Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source

arXiv:2608.25793 · cs.CR, cs.SE · Submitted 2026-08-26 · Read on arXiv

cs.CR, cs.SE

Submitted: 2026-08-26

Updated: 2026-08-26

Comments: 12 pages, 9 figures, Accepted at the 41st IEEE/ACM International Conference on Automated Software Engineering (ASE 2026), Industry Showcase track

DOI: 10.1145/3832783.3834500

Code: https://github.com/moby/buildkit

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Clustering — 54× in this paper · explained in 2 episodes
Ablation — 4× in this paper · explained in 1 episode
Embeddings — 4× in this paper · explained in 2 episodes
Robustness — 4× in this paper · explained in 5 episodes
Core — 3× in this paper · explained in 2 episodes
Benchmarking — 2× in this paper · explained in 3 episodes
Feature Extraction — 2× in this paper · explained in 2 episodes
High-Level Specification — 2× in this paper
In-Context Learning — 2× in this paper · explained in 4 episodes
International Conference on Software Maintenance and Evolution — 2× in this paper
Mining Software Repositories — 2× in this paper
Spectral clustering — 2× in this paper · explained in 2 episodes
Alignment — 1× in this paper · explained in 1 episode
Decoupling — 1× in this paper · explained in 2 episodes
In-Context Learning (ICL) — 1× in this paper · explained in 5 episodes
RAG — 1× in this paper · explained in 3 episodes
Redundancy — 1× in this paper · explained in 2 episodes
Retrieval-Augmented Generation (RAG) — 1× in this paper · explained in 16 episodes
Transformer — 1× in this paper · explained in 2 episodes

Terminology

Related papers