{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:00:46Z","timestamp":1750309246607,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,15]],"date-time":"2024-04-15T00:00:00Z","timestamp":1713139200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Italian Ministry of University and Research - PRIN 2022","award":["2022B3BP5S"],"award-info":[{"award-number":["2022B3BP5S"]}]},{"name":"Spanish Ministry of Science, Innovation and Universities","award":["PID2022-139551NB-I00"],"award-info":[{"award-number":["PID2022-139551NB-I00"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,15]]},"DOI":"10.1145\/3643991.3644905","type":"proceedings-article","created":{"date-parts":[[2024,7,2]],"date-time":"2024-07-02T13:05:13Z","timestamp":1719925513000},"page":"231-241","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Not all Dockerfile Smells are the Same: An Empirical Evaluation of Hadolint Writing Practices by Experts"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5241-1608","authenticated-orcid":false,"given":"Giovanni","family":"Rosa","sequence":"first","affiliation":[{"name":"University of Molise, Pesche, Italy"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1764-9685","authenticated-orcid":false,"given":"Simone","family":"Scalabrino","sequence":"additional","affiliation":[{"name":"University of Molise, Pesche, Italy"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1442-6761","authenticated-orcid":false,"given":"Gregorio","family":"Robles","sequence":"additional","affiliation":[{"name":"Universidad Rey Juan Carlos, Madrid, Spain"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7995-8582","authenticated-orcid":false,"given":"Rocco","family":"Oliveto","sequence":"additional","affiliation":[{"name":"University of Molise, Pesche, Italy"}]}],"member":"320","published-online":{"date-parts":[[2024,7,2]]},"reference":[{"volume-title":"hadolint: Dockerfile linter, validate inline bash, written in Haskell. https:\/\/github.com\/hadolint\/hadolint. [Online","year":"2022","key":"e_1_3_2_1_1_1","unstructured":"2015. hadolint: Dockerfile linter, validate inline bash, written in Haskell. https:\/\/github.com\/hadolint\/hadolint. [Online; accessed 2-Jun-2022]."},{"volume-title":"Contacting users for surveys. https:\/\/github.com\/ghtorrent\/ghtorrent.org\/blob\/master\/faq.md#contacting-users-for-surveys. [Online","year":"2023","key":"e_1_3_2_1_2_1","unstructured":"2020. Contacting users for surveys. https:\/\/github.com\/ghtorrent\/ghtorrent.org\/blob\/master\/faq.md#contacting-users-for-surveys. [Online; accessed 14-July-2023]."},{"volume-title":"Ethical issues to consider when conducting survey research. https:\/\/www.qualtrics.com\/blog\/ethical-issues-for-online-surveys\/. [Online","year":"2023","key":"e_1_3_2_1_3_1","unstructured":"2020. Ethical issues to consider when conducting survey research. https:\/\/www.qualtrics.com\/blog\/ethical-issues-for-online-surveys\/. [Online; accessed 14-July-2023]."},{"volume-title":"The all_packages pip package. https:\/\/pypi.org\/project\/all-packages\/. [Online","year":"2023","key":"e_1_3_2_1_4_1","unstructured":"2022. The all_packages pip package. https:\/\/pypi.org\/project\/all-packages\/. [Online; accessed 28-July-2023]."},{"volume-title":"An introduction to the NPM package manager. https:\/\/nodejs.dev\/en\/learn\/an-introduction-to-the-npm-package-manager\/. [Online","year":"2023","key":"e_1_3_2_1_5_1","unstructured":"2022. An introduction to the NPM package manager. https:\/\/nodejs.dev\/en\/learn\/an-introduction-to-the-npm-package-manager\/. [Online; accessed 28-July-2023]."},{"volume-title":"Best practices for writing Dockerfiles. https:\/\/docs.docker.com\/develop\/develop-images\/dockerfile_best-practices\/. [Online","year":"2022","key":"e_1_3_2_1_6_1","unstructured":"2023. Best practices for writing Dockerfiles. https:\/\/docs.docker.com\/develop\/develop-images\/dockerfile_best-practices\/. [Online; accessed 2-Jun-2022]."},{"volume-title":"CIS Docker benchmark. https:\/\/www.cisecurity.org\/benchmark\/docker. [Online","year":"2023","key":"e_1_3_2_1_7_1","unstructured":"2023. CIS Docker benchmark. https:\/\/www.cisecurity.org\/benchmark\/docker. [Online; accessed 14-July-2023]."},{"volume-title":"Docker Bench for Security. https:\/\/github.com\/docker\/docker-bench-security. [Online","year":"2023","key":"e_1_3_2_1_8_1","unstructured":"2023. Docker Bench for Security. https:\/\/github.com\/docker\/docker-bench-security. [Online; accessed 16-July-2023]."},{"volume-title":"Dockle - Container Image Linter for Security. https:\/\/github.com\/goodwithtech\/dockle. [Online","year":"2023","key":"e_1_3_2_1_9_1","unstructured":"2023. Dockle - Container Image Linter for Security. https:\/\/github.com\/goodwithtech\/dockle. [Online; accessed 16-July-2023]."},{"volume-title":"OWASP Docker security cheat sheet. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/DockerSecurityCheatSheet.html. [Online","year":"2023","key":"e_1_3_2_1_10_1","unstructured":"2023. OWASP Docker security cheat sheet. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/DockerSecurityCheatSheet.html. [Online; accessed 14-July-2023]."},{"volume-title":"Ruby gem stats. https:\/\/rubygems.org\/stats. [Online","year":"2023","key":"e_1_3_2_1_11_1","unstructured":"2023. Ruby gem stats. https:\/\/rubygems.org\/stats. [Online; accessed 28-July-2023]."},{"key":"e_1_3_2_1_12_1","volume-title":"DockerCleaner: Automatic Repair of Security Smells in Dockerfiles. In 2023 IEEE International Conference on Software Maintenance and Evolution (ICSME). IEEE, To Appear.","author":"Bui Quang-Cuong","year":"2023","unstructured":"Quang-Cuong Bui, Malte Lauk\u00f6tter, and Riccardo Scandariato. 2023. DockerCleaner: Automatic Repair of Security Smells in Dockerfiles. In 2023 IEEE International Conference on Software Maintenance and Evolution (ICSME). IEEE, To Appear."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.67"},{"key":"e_1_3_2_1_14_1","volume-title":"Revisiting Dockerfiles in Open Source Software Over Time. In 2021 IEEE\/ACM 18th International Conference on Mining Software Repositories (MSR). IEEE, 449--459","author":"Eng Kalvin","year":"2021","unstructured":"Kalvin Eng and Abram Hindle. 2021. Revisiting Dockerfiles in Open Source Software Over Time. In 2021 IEEE\/ACM 18th International Conference on Mining Software Repositories (MSR). IEEE, 449--459."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Arlene Fink. 2003. The survey handbook. sage.","DOI":"10.4135\/9781412986328"},{"key":"e_1_3_2_1_16_1","volume-title":"11th European Conference","author":"Fowler Martin","year":"1997","unstructured":"Martin Fowler and Kent Beck. 1997. Refactoring: Improving the design of existing code. In 11th European Conference. Jyv\u00e4skyl\u00e4, Finland."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3382494.3410693"},{"key":"e_1_3_2_1_18_1","volume-title":"Automating dependency updates in practice: An exploratory study on github dependabot","author":"He Runzhi","year":"2023","unstructured":"Runzhi He, Hao He, Yuxia Zhang, and Minghui Zhou. 2023. Automating dependency updates in practice: An exploratory study on github dependabot. IEEE Transactions on Software Engineering (2023)."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387498"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380406"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00096"},{"key":"e_1_3_2_1_22_1","volume-title":"Personal opinion surveys. Guide to advanced empirical software engineering","author":"Kitchenham Barbara A","year":"2008","unstructured":"Barbara A Kitchenham and Shari L Pfleeger. 2008. Personal opinion surveys. Guide to advanced empirical software engineering (2008), 63--92."},{"key":"e_1_3_2_1_23_1","volume-title":"Refactorings and Technical Debt in Docker Projects: An Empirical Study. In 2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 781--791","author":"Ksontini Emna","year":"2021","unstructured":"Emna Ksontini, Marouane Kessentini, Thiago do N Ferreira, and Foyzul Hassan. 2021. Refactorings and Technical Debt in Docker Projects: An Empirical Study. In 2021 36th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 781--791."},{"key":"e_1_3_2_1_24_1","volume-title":"Understanding the Usability of AI Programming Assistants. In 2024 IEEE\/ACM 46rd International Conference on Software Engineering (ICSE). IEEE, To appear.","author":"Liang Jenny T","year":"2023","unstructured":"Jenny T Liang, Chenyang Yang, and Brad A Myers. 2023. Understanding the Usability of AI Programming Assistants. In 2024 IEEE\/ACM 46rd International Conference on Software Engineering (ICSE). IEEE, To appear."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549082"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME46990.2020.00043"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3563214"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3524843.3528096"},{"key":"e_1_3_2_1_29_1","volume-title":"What Quality Aspects Influence the Adoption of Docker Images? ACM Transactions on Software Engineering and Methodology","author":"Rosa Giovanni","year":"2023","unstructured":"Giovanni Rosa, Simone Scalabrino, Gabriele Bavota, and Rocco Oliveto. 2023. What Quality Aspects Influence the Adoption of Docker Images? ACM Transactions on Software Engineering and Methodology (2023)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","unstructured":"Giovanni Rosa Simone Scalabrino Gregorio Robles and Rocco Oliveto. 2024. Replication package. 10.6084\/m9.figshare.23817024.v1","DOI":"10.6084\/m9.figshare.23817024.v1"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-013-9286-4"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/CHASE.2013.6614738"},{"key":"e_1_3_2_1_33_1","unstructured":"Donna Spencer. 2009. Card sorting: Designing usable categories. Rosenfeld Media."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.59"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380394"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2973750"},{"key":"e_1_3_2_1_37_1","volume-title":"Understanding the Archived Projects on GitHub. In 2023 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 13--24","author":"Xia Xiaoya","year":"2023","unstructured":"Xiaoya Xia, Shengyu Zhao, Xinran Zhang, Zehua Lou, Wei Wang, and Fenglin Bi. 2023. Understanding the Archived Projects on GitHub. In 2023 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 13--24."},{"key":"e_1_3_2_1_38_1","volume-title":"DRIVE: Dockerfile Rule Mining and Violation Detection. arXiv preprint arXiv:2212.05648","author":"Zhou Yu","year":"2022","unstructured":"Yu Zhou, Weilin Zhan, Zi Li, Tingting Han, Taolue Chen, and Harald Gall. 2022. DRIVE: Dockerfile Rule Mining and Violation Detection. arXiv preprint arXiv:2212.05648 (2022)."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2942301"}],"event":{"name":"MSR '24: 21st International Conference on Mining Software Repositories","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"],"location":"Lisbon Portugal","acronym":"MSR '24"},"container-title":["Proceedings of the 21st International Conference on Mining Software Repositories"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643991.3644905","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643991.3644905","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:56:44Z","timestamp":1750291004000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643991.3644905"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,15]]},"references-count":39,"alternative-id":["10.1145\/3643991.3644905","10.1145\/3643991"],"URL":"https:\/\/doi.org\/10.1145\/3643991.3644905","relation":{},"subject":[],"published":{"date-parts":[[2024,4,15]]},"assertion":[{"value":"2024-07-02","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}