Fwd: Using SAST Tools in gnome-desktop/vte2.91

Hi!

Forwarding an inquiry I got, since it appeared to be reasonably serious.

Rgds,
Gunnar


-------- Forwarded Message --------
Subject: Using SAST Tools in gnome-desktop/vte2.91
Date: Tue, 14 Nov 2023 06:46:51 +0000
From: Aravind Kumar Machiry <[email protected]>
To: [email protected] <[email protected]>

Hello Gunnar Hjalmarsson,

I am Aravind Machiry, an Assistant Professor at Purdue's ECE Department.

I work in the area of software security. We are working on a project 
(details at the end of this email) related to the use of Static Analysis 
Security Testing (SAST) tools in Debian packages developed in C/C++.

We noticed that you are one of the owners/maintainers of 
gnome-desktop/vte2.91 Debian project.

We want to understand whether you are using any SAST tools as part of 
your project and, if not, what are your challenges in incorporating SAST 
tools in your project.

We are conducting a short anonymous survey (~2min) for this.

Survey Link: https://purdue.ca1.qualtrics.com/jfe/form/SV_bsjJScol1rUHzhA

As a participant, you will be asked to answer a few questions related to 
the use of SAST tools in your project.

Your participation will greatly help us understand the prevalence of 
SAST tools usage in the Debian ecosystem and subsequently provide useful 
research directions in improving SAST tools usage.

Note that participation is voluntary and required to be at least 18 
years old.

-Thank you,
Aravind

DETAILS ABOUT THE STUDY:

STUDY TITLE:

Understanding Developers' Perspective on the Use of Static Analysis 
Security Testing

DURATION:

The study would take 1-2 minutes.

CONFIDENTIALITY:

No personal information will be asked in the survey, and individual 
responses will only be accessible to the PI and will not be shared.

CONTACT INFORMATION:

The study is led by Dr. Aravind Machiry ([email protected]), Assistant 
Professor of the Elmore School of Electrical & Computer Engineering 
Department at Purdue University.

IRB INFORMATION:

The Purdue Institutional Review Board, #2023-1695 has reviewed this 
study and determined to be an exempted study.

If you have questions about your rights while taking part in the study 
or have concerns about the treatment of research participants, please 
call the Human Research Protection Program at (765) 494-5942 or email 
[email protected].