{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:Y2SRK7EBH666SAQKMT5J2FEWIL","short_pith_number":"pith:Y2SRK7EB","canonical_record":{"source":{"id":"2207.09022","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-19T01:56:28Z","cross_cats_sorted":[],"title_canon_sha256":"ef3dc141cd348392f4802ad4e4eaadce06d4200b6392bac0690380caf4148fbd","abstract_canon_sha256":"c473428aa48c519f4802420fa77b9aed0c3c41199eef9d50706ecdc85a2a475d"},"schema_version":"1.0"},"canonical_sha256":"c6a5157c813fbde9020a64fa9d149642d90f1efc7f047d5108a437f86e17d875","source":{"kind":"arxiv","id":"2207.09022","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.09022","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"arxiv_version","alias_value":"2207.09022v1","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.09022","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"pith_short_12","alias_value":"Y2SRK7EBH666","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"pith_short_16","alias_value":"Y2SRK7EBH666SAQK","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"pith_short_8","alias_value":"Y2SRK7EB","created_at":"2026-07-05T04:41:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:Y2SRK7EBH666SAQKMT5J2FEWIL","target":"record","payload":{"canonical_record":{"source":{"id":"2207.09022","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-19T01:56:28Z","cross_cats_sorted":[],"title_canon_sha256":"ef3dc141cd348392f4802ad4e4eaadce06d4200b6392bac0690380caf4148fbd","abstract_canon_sha256":"c473428aa48c519f4802420fa77b9aed0c3c41199eef9d50706ecdc85a2a475d"},"schema_version":"1.0"},"canonical_sha256":"c6a5157c813fbde9020a64fa9d149642d90f1efc7f047d5108a437f86e17d875","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:41:16.018590Z","signature_b64":"VyvUGdPzaPmzmqhH6M8uVK0SsccbfsJtvuiaqJRtEpLv3tZJCntGYnj8waBIOGRh1bKrWuhP73NYHMqkStNRCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c6a5157c813fbde9020a64fa9d149642d90f1efc7f047d5108a437f86e17d875","last_reissued_at":"2026-07-05T04:41:16.018000Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:41:16.018000Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.09022","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:41:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TabDQNbd32YPRvW98kpYEck5/VwKUAJALsBRlvpN3OX6IIQ5MVS61wgW/7/S152QkrkPGSrEbIVkLfBOuf01BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T11:41:34.182259Z"},"content_sha256":"72c53b6eb7b41a44927db55b476eda61dcf5dac6a20a6718f31139e9fcef1447","schema_version":"1.0","event_id":"sha256:72c53b6eb7b41a44927db55b476eda61dcf5dac6a20a6718f31139e9fcef1447"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:Y2SRK7EBH666SAQKMT5J2FEWIL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enhancing Security Patch Identification by Capturing Structures in Commits","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bozhi Wu, Jingkai Siow, Ruitao Feng, Shangqing Liu, Shang-Wei Lin, Xiaofei Xie","submitted_at":"2022-07-19T01:56:28Z","abstract_excerpt":"With the rapid increasing number of open source software (OSS), the majority of the software vulnerabilities in the open source components are fixed silently, which leads to the deployed software that integrated them being unable to get a timely update. Hence, it is critical to design a security patch identification system to ensure the security of the utilized software. However, most of the existing works for security patch identification just consider the changed code and the commit message of a commit as a flat sequence of tokens with simple neural networks to learn its semantics, while the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.09022","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.09022/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:41:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xNXUs4ovh05qTIA4tiHSgExWnRH9c8fuuIArrqIUP2tBhevaTZD2eoifssqSGIya0AwZxc6Kc+2lNNMyGOsoBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T11:41:34.183289Z"},"content_sha256":"15c49c819466e87192830368044e1f8ff74d251baad26665b89cf69083b66f97","schema_version":"1.0","event_id":"sha256:15c49c819466e87192830368044e1f8ff74d251baad26665b89cf69083b66f97"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y2SRK7EBH666SAQKMT5J2FEWIL/bundle.json","state_url":"https://pith.science/pith/Y2SRK7EBH666SAQKMT5J2FEWIL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y2SRK7EBH666SAQKMT5J2FEWIL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T11:41:34Z","links":{"resolver":"https://pith.science/pith/Y2SRK7EBH666SAQKMT5J2FEWIL","bundle":"https://pith.science/pith/Y2SRK7EBH666SAQKMT5J2FEWIL/bundle.json","state":"https://pith.science/pith/Y2SRK7EBH666SAQKMT5J2FEWIL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y2SRK7EBH666SAQKMT5J2FEWIL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Y2SRK7EBH666SAQKMT5J2FEWIL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c473428aa48c519f4802420fa77b9aed0c3c41199eef9d50706ecdc85a2a475d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-19T01:56:28Z","title_canon_sha256":"ef3dc141cd348392f4802ad4e4eaadce06d4200b6392bac0690380caf4148fbd"},"schema_version":"1.0","source":{"id":"2207.09022","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.09022","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"arxiv_version","alias_value":"2207.09022v1","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.09022","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"pith_short_12","alias_value":"Y2SRK7EBH666","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"pith_short_16","alias_value":"Y2SRK7EBH666SAQK","created_at":"2026-07-05T04:41:16Z"},{"alias_kind":"pith_short_8","alias_value":"Y2SRK7EB","created_at":"2026-07-05T04:41:16Z"}],"graph_snapshots":[{"event_id":"sha256:15c49c819466e87192830368044e1f8ff74d251baad26665b89cf69083b66f97","target":"graph","created_at":"2026-07-05T04:41:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.09022/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the rapid increasing number of open source software (OSS), the majority of the software vulnerabilities in the open source components are fixed silently, which leads to the deployed software that integrated them being unable to get a timely update. Hence, it is critical to design a security patch identification system to ensure the security of the utilized software. However, most of the existing works for security patch identification just consider the changed code and the commit message of a commit as a flat sequence of tokens with simple neural networks to learn its semantics, while the","authors_text":"Bozhi Wu, Jingkai Siow, Ruitao Feng, Shangqing Liu, Shang-Wei Lin, Xiaofei Xie","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-19T01:56:28Z","title":"Enhancing Security Patch Identification by Capturing Structures in Commits"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.09022","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:72c53b6eb7b41a44927db55b476eda61dcf5dac6a20a6718f31139e9fcef1447","target":"record","created_at":"2026-07-05T04:41:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c473428aa48c519f4802420fa77b9aed0c3c41199eef9d50706ecdc85a2a475d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-19T01:56:28Z","title_canon_sha256":"ef3dc141cd348392f4802ad4e4eaadce06d4200b6392bac0690380caf4148fbd"},"schema_version":"1.0","source":{"id":"2207.09022","kind":"arxiv","version":1}},"canonical_sha256":"c6a5157c813fbde9020a64fa9d149642d90f1efc7f047d5108a437f86e17d875","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c6a5157c813fbde9020a64fa9d149642d90f1efc7f047d5108a437f86e17d875","first_computed_at":"2026-07-05T04:41:16.018000Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:41:16.018000Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VyvUGdPzaPmzmqhH6M8uVK0SsccbfsJtvuiaqJRtEpLv3tZJCntGYnj8waBIOGRh1bKrWuhP73NYHMqkStNRCA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:41:16.018590Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.09022","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:72c53b6eb7b41a44927db55b476eda61dcf5dac6a20a6718f31139e9fcef1447","sha256:15c49c819466e87192830368044e1f8ff74d251baad26665b89cf69083b66f97"],"state_sha256":"80c6078295178024e54b323089376d253d2d5d63fa4a58c627239e408b530d4b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t81s0s+4IerNDQNX5O90+7bPAkVUddhvThayaKn9EROwkaBjCPgC6+ms82xo8CDWxniOK9X8MWXkl9Ph8D/dBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T11:41:34.189198Z","bundle_sha256":"f098af1705ee025544ab2a93692abd5b180324e844b4629b319d52bf548cf3a9"}}