{"id":"https://openalex.org/W4412039790","doi":"https://doi.org/10.1007/s10664-025-10688-0","title":"Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub","display_name":"Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub","publication_year":2025,"publication_date":"2025-07-04","ids":{"openalex":"https://openalex.org/W4412039790","doi":"https://doi.org/10.1007/s10664-025-10688-0","pmid":"https://pubmed.ncbi.nlm.nih.gov/40621059"},"language":"en","primary_location":{"id":"doi:10.1007/s10664-025-10688-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-025-10688-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10688-0.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10688-0.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022459451","display_name":"Francesco Minna","orcid":"https://orcid.org/0000-0002-3018-044X"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Francesco Minna","raw_affiliation_strings":["Afdeling Informatica, Vrije Universiteit, Amsterdam, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-3018-044X","affiliations":[{"raw_affiliation_string":"Afdeling Informatica, Vrije Universiteit, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085639552","display_name":"Fabio Massacci","orcid":"https://orcid.org/0000-0002-1091-8486"},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]},{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["IT","NL"],"is_corresponding":false,"raw_author_name":"Fabio Massacci","raw_affiliation_strings":["Afdeling Informatica, Vrije Universiteit, Amsterdam, Netherlands","Dipartimento di Ingegneria e Scienza dell'Informazione, Universit\u00e0 di Trento, Trento, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Afdeling Informatica, Vrije Universiteit, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315"]},{"raw_affiliation_string":"Dipartimento di Ingegneria e Scienza dell'Informazione, Universit\u00e0 di Trento, Trento, Italy","institution_ids":["https://openalex.org/I193223587"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007822940","display_name":"Katja Tuma","orcid":"https://orcid.org/0000-0001-7189-2817"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Katja Tuma","raw_affiliation_strings":["Dept. of Mathematics and Computer Science, Eindhoven University of Technology, Amsterdam, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Mathematics and Computer Science, Eindhoven University of Technology, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I83019370"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":{"value":2290,"currency":"EUR","value_usd":2890},"fwci":25.3495,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.99454889,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"30","issue":"5","first_page":"132","last_page":"132"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8531895875930786},{"id":"https://openalex.org/keywords/artifact","display_name":"Artifact (error)","score":0.7267217040061951},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.5470533967018127},{"id":"https://openalex.org/keywords/code-refactoring","display_name":"Code refactoring","score":0.5140093564987183},{"id":"https://openalex.org/keywords/installation","display_name":"Installation","score":0.4865816831588745},{"id":"https://openalex.org/keywords/chart","display_name":"Chart","score":0.423850417137146},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40999317169189453},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3746466040611267},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.34516000747680664},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23852145671844482},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.11387792229652405},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10600268840789795}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8531895875930786},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.7267217040061951},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5470533967018127},{"id":"https://openalex.org/C152752567","wikidata":"https://www.wikidata.org/wiki/Q116877","display_name":"Code refactoring","level":3,"score":0.5140093564987183},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.4865816831588745},{"id":"https://openalex.org/C190812933","wikidata":"https://www.wikidata.org/wiki/Q28923","display_name":"Chart","level":2,"score":0.423850417137146},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40999317169189453},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3746466040611267},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.34516000747680664},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23852145671844482},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.11387792229652405},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10600268840789795},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":9,"locations":[{"id":"doi:10.1007/s10664-025-10688-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-025-10688-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10688-0.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},{"id":"pmid:40621059","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40621059","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical software engineering","raw_type":null},{"id":"pmh:oai:research.vu.nl:openaire/7d69b099-65ed-4c9e-b141-df4806e46e88","is_oa":true,"landing_page_url":"https://research.vu.nl/en/publications/7d69b099-65ed-4c9e-b141-df4806e46e88","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Minna, F, Massacci, F & Tuma, K 2025, 'Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub', Empirical Software Engineering, vol. 30, no. 5, 132, pp. 1-35. https://doi.org/10.1007/s10664-025-10688-0","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:research.vu.nl:publications/7d69b099-65ed-4c9e-b141-df4806e46e88","is_oa":true,"landing_page_url":"https://hdl.handle.net/1871.1/7d69b099-65ed-4c9e-b141-df4806e46e88","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Minna, F, Massacci, F & Tuma, K 2025, 'Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub', Empirical Software Engineering, vol. 30, no. 5, 132, pp. 1-35. https://doi.org/10.1007/s10664-025-10688-0","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:pubmedcentral.nih.gov:12227474","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/12227474","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC12227474/pdf/10664_2025_Article_10688.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Empir Softw Eng","raw_type":"Text"},{"id":"pmh:oai:pure.tue.nl:openaire_cris_publications/fbc78305-0a59-449e-a23f-202a1df059a6","is_oa":true,"landing_page_url":"https://research.tue.nl/en/publications/fbc78305-0a59-449e-a23f-202a1df059a6","pdf_url":"https://pure.tue.nl/ws/files/364681666/s10664-025-10688-0.pdf","source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Minna, F, Massacci, F & Tuma, K 2025, 'Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub', Empirical Software Engineering, vol. 30, no. 5, 132. https://doi.org/10.1007/s10664-025-10688-0","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:research.vu.nl:openaire_cris_publications/ef593e06-d9bf-473e-afb8-2c17f9ff5d4d","is_oa":true,"landing_page_url":"https://research.vu.nl/files/399101815/2403.09537v1.pdf","pdf_url":"https://research.vu.nl/ws/files/399101815/2403.09537v1.pdf","source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Minna , F , Massacci , F & Tuma , K 2024 ' Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub ' arXiv .","raw_type":"workingPaper"},{"id":"pmh:oai:pure.tue.nl:openaire_cris_publications/10d9f875-eb66-4b9c-88df-e49a3e6dd575","is_oa":true,"landing_page_url":"https://research.tue.nl/en/publications/10d9f875-eb66-4b9c-88df-e49a3e6dd575","pdf_url":null,"source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Minna, F, Massacci, F & Tuma, K 2025, 'Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub', Empirical Software Engineering, vol. 30, nr. 5, 132. https://doi.org/10.1007/s10664-025-10688-0","raw_type":"article"},{"id":"pmh:oai:pure.tue.nl:publications/10d9f875-eb66-4b9c-88df-e49a3e6dd575","is_oa":true,"landing_page_url":"https://research.tue.nl/files/364681666/s10664-025-10688-0.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Minna, F, Massacci, F & Tuma, K 2025, 'Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub', Empirical Software Engineering, vol. 30, nr. 5, 132. https://doi.org/10.1007/s10664-025-10688-0","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1007/s10664-025-10688-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-025-10688-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10688-0.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1803996626","display_name":null,"funder_award_id":"101120393","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"},{"id":"https://openalex.org/G4657353885","display_name":null,"funder_award_id":"NWA-1215.18.006","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"},{"id":"https://openalex.org/G4731965396","display_name":"Hybrid Explainable Workflows for Security and Threat Intelligence","funder_award_id":"KICH1.VE01.20.004","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"},{"id":"https://openalex.org/G510361925","display_name":"Cybersecurity for AI-Augmented Systems","funder_award_id":"101120393","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412039790.pdf","grobid_xml":"https://content.openalex.org/works/W4412039790.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2809144691","https://openalex.org/W2809228306","https://openalex.org/W2955656327","https://openalex.org/W3094094693","https://openalex.org/W3151142258","https://openalex.org/W3179169340","https://openalex.org/W4283786364","https://openalex.org/W4285490396","https://openalex.org/W4288057765","https://openalex.org/W4308641648","https://openalex.org/W4311414922","https://openalex.org/W4315480688","https://openalex.org/W4320168800","https://openalex.org/W4321504227","https://openalex.org/W4366818398","https://openalex.org/W4392414327"],"related_works":["https://openalex.org/W4313549863","https://openalex.org/W2072205733","https://openalex.org/W2052246872","https://openalex.org/W4296534969","https://openalex.org/W2395465245","https://openalex.org/W2101762871","https://openalex.org/W3176957927","https://openalex.org/W2476494490","https://openalex.org/W3194667890","https://openalex.org/W3091947927"],"abstract_inverted_index":{"Helm":[0,21,54,93],"is":[1,23,149,197],"a":[2,15,24,40,89,98,137,167,171,198,205],"package":[3],"manager":[4],"that":[5,194,236],"allows":[6],"defining,":[7],"installing,":[8],"and":[9,32,48,72,102,111,120,124,187,220],"upgrading":[10],"applications":[11],"with":[12],"Kubernetes":[13],"(K8s),":[14],"popular":[16,99],"container":[17],"orchestration":[18],"platform.":[19],"A":[20],"chart":[22,118,146],"collection":[25],"of":[26,53,59,64,173,207],"files":[27],"describing":[28],"all":[29,218],"dependencies,":[30],"resources,":[31,219],"parameters":[33],"required":[34],"for":[35,81,139],"deploying":[36],"an":[37],"application":[38],"within":[39],"K8s":[41],"cluster.":[42],"This":[43],"study":[44],"aimed":[45],"to":[46,74,91,135,156,175,217],"mine":[47,92],"empirically":[49],"evaluate":[50,176],"the":[51,57,114,122,143,153,161,184,189,208,238],"security":[52],"charts,":[55],"comparing":[56],"performance":[58],"existing":[60],"tools":[61,108,155],"in":[62,188],"terms":[63],"misconfigurations":[65,126,182],"reported":[66,127],"by":[67,70,128,152],"policies":[68],"available":[69],"default,":[71],"measuring":[73],"what":[75],"extent":[76],"LLMs":[77,134,224],"could":[78],"be":[79,214],"used":[80],"removing":[82],"misconfigurations.":[83],"For":[84],"these":[85],"reasons,":[86],"we":[87],"proposed":[88],"pipeline":[90,115],"charts":[94,174],"from":[95,183],"Artifact":[96],"Hub,":[97],"centralized":[100],"repository,":[101],"analyze":[103],"them":[104],"using":[105],"state-of-the-art":[106],"open-source":[107],"like":[109],"Checkov":[110],"KICS.":[112],"First,":[113],"runs":[116],"several":[117],"analyzers":[119],"identifies":[121],"common":[123],"unique":[125],"each":[129,140],"tool.":[130],"Secondly,":[131],"it":[132,159],"uses":[133],"suggest":[136],"mitigation":[138],"misconfiguration.":[141],"Finally,":[142],"LLM":[144,190],"refactored":[145],"previously":[147],"generated":[148],"analyzed":[150],"again":[151],"same":[154],"see":[157],"whether":[158,177],"satisfies":[160],"tool's":[162,185],"policies.":[163],"We":[164,192],"also":[165,231],"performed":[166],"manual":[168],"analysis":[169],"on":[170],"subset":[172],"there":[178,196],"are":[179],"false":[180],"positive":[181],"reporting":[186],"refactoring.":[191],"found":[193],"(i)":[195],"significant":[199],"difference":[200],"between":[201],"LLMs,":[202],"(ii)":[203],"providing":[204],"snippet":[206],"YAML":[209],"template":[210],"as":[211],"input":[212],"might":[213],"insufficient":[215],"compared":[216],"(iii)":[221],"even":[222],"though":[223],"can":[225],"generate":[226],"correct":[227],"fixes,":[228],"they":[229],"may":[230],"delete":[232],"other":[233],"irrelevant":[234],"configurations":[235],"break":[237],"application.":[239]},"counts_by_year":[{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}