Can Developers rely on LLMs for Secure IaC Development?

Ehsan Firouzi, Shardul Bhatt, Mohammad Ghafari

We investigated the capabilities of GPT-4o and Gemini 2.0 Flash for secure Infrastructure as Code (IaC) development. For security smell detection, on the Stack Overflow dataset, wh…