Fri 8 Dec 2023 11:30 - 12:00 at Foothill G - Bugs, smells, and vulnerabilities Chair(s): Miroslaw Staron

Continuous Integration (CI) is a common software engineering practice in which the code changes are frequently merged into a software project repository after automated builds and tests have been successfully run. CI enables developers to quickly detect bugs, enhance the quality of the code, and shorten review times. However, developers may encounter some obstacles in following the CI principles. They may be unaware of them, they may follow the principles partially or they may even act against them. These behaviors result in CI smells. CI smells may in turn lessen the benefits of CI. Addressing CI smells rapidly allows software projects to fully reap the benefits of CI and increase its effectiveness. The main objective of this study is to investigate how frequently developers address CI smells. To achieve this objective, we first selected seven smells, then implemented scripts for detecting these smells automatically, and then ran the scripts in eight open-source software projects using GitHub Actions. To assess the resolution extent of CI smells by practitioners, we calculated the occurrences and time-to-resolution (TTR) of each smell. Our results suggest that Skipped Job smell has been fixed slightly more than other CI smells. The most frequently observed smell was Long Build, which was detected in an average of 19.03% of all CI builds. Fake Success smell does not get resolved in projects where it exists. Our study reveals that practitioners do not fix CI smells in practice. Further studies are needed to explore the underlying reasons behind this, in order to recommend more effective strategies for addressing these smells.

Fri 8 Dec

Displayed time zone: Pacific Time (US & Canada) change

11:00 - 12:30
Bugs, smells, and vulnerabilitiesPROMISE 2023 at Foothill G
Chair(s): Miroslaw Staron University of Gothenburg
11:00
30m
Paper
BuggIn: Automatic Intrinsic Bugs Classification Model using NLP and ML
PROMISE 2023
Pragya Bhandari University of British Columbia, Gema Rodríguez-Pérez University of British Columbia (UBC)
DOI
11:30
30m
Paper
Do Developers Fix Continuous Integration Smells?
PROMISE 2023
Ayberk Yaşa Bilkent University, Ege Ergül Bilkent University, Eray Tüzün Bilkent University, Hakan Erdogmus Carnegie Mellon University
DOI
12:00
30m
Paper
Large Scale Study of Orphan Vulnerabilities in the Software Supply Chain
PROMISE 2023
David Reid University of Tennessee, Kristiina Rahkema University of Tartu, James Walden Northern Kentucky University
DOI