{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T02:46:02Z","timestamp":1782960362697,"version":"3.54.5"},"publisher-location":"Cham","reference-count":12,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032233462","type":"print"},{"value":"9783032233479","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-23347-9_14","type":"book-chapter","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T02:18:11Z","timestamp":1782958691000},"page":"166-174","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["AI-Augmented DevSecOps Pipeline for Intelligent Vulnerability Triage: Integrating SonarQube with LLM"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-5847-1417","authenticated-orcid":false,"given":"Steven","family":"Wu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2956-6115","authenticated-orcid":false,"given":"Tan-Hsu","family":"Tan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3923-4387","authenticated-orcid":false,"given":"Shing -Hong","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1426-9513","authenticated-orcid":false,"given":"Chao- Rong","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"14_CR1","unstructured":"Verizon: Data Breach Investigations Report 2025. Verizon, New York (2025). https:\/\/www.verizon.com\/business\/resources\/Tea\/reports\/2025-dbir-data-breach-investigations-report.pdf"},{"key":"14_CR2","unstructured":"Khare, A., Dutta, S., Li, Z., Solko-Breslin, A., Alur, R., Naik, M.: Understanding the effec-tiveness of large language models in detecting security vulnerabilities. In: Proceedings of the 2023 ACM Conference on Neural Information Processing Systems (NeurIPS 2023) Workshop on Large Language Models for Code Intelligence, pp. 1\u201312. ACM, New York (2023)"},{"key":"14_CR3","unstructured":"Pearce, H., Tan, B., Ahmad, B., Karri, R., Dolan-Gavitt, B.: Examining zero-shot vulnera-bility repair with large language models. In: Proceedings of the 2024 IEEE Symposium on Security and Privacy Workshops (SPW), pp. 1\u201310. IEEE, Los Alamitos (2024)"},{"key":"14_CR4","volume-title":"Secure Programming with Static Analysis","author":"B Chess","year":"2007","unstructured":"Chess, B., West, J.: Secure Programming with Static Analysis. Addison-Wesley Professional, Boston (2007)"},{"key":"14_CR5","doi-asserted-by":"crossref","unstructured":"Ayewah, N., Hovemeyer, D., Morgenthaler, J.D., Penix, J., Pugh, W.: Using static analysis to find bugs. IEEE Softw. 25(5), 22\u201329. IEEE, Los Alamitos (2008)","DOI":"10.1109\/MS.2008.130"},{"key":"14_CR6","doi-asserted-by":"crossref","unstructured":"Egele, M., Scholte, T., Kirda, E., Kruegel, C.: A survey on automated dynamic malware-analysis techniques and tools. ACM Comput. Surv. 44(2), 1\u201342. ACM, New York (2012)","DOI":"10.1145\/2089125.2089126"},{"key":"14_CR7","unstructured":"Teitler-Santullo, K.: Dynamic Application Security Testing (DAST): A Practical Guide for DevSecOps Teams. OX Security, Tel Aviv (2025)"},{"key":"14_CR8","unstructured":"Li, Z., Dutta, S., Naik, M.: IRIS: LLM-assisted static analysis for detecting security vulnerabilities. In: Proceedings of the 13th International Conference on Learning Representations (ICLR 2025), pp. 1\u201315. OpenReview, (2025)"},{"key":"14_CR9","unstructured":"SonarSource. What\u2019s New in SonarQube 10.5 LTA (2025.1). SonarSource, Geneva (2025)"},{"key":"14_CR10","unstructured":"SonarSource. Advanced Security in SonarQube: SCA, Deep SAST, and SBOM. So-narSource, Geneva (2025)"},{"key":"14_CR11","unstructured":"SonarSource. Plugin Library for SonarQube (June 2025). SonarSource, Geneva (2025)"},{"key":"14_CR12","doi-asserted-by":"crossref","unstructured":"Gnieciak, D., Szanda\u0142a, T.: Large language models versus static code analysis tools: a systematic benchmark for vulnerability detection. IEEE Access (2025)","DOI":"10.1109\/ACCESS.2025.3635168"}],"container-title":["Lecture Notes on Data Engineering and Communications Technologies","Advanced Information Networking and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-23347-9_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T02:18:36Z","timestamp":1782958716000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-23347-9_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032233462","9783032233479"],"references-count":12,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-23347-9_14","relation":{},"ISSN":["2367-4512","2367-4520"],"issn-type":[{"value":"2367-4512","type":"print"},{"value":"2367-4520","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"AINA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Advanced Information Networking and Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Wellington","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New Zealand","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 April 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 April 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"40","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"aina2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/voyager.ce.fit.ac.jp\/conf\/aina\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}