a7183d2d3e1bd6a89b806c7d253e99305d15d8fdcf41f"},"schema_version":"1.0"},"canonical_sha256":"7a69ef8c51397f01f45fbb2f0369efec9f4d1e8c3e855058b91bca285e3f0402","source":{"kind":"arxiv","id":"2407.16235","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16235","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16235v1","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16235","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_12","alias_value":"PJU67DCRHF7Q","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_16","alias_value":"PJU67DCRHF7QD5C7","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_8","alias_value":"PJU67DCR","created_at":"2026-07-05T08:47:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:PJU67DCRHF7QD5C7XMXQG2PP5S","target":"record","payload":{"canonical_record":{"source":{"id":"2407.16235","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-07-23T07:21:14Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"f6b1bba740f34ba0763640bdc9ec4ba0ce44cbfd2594ad1369ce07ed359d0e35","abstract_canon_sha256":"a1007b1fa9b96f9eb12a7183d2d3e1bd6a89b806c7d253e99305d15d8fdcf41f"},"schema_version":"1.0"},"canonical_sha256":"7a69ef8c51397f01f45fbb2f0369efec9f4d1e8c3e855058b91bca285e3f0402","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:47:30.114920Z","signature_b64":"FqQriktL34ac4DDa/69HFshug34zLq4yI2nmzmugRt9V4FyN5AlAS7Bbj9Q1kPHLZBK7+vbtqVc1uJEXc41rBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7a69ef8c51397f01f45fbb2f0369efec9f4d1e8c3e855058b91bca285e3f0402","last_reissued_at":"2026-07-05T08:47:30.114485Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:47:30.114485Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.16235","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:47:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lkNAvrcI6jaZInr4N4QI/oI9+aGz9J74GNtSxYamr3DokA2mKNNIGp4E9RMuQi3Wl7/vcREG+cPw6YwlTkTMCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:14:18.982389Z"},"content_sha256":"9eb5b9a5593f7b9cd501bb746480b67778a09615467284b06e3e9d92a42f174b","schema_version":"1.0","event_id":"sha256:9eb5b9a5593f7b9cd501bb746480b67778a09615467284b06e3e9d92a42f174b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:PJU67DCRHF7QD5C7XMXQG2PP5S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Comparison of Static Application Security Testing Tools and Large Language Models for Repo-level Vulnerability Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.SE","authors_text":"Bach Le, David Lo, Duc-Manh Tran, Ivana Clairine Irsan, Joshua Sumarlin, Thanh Le-Cong, Ting Zhang, Xin Zhou","submitted_at":"2024-07-23T07:21:14Z","abstract_excerpt":"Software vulnerabilities pose significant security challenges and potential risks to society, necessitating extensive efforts in automated vulnerability detection. There are two popular lines of work to address automated vulnerability detection. On one hand, Static Application Security Testing (SAST) is usually utilized to scan source code for security vulnerabilities, especially in industries. On the other hand, deep learning (DL)-based methods, especially since the introduction of large language models (LLMs), have demonstrated their potential in software vulnerability detection. However, th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16235","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.16235/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:47:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PlaGzqSMC9HiE0IcGF5utshgiGc0lznFK9rvHGRowHMJg2TgfJYcCyXgL2zzWoiHTLnyj9qrMvJEVAJNgxRYAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:14:18.983269Z"},"content_sha256":"b791f44b83ed7c6d72989ea1b3043368ce44a30c873d67c5cf1fd853d85adf7b","schema_version":"1.0","event_id":"sha256:b791f44b83ed7c6d72989ea1b3043368ce44a30c873d67c5cf1fd853d85adf7b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PJU67DCRHF7QD5C7XMXQG2PP5S/bundle.json","state_url":"https://pith.science/pith/PJU67DCRHF7QD5C7XMXQG2PP5S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PJU67DCRHF7QD5C7XMXQG2PP5S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T23:14:18Z","links":{"resolver":"https://pith.science/pith/PJU67DCRHF7QD5C7XMXQG2PP5S","bundle":"https://pith.science/pith/PJU67DCRHF7QD5C7XMXQG2PP5S/bundle.json","state":"https://pith.science/pith/PJU67DCRHF7QD5C7XMXQG2PP5S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PJU67DCRHF7QD5C7XMXQG2PP5S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:PJU67DCRHF7QD5C7XMXQG2PP5S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a1007b1fa9b96f9eb12a7183d2d3e1bd6a89b806c7d253e99305d15d8fdcf41f","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-07-23T07:21:14Z","title_canon_sha256":"f6b1bba740f34ba0763640bdc9ec4ba0ce44cbfd2594ad1369ce07ed359d0e35"},"schema_version":"1.0","source":{"id":"2407.16235","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16235","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16235v1","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16235","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_12","alias_value":"PJU67DCRHF7Q","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_16","alias_value":"PJU67DCRHF7QD5C7","created_at":"2026-07-05T08:47:30Z"},{"alias_kind":"pith_short_8","alias_value":"PJU67DCR","created_at":"2026-07-05T08:47:30Z"}],"graph_snapshots":[{"event_id":"sha256:b791f44b83ed7c6d72989ea1b3043368ce44a30c873d67c5cf1fd853d85adf7b","target":"graph","created_at":"2026-07-05T08:47:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.16235/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software vulnerabilities pose significant security challenges and potential risks to society, necessitating extensive efforts in automated vulnerability detection. There are two popular lines of work to address automated vulnerability detection. On one hand, Static Application Security Testing (SAST) is usually utilized to scan source code for security vulnerabilities, especially in industries. On the other hand, deep learning (DL)-based methods, especially since the introduction of large language models (LLMs), have demonstrated their potential in software vulnerability detection. However, th","authors_text":"Bach Le, David Lo, Duc-Manh Tran, Ivana Clairine Irsan, Joshua Sumarlin, Thanh Le-Cong, Ting Zhang, Xin Zhou","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-07-23T07:21:14Z","title":"Comparison of Static Application Security Testing Tools and Large Language Models for Repo-level Vulnerability Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16235","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9eb5b9a5593f7b9cd501bb746480b67778a09615467284b06e3e9d92a42f174b","target":"record","created_at":"2026-07-05T08:47:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a1007b1fa9b96f9eb12a7183d2d3e1bd6a89b806c7d253e99305d15d8fdcf41f","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-07-23T07:21:14Z","title_canon_sha256":"f6b1bba740f34ba0763640bdc9ec4ba0ce44cbfd2594ad1369ce07ed359d0e35"},"schema_version":"1.0","source":{"id":"2407.16235","kind":"arxiv","version":1}},"canonical_sha256":"7a69ef8c51397f01f45fbb2f0369efec9f4d1e8c3e855058b91bca285e3f0402","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7a69ef8c51397f01f45fbb2f0369efec9f4d1e8c3e855058b91bca285e3f0402","first_computed_at":"2026-07-05T08:47:30.114485Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:47:30.114485Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FqQriktL34ac4DDa/69HFshug34zLq4yI2nmzmugRt9V4FyN5AlAS7Bbj9Q1kPHLZBK7+vbtqVc1uJEXc41rBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:47:30.114920Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.16235","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9eb5b9a5593f7b9cd501bb746480b67778a09615467284b06e3e9d92a42f174b","sha256:b791f44b83ed7c6d72989ea1b3043368ce44a30c873d67c5cf1fd853d85adf7b"],"state_sha256":"51cdfab0a516f89433dd0556626166934bf3b3b348c9e759a2c5929e88210bee"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZlkBp+VEveFqHyXE15WgVKBjStXi5CvSY17ddc1i1q2u90f1/KCoNqC8j6IWjx8TEJTBkfuimdBGxFR137BbAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T23:14:18.989222Z","bundle_sha256":"bcace437595bf1573aacb874523e4aeb127bd0191e50cc790d2b50bc9c226c95"}}