Fwd: Using SAST Tools in gnome-desktop/vte2.91
Hi!
Forwarding an inquiry I got, since it appeared to be reasonably serious.
Rgds,
Gunnar
-------- Forwarded Message --------
Subject: Using SAST Tools in gnome-desktop/vte2.91
Date: Tue, 14 Nov 2023 06:46:51 +0000
From: Aravind Kumar Machiry <amachiry@purdue.edu>
To: gunnarhj@debian.org <gunnarhj@debian.org>
Hello Gunnar Hjalmarsson,
I am Aravind Machiry, an Assistant Professor at Purdue's ECE Department.
I work in the area of software security. We are working on a project
(details at the end of this email) related to the use of Static Analysis
Security Testing (SAST) tools in Debian packages developed in C/C++.
We noticed that you are one of the owners/maintainers of
gnome-desktop/vte2.91 Debian project.
We want to understand whether you are using any SAST tools as part of
your project and, if not, what are your challenges in incorporating SAST
tools in your project.
We are conducting a short anonymous survey (~2min) for this.
Survey Link: https://purdue.ca1.qualtrics.com/jfe/form/SV_bsjJScol1rUHzhA
As a participant, you will be asked to answer a few questions related to
the use of SAST tools in your project.
Your participation will greatly help us understand the prevalence of
SAST tools usage in the Debian ecosystem and subsequently provide useful
research directions in improving SAST tools usage.
Note that participation is voluntary and required to be at least 18
years old.
-Thank you,
Aravind
DETAILS ABOUT THE STUDY:
STUDY TITLE:
Understanding Developers' Perspective on the Use of Static Analysis
Security Testing
DURATION:
The study would take 1-2 minutes.
CONFIDENTIALITY:
No personal information will be asked in the survey, and individual
responses will only be accessible to the PI and will not be shared.
CONTACT INFORMATION:
The study is led by Dr. Aravind Machiry (amachiry@purdue.edu), Assistant
Professor of the Elmore School of Electrical & Computer Engineering
Department at Purdue University.
IRB INFORMATION:
The Purdue Institutional Review Board, #2023-1695 has reviewed this
study and determined to be an exempted study.
If you have questions about your rights while taking part in the study
or have concerns about the treatment of research participants, please
call the Human Research Protection Program at (765) 494-5942 or email
irb@purdue.edu.
Reply to: