{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T05:39:15Z","timestamp":1781329155832,"version":"3.54.1"},"reference-count":70,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2023,12,29]],"date-time":"2023-12-29T00:00:00Z","timestamp":1703808000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,12,29]],"date-time":"2023-12-29T00:00:00Z","timestamp":1703808000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2247141"],"award-info":[{"award-number":["2247141"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2310179"],"award-info":[{"award-number":["2310179"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100009226","name":"National Security Agency","doi-asserted-by":"publisher","award":["H98230-21-1-0175"],"award-info":[{"award-number":["H98230-21-1-0175"]}],"id":[{"id":"10.13039\/100009226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2312321"],"award-info":[{"award-number":["2312321"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2024,1]]},"DOI":"10.1007\/s10664-023-10432-6","type":"journal-article","created":{"date-parts":[[2023,12,29]],"date-time":"2023-12-29T10:02:46Z","timestamp":1703844166000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["An empirical study of task infections in Ansible scripts"],"prefix":"10.1007","volume":"29","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5056-757X","authenticated-orcid":false,"given":"Akond","family":"Rahman","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dibyendu Brinto","family":"Bose","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yue","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rahul","family":"Pandita","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,12,29]]},"reference":[{"key":"10432_CR1","doi-asserted-by":"publisher","unstructured":"Agrawal A, Rahman A, Krishna R, Sobran A, Menzies T (2018) We don\u2019t need another hero?: The impact of \u201cheroes\u201d on software development. In: Proceedings of the 40th international conference on software engineering: software engineering in practice, ACM, New York, NY, USA, ICSE-SEIP \u201918, pp\u00a0245\u2013253. https:\/\/doi.org\/10.1145\/3183519.3183549","DOI":"10.1145\/3183519.3183549"},{"issue":"8","key":"10432_CR2","first-page":"9","volume":"7","author":"AV Aho","year":"1986","unstructured":"Aho AV, Sethi R, Ullman JD (1986) Compilers, principles, techniques. Addison wesley 7(8):9","journal-title":"Addison wesley"},{"key":"10432_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2019.04.013","author":"R Akond","year":"2019","unstructured":"Akond R, Laurie W (2019) Source code properties of defective infrastructure as code scripts. Inf Softw Technol. https:\/\/doi.org\/10.1016\/j.infsof.2019.04.013","journal-title":"Inf Softw Technol"},{"key":"10432_CR4","unstructured":"Ansible (2020) Ansible Documentation. https:\/\/docs.ansible.com\/, [Online; accessed 19-December-2020]"},{"key":"10432_CR5","unstructured":"Ansible (2022) Ansible best practices. https:\/\/docs.ansible.com\/ansible\/2.8\/, [Online; accessed 10-Sep-2022]"},{"key":"10432_CR6","doi-asserted-by":"crossref","unstructured":"Banavar G, Chandra TD, Strom RE, Sturman DC (1999) A case for message oriented middleware. In: Proceedings of the 13th international symposium on distributed computing, Springer-Verlag, Berlin, Heidelberg, pp\u00a01\u201318","DOI":"10.1007\/3-540-48169-9_1"},{"key":"10432_CR7","doi-asserted-by":"publisher","unstructured":"Bird C, Nagappan N, Murphy B, Gall H, Devanbu P (2011) Don\u2019t touch my code! examining the effects of ownership on software quality. In: Proceedings of the 19th ACM SIGSOFT Symposium and the 13th European conference on foundations of software engineering, association for computing machinery, New York, NY, USA, ESEC\/FSE \u201911, pp\u00a04\u201314. https:\/\/doi.org\/10.1145\/2025113.2025119","DOI":"10.1145\/2025113.2025119"},{"issue":"7","key":"10432_CR8","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1007\/s10664-022-10215-5","volume":"27","author":"N Borovits","year":"2022","unstructured":"Borovits N, Kumara I, Di Nucci D, Krishnan P, Palma SD, Palomba F, Tamburri DA, Heuvel WJvd, (2022) Findici: Using machine learning to detect linguistic inconsistencies between code and natural language descriptions in infrastructure-as-code. Empir Softw Eng 27(7):178","journal-title":"Empir Softw Eng"},{"key":"10432_CR9","unstructured":"Carver JC (2010) Towards reporting guidelines for experimental replications: a proposal. In: 1st international workshop on replication in empirical software engineering, vol\u00a01, pp 1\u20134"},{"issue":"1","key":"10432_CR10","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1177\/001316446002000104","volume":"20","author":"J Cohen","year":"1960","unstructured":"Cohen J (1960) A coefficient of agreement for nominal scales. Educ Psychol Meas 20(1):37\u201346. https:\/\/doi.org\/10.1177\/001316446002000104","journal-title":"Educ Psychol Meas"},{"key":"10432_CR11","doi-asserted-by":"publisher","DOI":"10.4324\/9781410606266","volume-title":"Applied multiple regression\/correlation analysis for the behavioral sciences","author":"P Cohen","year":"2014","unstructured":"Cohen P, West SG, Aiken LS (2014) Applied multiple regression\/correlation analysis for the behavioral sciences. Psychology Press"},{"key":"10432_CR12","unstructured":"Cozens B (2022) 10 habits of great ansible users. https:\/\/www.redhat.com\/sysadmin\/10-great-ansible-practices, [Online;accessed 10-Sep-2022]"},{"key":"10432_CR13","doi-asserted-by":"publisher","DOI":"10.4135\/9780857020123","volume-title":"The Sage dictionary of statistics: a practical resource for students in the social sciences","author":"D Cramer","year":"2004","unstructured":"Cramer D, Howitt DL (2004) The Sage dictionary of statistics: a practical resource for students in the social sciences. Sage"},{"key":"10432_CR14","first-page":"501","volume":"19","author":"FQ Da Silva","year":"2014","unstructured":"Da Silva FQ, Suassuna M, Fran\u00e7a ACC, Grubb AM, Gouveia TB, Monteiro CV, dos Santos IE (2014) Replication of empirical studies in software engineering research: a systematic mapping study. Empir Softw Eng 19:501\u2013557","journal-title":"Empir Softw Eng"},{"key":"10432_CR15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110726","volume":"170","author":"S Dalla Palma","year":"2020","unstructured":"Dalla Palma S, Di Nucci D, Palomba F, Tamburri DA (2020) Toward a catalog of software quality metrics for infrastructure code. J Syst Softw 170:110726","journal-title":"J Syst Softw"},{"issue":"6","key":"10432_CR16","doi-asserted-by":"publisher","first-page":"2086","DOI":"10.1109\/TSE.2021.3051492","volume":"48","author":"S Dalla Palma","year":"2022","unstructured":"Dalla Palma S, Di Nucci D, Palomba F, Tamburri DA (2022) Within-project defect prediction of infrastructure-as-code using product and process metrics. IEEE Trans Softw Eng 48(6):2086\u20132104. https:\/\/doi.org\/10.1109\/TSE.2021.3051492","journal-title":"IEEE Trans Softw Eng"},{"key":"10432_CR17","unstructured":"Davis V (2019) Ansible role patterns and anti-patterns by lee garrett, its debian maintainer. https:\/\/hub.packtpub.com\/ansible-role-patterns-and-anti-patterns-by-lee-garrett-its-debian-maintainer\/, [Online; accessed 11-Sep-2022]"},{"issue":"4","key":"10432_CR18","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1109\/4236.780960","volume":"3","author":"R Droms","year":"1999","unstructured":"Droms R (1999) Automated configuration of tcp\/ip with dhcp. IEEE Internet Comput 3(4):45\u201353. https:\/\/doi.org\/10.1109\/4236.780960","journal-title":"IEEE Internet Comput"},{"key":"10432_CR19","volume-title":"Continuous integration: improving software quality and reducing risk (The Addison-Wesley Signature Series)","author":"P Duvall","year":"2007","unstructured":"Duvall P, Matyas SM, Glover A (2007) Continuous integration: improving software quality and reducing risk (The Addison-Wesley Signature Series). Addison-Wesley Professional"},{"key":"10432_CR20","first-page":"285","volume-title":"Selecting Empirical Methods for Software Engineering Research","author":"S Easterbrook","year":"2008","unstructured":"Easterbrook S, Singer J, Storey MA, Damian D (2008) Selecting Empirical Methods for Software Engineering Research. Springer, London, London, pp 285\u2013311"},{"key":"10432_CR21","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511790942","volume-title":"Data analysis using regression and multilevel\/hierarchical models","author":"A Gelman","year":"2006","unstructured":"Gelman A, Hill J (2006) Data analysis using regression and multilevel\/hierarchical models. Cambridge University Press"},{"key":"10432_CR22","volume-title":"A guide to chi-squared testing,","author":"PE Greenwood","year":"1996","unstructured":"Greenwood PE, Nikulin MS (1996) A guide to chi-squared testing, vol 280. Wiley"},{"key":"10432_CR23","doi-asserted-by":"publisher","unstructured":"Hassan AE (2009) Predicting faults using the complexity of code changes. In: Proceedings of the 31st international conference on software engineering, IEEE Computer Society, Washington, DC, USA, ICSE \u201909, pp\u00a078\u201388. https:\/\/doi.org\/10.1109\/ICSE.2009.5070510","DOI":"10.1109\/ICSE.2009.5070510"},{"key":"10432_CR24","unstructured":"Hortlund A (2021) Security smells in open-source infrastructure as code scripts: A replication study"},{"key":"10432_CR25","doi-asserted-by":"publisher","DOI":"10.1002\/9781118548387","volume-title":"Applied logistic regression,","author":"DW Hosmer Jr","year":"2013","unstructured":"Hosmer DW Jr, Lemeshow S, Sturdivant RX (2013) Applied logistic regression, vol 398. Wiley"},{"key":"10432_CR26","doi-asserted-by":"publisher","unstructured":"Hu H, Bu Y, Wong K, Sood G, Smiley K, Rahman A (2023) Characterizing static analysis alerts for terraform manifests: An experience report. In: 2023 IEEE secure development conference (SecDev), IEEE computer society, Los Alamitos, CA, USA, pp 7\u201313. https:\/\/doi.org\/10.1109\/SecDev56634.2023.00014. https:\/\/doi.ieeecomputersociety.org\/10.1109\/SecDev56634.2023.00014","DOI":"10.1109\/SecDev56634.2023.00014"},{"key":"10432_CR27","volume-title":"Continuous delivery: reliable software releases through build, test, and deployment automation","author":"J Humble","year":"2010","unstructured":"Humble J, Farley D (2010) Continuous delivery: reliable software releases through build, test, and deployment automation, 1st edn. Addison-Wesley Professional","edition":"1"},{"key":"10432_CR28","unstructured":"Jenkins (2022) Jenkins. https:\/\/www.jenkins.io\/, [Online; accessed 23-Jan-2022]"},{"key":"10432_CR29","doi-asserted-by":"publisher","unstructured":"Kitchenham BA, Pfleeger SL (2008) Personal Opinion Surveys, Springer London, London, pp 63\u201392. https:\/\/doi.org\/10.1007\/978-1-84800-044-5_3","DOI":"10.1007\/978-1-84800-044-5_3"},{"key":"10432_CR30","doi-asserted-by":"publisher","unstructured":"Kokuryo S, Kondo M, Mizuno O (2020) An empirical study of utilization of imperative modules in ansible. In: 2020 IEEE 20th international conference on software quality, reliability and security (QRS), pp\u00a0442\u2013449. https:\/\/doi.org\/10.1109\/QRS51102.2020.00063","DOI":"10.1109\/QRS51102.2020.00063"},{"key":"10432_CR31","unstructured":"Krein JL, Knutson CD (2010) A case for replication : synthesizing research methodologies in software engineering"},{"key":"10432_CR32","doi-asserted-by":"publisher","unstructured":"Krishna R, Agrawal A, Rahman A, Sobran A, Menzies T (2018) What is the connection between issues, bugs, and enhancements?: Lessons learned from 800+ software projects. In: Proceedings of the 40th international conference on software engineering: software engineering in practice, ACM, New York, NY, USA, ICSE-SEIP \u201918, pp\u00a0306\u2013315. https:\/\/doi.org\/10.1145\/3183519.3183548","DOI":"10.1145\/3183519.3183548"},{"key":"10432_CR33","unstructured":"Labs P (2021) Puppet Documentation. https:\/\/docs.puppet.com\/, [Online;accessed 01-July-2021]"},{"key":"10432_CR34","doi-asserted-by":"crossref","unstructured":"Landis JR, Koch GG (1977) The measurement of observer agreement for categorical data. Biometrics 33(1):159\u2013174. http:\/\/www.jstor.org\/stable\/2529310","DOI":"10.2307\/2529310"},{"issue":"2007","key":"10432_CR35","first-page":"1","volume":"1","author":"MM Lombardi","year":"2007","unstructured":"Lombardi MM, Oblinger DG (2007) Authentic learning for the 21st century: an overview. Educause learning initiative 1(2007):1\u201312","journal-title":"Educause learning initiative"},{"key":"10432_CR36","unstructured":"Long JS, Freese J (2006) Regression models for categorical dependent variables using Stata, vol\u00a07. Stata Press"},{"key":"10432_CR37","doi-asserted-by":"crossref","unstructured":"Mann HB, Whitney DR (1947) On a test of whether one of two random variables is stochastically larger than the other. Ann Math Stat 18(1):50\u201360. http:\/\/www.jstor.org\/stable\/2236101","DOI":"10.1214\/aoms\/1177730491"},{"key":"10432_CR38","doi-asserted-by":"crossref","unstructured":"Meli M, McNiece MR, Reaves B (2019) How bad can it git? characterizing secret leakage in public github repositories. In: NDSS","DOI":"10.14722\/ndss.2019.23418"},{"key":"10432_CR39","doi-asserted-by":"crossref","unstructured":"Menard S (2002) Applied logistic regression analysis. 106, Sage","DOI":"10.4135\/9781412983433"},{"key":"10432_CR40","unstructured":"Miller M (2019) Hardcoded and Embedded Credentials are an IT Security Hazard\u2013Here\u2019s What You Need to Know. https:\/\/www.beyondtrust.com\/blog\/entry\/hardcoded-and-embedded-credentials-are-an-it-security-hazard-heres-what-you-need-to-know, [Online; accessed 17-Jan-2022]"},{"key":"10432_CR41","unstructured":"Mohammad\u00a0Mehedi H, Rahman A (2022) As code testing: Characterizing test quality in open source ansible development. In: 2022 15th IEEE Conference on Software Testing, Verification and Validation (ICST), IEEE Computer Society, Los Alamitos, CA, USA. https:\/\/akondrahman.github.io\/publication\/icst2022"},{"key":"10432_CR42","doi-asserted-by":"publisher","unstructured":"Nagappan N, Ball T (2005) Use of relative code churn measures to predict system defect density. In: Proceedings. 27th International Conference on Software Engineering, 2005. ICSE 2005., pp 284\u2013292. https:\/\/doi.org\/10.1109\/ICSE.2005.1553571","DOI":"10.1109\/ICSE.2005.1553571"},{"key":"10432_CR43","doi-asserted-by":"crossref","unstructured":"Opdebeeck R, Zerouali A, De\u00a0Roover C (2022) Smelly variables in ansible infrastructure code: Detection, prevalence, and lifetime. In: 2022 IEEE\/ACM 18th international conference on mining software repositories (MSR), IEEE","DOI":"10.1145\/3524842.3527964"},{"key":"10432_CR44","doi-asserted-by":"crossref","unstructured":"Opdebeeck R, Zerouali A, Roover CD (2023) Control and data flow in security smell detection for infrastructure as code: Is it worth the effort? In: 2023 IEEE\/ACM 19th international conference on mining software repositories (MSR)","DOI":"10.1109\/MSR59073.2023.00079"},{"key":"10432_CR45","unstructured":"redhat performance (2022) redhat-performance\/satperf. https:\/\/github.com\/redhat-performance\/satperf, [Online; accessed 02-July-2022]"},{"issue":"8","key":"10432_CR46","doi-asserted-by":"publisher","first-page":"1397","DOI":"10.1016\/j.infsof.2013.02.009","volume":"55","author":"D Radjenovi\u0107","year":"2013","unstructured":"Radjenovi\u0107 D, Heri\u010dko M, Torkar R, \u017divkovi\u010d A (2013) Software fault prediction metrics: a systematic literature review. Inf Softw Technol 55(8):1397\u20131418","journal-title":"Inf Softw Technol"},{"key":"10432_CR47","unstructured":"Rahman A (2023) Verifiability package for paper. https:\/\/figshare.com\/s\/c9d7b8aa973f53f02234, [Online; accessed 25-August-2023]"},{"issue":"06","key":"10432_CR48","doi-asserted-by":"publisher","first-page":"3536","DOI":"10.1109\/TSE.2023.3265962","volume":"49","author":"A Rahman","year":"2023","unstructured":"Rahman A, Parnin C (2023) Detecting and characterizing propagation of security weaknesses in puppet-based infrastructure management. IEEE Trans Softw Eng 49(06):3536\u20133553. https:\/\/doi.org\/10.1109\/TSE.2023.3265962","journal-title":"IEEE Trans Softw Eng"},{"issue":"3","key":"10432_CR49","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1109\/MSEC.2021.3065190","volume":"19","author":"A Rahman","year":"2021","unstructured":"Rahman A, Williams L (2021) Different kind of smells: Security smells in infrastructure as code scripts. IEEE Security Privacy 19(3):33\u201341. https:\/\/doi.org\/10.1109\/MSEC.2021.3065190","journal-title":"IEEE Security Privacy"},{"key":"10432_CR50","doi-asserted-by":"publisher","unstructured":"Rahman A, Agrawal A, Krishna R, Sobran A (2018a) Characterizing the influence of continuous integration: Empirical results from 250+ open source and proprietary projects. In: Proceedings of the 4th ACM SIGSOFT International Workshop on Software Analytics, ACM, New York, NY, USA, SWAN 2018, pp\u00a08\u201314. https:\/\/doi.org\/10.1145\/3278142.3278149","DOI":"10.1145\/3278142.3278149"},{"key":"10432_CR51","doi-asserted-by":"publisher","unstructured":"Rahman A, Mahdavi-Hezaveh R, Williams L (2018) A systematic mapping study of infrastructure as code research. Inf Softw Technol. https:\/\/doi.org\/10.1016\/j.infsof.2018.12.004. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0950584918302507","DOI":"10.1016\/j.infsof.2018.12.004"},{"key":"10432_CR52","doi-asserted-by":"crossref","unstructured":"Rahman A, Parnin C, Williams L (2019) The seven sins: security smells in infrastructure as code scripts. In: 2019 IEEE\/ACM 41st international conference on software engineering (ICSE), IEEE, pp\u00a0164\u2013175","DOI":"10.1109\/ICSE.2019.00033"},{"key":"10432_CR53","doi-asserted-by":"publisher","unstructured":"Rahman A, Farhana E, Parnin C, Williams L (2020a) Gang of eight: a defect taxonomy for infrastructure as code scripts. In: Proceedings of the ACM\/IEEE 42nd international conference on software engineering, association for computing machinery, New York, NY, USA, ICSE \u201920, p 752\u2013764. https:\/\/doi.org\/10.1145\/3377811.3380409","DOI":"10.1145\/3377811.3380409"},{"issue":"5","key":"10432_CR54","doi-asserted-by":"publisher","first-page":"3430","DOI":"10.1007\/s10664-020-09841-8","volume":"25","author":"A Rahman","year":"2020","unstructured":"Rahman A, Farhana E, Williams L (2020) The \u2019as code\u2019activities: development anti-patterns for infrastructure as code. Empir Softw Eng 25(5):3430\u20133467","journal-title":"Empir Softw Eng"},{"key":"10432_CR55","doi-asserted-by":"publisher","unstructured":"Rahman A, Barsha FL, Morrison P (2021a) Shhh!: 12 practices for secret management in infrastructure as code. In: 2021 IEEE secure development conference (SecDev), pp 56\u201362. https:\/\/doi.org\/10.1109\/SecDev51306.2021.00024","DOI":"10.1109\/SecDev51306.2021.00024"},{"key":"10432_CR56","doi-asserted-by":"publisher","unstructured":"Rahman A, Rahman MR, Parnin C, Williams L (2021b) Security smells in ansible and chef scripts: a replication study. ACM Trans Softw Eng Methodol 30(1). https:\/\/doi.org\/10.1145\/3408897","DOI":"10.1145\/3408897"},{"key":"10432_CR57","doi-asserted-by":"crossref","unstructured":"Rahman A, Shamim SI, Shahriar H, Wu F (2022) Can we use authentic learning to educate students about secure infrastructure as code development?, Association for Computing Machinery, New York, NY, USA. https:\/\/akondrahman.github.io\/publication\/iticse2022","DOI":"10.1145\/3502717.3532125"},{"key":"10432_CR58","doi-asserted-by":"publisher","unstructured":"Rahman F, Devanbu P (2013) How, and why, process metrics are better. In: 2013 35th international conference on software engineering (ICSE), pp\u00a0432\u2013441. https:\/\/doi.org\/10.1109\/ICSE.2013.6606589","DOI":"10.1109\/ICSE.2013.6606589"},{"key":"10432_CR59","unstructured":"RedHat (2022a) Customer Case Study - NEC. https:\/\/www.ansible.com\/hubfs\/pdf\/Ansible-Case-Study-NEC.pdf, [Online; accessed 12-Sep-2022]"},{"key":"10432_CR60","unstructured":"RedHat (2022b) Customer Case Study - NetApp. https:\/\/www.ansible.com\/hubfs\/2018_Content\/RH-netapp-case-study.pdf, [Online; accessed 02-Oct-2022]"},{"key":"10432_CR61","doi-asserted-by":"publisher","unstructured":"Reis S, Abreu R, d\u2019Amorim M, Fortunato D (2023) Leveraging practitioners\u2019 feedback to improve a security linter. In: Proceedings of the 37th IEEE\/ACM international conference on automated software engineering, association for computing machinery, New York, NY, USA, ASE \u201922. https:\/\/doi.org\/10.1145\/3551349.3560419","DOI":"10.1145\/3551349.3560419"},{"key":"10432_CR62","unstructured":"Ryan J (2022) Ansible automation platform: private automation hub. https:\/\/people.redhat.com\/bdumont\/Central-Region-Lunch-n-Learns\/Ansible_Automation_Platform_Private_Automation_Hub.pdf, [Online; accessed 10-Dec-2022]"},{"key":"10432_CR63","doi-asserted-by":"publisher","unstructured":"Saavedra N, Ferreira JaF (2023) Glitch: Automated polyglot security smell detection in infrastructure as code. In: Proceedings of the 37th IEEE\/ACM international conference on automated software engineering, association for computing machinery, New York, NY, USA, ASE \u201922. https:\/\/doi.org\/10.1145\/3551349.3556945","DOI":"10.1145\/3551349.3556945"},{"key":"10432_CR64","volume-title":"The coding manual for qualitative researchers","author":"J Salda\u00f1a","year":"2015","unstructured":"Salda\u00f1a J (2015) The coding manual for qualitative researchers. Sage"},{"key":"10432_CR65","unstructured":"Schwarz J (2019) Hardcoded and Embedded Credentials are an IT Security Hazard \u2013Here\u2019s What You Need to Know. https:\/\/www.beyondtrust.com\/blog\/entry\/hardcoded-and-embedded-credentials-are-an-it-security-hazard-heres-what-you-need-to-know, [Online; accessed 02-July-2021]"},{"key":"10432_CR66","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1007\/s10664-008-9060-1","volume":"13","author":"FJ Shull","year":"2008","unstructured":"Shull FJ, Carver JC, Vegas S, Juristo N (2008) The role of replications in empirical software engineering. Empir Softw Eng 13:211\u2013218","journal-title":"Empir Softw Eng"},{"key":"10432_CR67","doi-asserted-by":"publisher","unstructured":"Smith E, Loftin R, Murphy-Hill E, Bird C, Zimmermann T (2013) Improving developer participation rates in surveys. In: 2013 6th international workshop on cooperative and human aspects of software engineering (CHASE), pp\u00a089\u201392. https:\/\/doi.org\/10.1109\/CHASE.2013.6614738","DOI":"10.1109\/CHASE.2013.6614738"},{"key":"10432_CR68","doi-asserted-by":"publisher","unstructured":"Smith J, Johnson B, Murphy-Hill E, Chu B, Lipford HR (2015) Questions developers ask while diagnosing potential security vulnerabilities with static analysis. In: Proceedings of the 2015 10th joint meeting on foundations of software engineering, association for computing machinery, New York, NY, USA, ESEC\/FSE 2015, p 248\u2013259. https:\/\/doi.org\/10.1145\/2786805.2786812","DOI":"10.1145\/2786805.2786812"},{"key":"10432_CR69","volume-title":"Introduction to Data Mining","author":"PN Tan","year":"2005","unstructured":"Tan PN, Steinbach M, Kumar V (2005) Introduction to Data Mining, 1st edn. Addison-Wesley Longman Publishing Co., Inc, Boston, MA, USA","edition":"1"},{"key":"10432_CR70","unstructured":"Brikman Y (2016) Why we use terraform and not chef, puppet, ansible, saltstack, or cloudformation. https:\/\/blog.gruntwork.io\/why-we-use-terraform-and-not-chef-puppet-ansible-saltstack-or-cloudformation-7989dad2865c, [Online; accessed 24-July-2023]"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-023-10432-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10664-023-10432-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-023-10432-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,27]],"date-time":"2024-03-27T13:35:33Z","timestamp":1711546533000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10664-023-10432-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,29]]},"references-count":70,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,1]]}},"alternative-id":["10432"],"URL":"https:\/\/doi.org\/10.1007\/s10664-023-10432-6","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,29]]},"assertion":[{"value":"22 November 2023","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 December 2023","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declaration"}},{"value":"The authors have no relevant financial or non-financial interests to disclose.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}}],"article-number":"34"}}