Detecting Security Fixes in Open-Source Repositories using Static Code Analyzers

Therese Fehrer, Rocío Cabrera Lozoya, Antonino Sabetta +2

The sources of reliable, code-level information about vulnerabilities that affect open-source software (OSS) are scarce, which hinders a broad adoption of advanced tools that provi…