Skip to content

Fixes for CWE-Bench-Java#78

Draft
IcebladeLabs wants to merge 5 commits into
iris-sast:v2from
IcebladeLabs:v2
Draft

Fixes for CWE-Bench-Java#78
IcebladeLabs wants to merge 5 commits into
iris-sast:v2from
IcebladeLabs:v2

Conversation

@IcebladeLabs

Copy link
Copy Markdown
Collaborator

In the previous update to CWE-Bench-Java, CVEs were added to project_info.csv and build_info.csv. However, these projects were never appropriately added to fix_info.csv. This PR addresses that issue in the following ways:

  • Missing method-level information was programmatically generated and added to fix_info.csv.
  • The fix was aimed at all projects (identified by slug) present in another file missing from fix_info.csv.
  • This data was generated by evaluating commit diffs (from project_info.csv) using the Gemini API. The script that was used for this purpose is available at data/scripts/fix_info_generator.py.
  • Creates contributing.md precisely defining how additions to CWE-Bench-Java should be formatted. This includes specifications for each field, and rules for inclusion/ exclusion. Note that the original data does not strictly follow this new formatting, and is not adjusted to fit.
  • Minor dependency update to the CI and update to the README cataloging this change.

@IcebladeLabs IcebladeLabs requested a review from clairew June 23, 2026 20:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant