Automating Static Code Analysis Through CI/CD Pipeline Integration

arXiv:2609.00676 · cs.CR, cs.SE · Submitted 2026-09-01 · Read on arXiv

cs.CR, cs.SE

Submitted: 2026-09-01

Updated: 2026-09-01

Terminology

• Generalizability — 3× in this paper · explained in 6 episodes
• Core — 2× in this paper · explained in 2 episodes
• General Data Protection Regulation — 2× in this paper
• Static Application Security Testing — 2× in this paper
• Actor — 1× in this paper · explained in 3 episodes
• Adaptation — 1× in this paper · explained in 1 episode
• Aggregation — 1× in this paper · explained in 1 episode
• Alignment — 1× in this paper · explained in 1 episode
• Application Programming Interface — 1× in this paper
• Command Line Interface — 1× in this paper
• Common Vulnerabilities and Exposures — 1× in this paper
• Consistency — 1× in this paper · explained in 3 episodes
• Graphical User Interface — 1× in this paper
• Mining Software Repositories — 1× in this paper

Sources

• Towards Immediate Feedback for Security Relevant Code in Development Environments

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs