{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:VKCNWPOXPR3GNWMFM6ZXGYWYUY","short_pith_number":"pith:VKCNWPOX","canonical_record":{"source":{"id":"2307.02446","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2023-07-05T17:15:15Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"5dedd5ae6606ccb0b2001f9784ab3e3ecdb164f356b9e15e4e42f692aa7984c1","abstract_canon_sha256":"e4b614046f28afc0dee0b69597e7f405c0c6d2466ef09651b9ed764dd22e860b"},"schema_version":"1.0"},"canonical_sha256":"aa84db3dd77c7666d98567b37362d8a60333545697244b561388ca8b196b6b8d","source":{"kind":"arxiv","id":"2307.02446","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.02446","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"arxiv_version","alias_value":"2307.02446v1","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.02446","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"pith_short_12","alias_value":"VKCNWPOXPR3G","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"pith_short_16","alias_value":"VKCNWPOXPR3GNWMF","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"pith_short_8","alias_value":"VKCNWPOX","created_at":"2026-07-05T06:28:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:VKCNWPOXPR3GNWMFM6ZXGYWYUY","target":"record","payload":{"canonical_record":{"source":{"id":"2307.02446","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2023-07-05T17:15:15Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"5dedd5ae6606ccb0b2001f9784ab3e3ecdb164f356b9e15e4e42f692aa7984c1","abstract_canon_sha256":"e4b614046f28afc0dee0b69597e7f405c0c6d2466ef09651b9ed764dd22e860b"},"schema_version":"1.0"},"canonical_sha256":"aa84db3dd77c7666d98567b37362d8a60333545697244b561388ca8b196b6b8d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:28:09.229404Z","signature_b64":"mZ9b2BPwpDMj21jkF5IQ93Ey4aMtNlzLj6ICPQ1YwJ/U98yJdGI7Uw6KsbeDQnGQppHhGQEpLbdzplyxdpFQCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aa84db3dd77c7666d98567b37362d8a60333545697244b561388ca8b196b6b8d","last_reissued_at":"2026-07-05T06:28:09.229010Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:28:09.229010Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.02446","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:28:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+iacmJg/wxRGCnQT8KXedrTrr60YvcJcnN/SnyAKmshkKaE2XTPp8/+FhHJ5OdzuzAN3MtOgOR9uQ3jq/2HwAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T03:29:23.354295Z"},"content_sha256":"2e602a154caf04e7f9c51d392a4cac559babed5460bafcaac8b9933d9d5d5820","schema_version":"1.0","event_id":"sha256:2e602a154caf04e7f9c51d392a4cac559babed5460bafcaac8b9933d9d5d5820"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:VKCNWPOXPR3GNWMFM6ZXGYWYUY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Vulnerable Source Code Detection using SonarCloud Code Analysis","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CY","authors_text":"Alifia Puspaningrum, Darsih, Maulana Ilham Ginanjar, Muhamad Mustamiin, Muhammad Anis Al Hilmi","submitted_at":"2023-07-05T17:15:15Z","abstract_excerpt":"In Software Development Life Cycle (SDLC), security vulnerabilities are one of the points introduced during the construction stage. Failure to detect software defects earlier after releasing the product to the market causes higher repair costs for the company. So, it decreases the company's reputation, violates user privacy, and causes an unrepairable issue for the application. The introduction of vulnerability detection enables reducing the number of false alerts to focus the limited testing efforts on potentially vulnerable files. UMKM Masa Kini (UMI) is a Point of Sales application to sell "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.02446","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.02446/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:28:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uceEbr2QjyRQPdn/h9PBqlctq0V3A2Y9CPtUps7JxDJEVAb9/gXhGLmDRPWYNZoOhZYFCOfRZUpCkF0A721vAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T03:29:23.354800Z"},"content_sha256":"c414d0ffaf8bd1115f994c13a0a14b8a3eb9483143e7180dc77013216dadd6e2","schema_version":"1.0","event_id":"sha256:c414d0ffaf8bd1115f994c13a0a14b8a3eb9483143e7180dc77013216dadd6e2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY/bundle.json","state_url":"https://pith.science/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T03:29:23Z","links":{"resolver":"https://pith.science/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY","bundle":"https://pith.science/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY/bundle.json","state":"https://pith.science/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VKCNWPOXPR3GNWMFM6ZXGYWYUY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:VKCNWPOXPR3GNWMFM6ZXGYWYUY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4b614046f28afc0dee0b69597e7f405c0c6d2466ef09651b9ed764dd22e860b","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2023-07-05T17:15:15Z","title_canon_sha256":"5dedd5ae6606ccb0b2001f9784ab3e3ecdb164f356b9e15e4e42f692aa7984c1"},"schema_version":"1.0","source":{"id":"2307.02446","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.02446","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"arxiv_version","alias_value":"2307.02446v1","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.02446","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"pith_short_12","alias_value":"VKCNWPOXPR3G","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"pith_short_16","alias_value":"VKCNWPOXPR3GNWMF","created_at":"2026-07-05T06:28:09Z"},{"alias_kind":"pith_short_8","alias_value":"VKCNWPOX","created_at":"2026-07-05T06:28:09Z"}],"graph_snapshots":[{"event_id":"sha256:c414d0ffaf8bd1115f994c13a0a14b8a3eb9483143e7180dc77013216dadd6e2","target":"graph","created_at":"2026-07-05T06:28:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.02446/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In Software Development Life Cycle (SDLC), security vulnerabilities are one of the points introduced during the construction stage. Failure to detect software defects earlier after releasing the product to the market causes higher repair costs for the company. So, it decreases the company's reputation, violates user privacy, and causes an unrepairable issue for the application. The introduction of vulnerability detection enables reducing the number of false alerts to focus the limited testing efforts on potentially vulnerable files. UMKM Masa Kini (UMI) is a Point of Sales application to sell ","authors_text":"Alifia Puspaningrum, Darsih, Maulana Ilham Ginanjar, Muhamad Mustamiin, Muhammad Anis Al Hilmi","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2023-07-05T17:15:15Z","title":"Vulnerable Source Code Detection using SonarCloud Code Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.02446","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2e602a154caf04e7f9c51d392a4cac559babed5460bafcaac8b9933d9d5d5820","target":"record","created_at":"2026-07-05T06:28:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4b614046f28afc0dee0b69597e7f405c0c6d2466ef09651b9ed764dd22e860b","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CY","submitted_at":"2023-07-05T17:15:15Z","title_canon_sha256":"5dedd5ae6606ccb0b2001f9784ab3e3ecdb164f356b9e15e4e42f692aa7984c1"},"schema_version":"1.0","source":{"id":"2307.02446","kind":"arxiv","version":1}},"canonical_sha256":"aa84db3dd77c7666d98567b37362d8a60333545697244b561388ca8b196b6b8d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aa84db3dd77c7666d98567b37362d8a60333545697244b561388ca8b196b6b8d","first_computed_at":"2026-07-05T06:28:09.229010Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:28:09.229010Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mZ9b2BPwpDMj21jkF5IQ93Ey4aMtNlzLj6ICPQ1YwJ/U98yJdGI7Uw6KsbeDQnGQppHhGQEpLbdzplyxdpFQCw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:28:09.229404Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.02446","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2e602a154caf04e7f9c51d392a4cac559babed5460bafcaac8b9933d9d5d5820","sha256:c414d0ffaf8bd1115f994c13a0a14b8a3eb9483143e7180dc77013216dadd6e2"],"state_sha256":"9f6786c0d01adbdf8182f2d88125bac87906971bd8ef4570930c940153caf611"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"So7qmb3BBQynfA0lClNrV+xwgNXlYxpYIhewL0zOBh4+UgJhxWX+sBn1O8u9HF1vlOcJJLaPxIfRqDoncetNBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T03:29:23.358569Z","bundle_sha256":"00de76dec7d4cf258f1ae785be8793ad6bcb452c7beb2a432a5170162c1a8e67"}}