Code scanner (internship) - Revision history

StefanoZacchiroli: mark as completed

2020-12-14T09:43:50Z

mark as completed

← Older revision		Revision as of 09:43, 14 December 2020
Line 17:		Line 17:
	}}		}}

	[[Category:~~Ongoing~~ internship]]		[[Category:Completed internship]]

StefanoZacchiroli: Undo revision 1245 by StefanoZacchiroli (talk)

2020-02-16T21:13:11Z

Undo revision 1245 by StefanoZacchiroli (talk)

← Older revision		Revision as of 21:13, 16 February 2020
Line 1:		Line 1:
	{{Internship		{{Internship
	\|description=		\|description=Companies shipping software as part of their products review
	~~Software Heritage is~~ the ~~largest existing public archive of software~~ source code~~, which also keeps track~~ of ~~where and when source code files have been observed in the wild.~~		the source code they ship against databases of known FOSS components to make
	~~Given the checksum~~ of ~~a source~~ code ~~file and the current state of the archive, one can produce a list of all the places where said file has been (publicly) published in the past~~.		sure they are not shipping unexpected pieces of code. The goal of this
	The goal of this internship is ~~to experiment with increasing the granularity at which~~ source code ~~can~~ be ~~tracked, from entire files (current solution)~~ to ~~code snippets and~~/~~or individual lines of code~~.		internship is developing a source code scanner that will be run on a software
	~~Different techniques will~~ be ~~explored~~, ~~implemented, and benchmarked on archive subsets to estimate their viability~~.		project to determine which parts of it are already known/archived in the
			Software Heritage archive. The scanning should be as efficient as possible and
			the results should be displayed in simple graphical ways (e.g.,
			[https://en.wikipedia.org/wiki/Treemapping treemaps]).

	\|skills=		\|skills=
	* Python development		* Python development

	~~Will be considered a plus:~~
	* experience with source code indexing and/or search
	* experience with software audit solutions (for license compliance issues, security vulnerabilities, etc.)

	\|mentors=		\|mentors=

StefanoZacchiroli at 21:12, 16 February 2020

2020-02-16T21:12:15Z

← Older revision		Revision as of 21:12, 16 February 2020
Line 1:		Line 1:
	{{Internship		{{Internship
	\|description=~~Companies shipping~~ software ~~as part~~ of ~~their products review~~		\|description=
	the source code ~~they ship against databases~~ of ~~known FOSS components to make~~		Software Heritage is the largest existing public archive of software source code, which also keeps track of where and when source code files have been observed in the wild.
	~~sure they are not shipping unexpected pieces~~ of ~~code~~. The goal of this		Given the checksum of a source code file and the current state of the archive, one can produce a list of all the places where said file has been (publicly) published in the past.
	internship is ~~developing a~~ source code ~~scanner that will~~ be ~~run on a software~~		The goal of this internship is to experiment with increasing the granularity at which source code can be tracked, from entire files (current solution) to code snippets and/or individual lines of code.
	~~project~~ to ~~determine which parts~~ of ~~it are already known/archived in the~~		Different techniques will be explored, implemented, and benchmarked on archive subsets to estimate their viability.
	~~Software Heritage archive~~. ~~The scanning should be as efficient as possible and~~
	~~the results should~~ be ~~displayed in simple graphical ways (e.g.~~,
	~~[https://en.wikipedia.org/wiki/Treemapping treemaps])~~.

	\|skills=		\|skills=
	* Python development		* Python development

			Will be considered a plus:
			* experience with source code indexing and/or search
			* experience with software audit solutions (for license compliance issues, security vulnerabilities, etc.)

	\|mentors=		\|mentors=

StefanoZacchiroli: port markup to internship template

2020-02-16T19:28:25Z

port markup to internship template

← Older revision		Revision as of 19:28, 16 February 2020
Line 1:		Line 1:
	~~'''Context''': [https://www.softwareheritage.org/ Software Heritage] is an~~		{{Internship
	~~ambitious research project whose goal is to collect, preserve in the very long~~		\|description=Companies shipping software as part of their products review
	~~term, and share the whole publicly accessible Free/Open Source Software~~
	~~(FOSS) in source code form.~~

	~~'''Description''':~~ Companies shipping software as part of their products review
	the source code they ship against databases of known FOSS components to make		the source code they ship against databases of known FOSS components to make
	sure they are not shipping unexpected pieces of code. The goal of this		sure they are not shipping unexpected pieces of code. The goal of this
Line 13:		Line 9:
	[https://en.wikipedia.org/wiki/Treemapping treemaps]).		[https://en.wikipedia.org/wiki/Treemapping treemaps]).

	~~'''Desirable~~ skills~~''' to obtain this internship:~~		\|skills=
	* Python development		* Python development

	~~'''Workplace''': Inria Paris~~		\|mentors=

	~~'''Environnement''': you will work shoulder to shoulder with all members of the~~
	~~Software Heritage team, and you will have a chance to witness from within the~~
	~~construction of the ultimate source code archive.~~

	~~'''Internship~~ mentors~~''':~~
	* Guillaume Rousseau <guillaume.rousseau@univ-paris-diderot.fr>		* Guillaume Rousseau <guillaume.rousseau@univ-paris-diderot.fr>
	* Stefano Zacchiroli <zack@upsilon.cc>		* Stefano Zacchiroli <zack@upsilon.cc>
			}}

	[[Category:Ongoing internship]]		[[Category:Ongoing internship]]
	~~[[Category:Internship]]~~
	~~[[Category:Lang:English]]~~

StefanoZacchiroli at 12:44, 28 January 2020

2020-01-28T12:44:17Z

← Older revision		Revision as of 12:44, 28 January 2020
Line 27:		Line 27:


	[[Category:~~Available~~ internship]]		[[Category:Ongoing internship]]
	[[Category:Internship]]		[[Category:Internship]]
	[[Category:Lang:English]]		[[Category:Lang:English]]

StefanoZacchiroli at 12:42, 28 January 2020

2020-01-28T12:42:11Z

← Older revision		Revision as of 12:42, 28 January 2020
Line 1:		Line 1:
	~~== Compliance code scanner based on the Software Heritage archive ==~~

	'''Context''': [https://www.softwareheritage.org/ Software Heritage] is an		'''Context''': [https://www.softwareheritage.org/ Software Heritage] is an
	ambitious research project whose goal is to collect, preserve in the very long		ambitious research project whose goal is to collect, preserve in the very long

StefanoZacchiroli: Created page with "== Compliance code scanner based on the Software Heritage archive == '''Context''': [https://www.softwareheritage.org/ Software Heritage] is an ambitious research project who..."

2018-10-22T08:52:47Z

Created page with "== Compliance code scanner based on the Software Heritage archive == '''Context''': [https://www.softwareheritage.org/ Software Heritage] is an ambitious research project who..."

New page

== Compliance code scanner based on the Software Heritage archive ==

'''Context''': [https://www.softwareheritage.org/ Software Heritage] is an
ambitious research project whose goal is to collect, preserve in the very long
term, and share the whole publicly accessible Free/Open Source Software
(FOSS) in source code form.

'''Description''': Companies shipping software as part of their products review
the source code they ship against databases of known FOSS components to make
sure they are not shipping unexpected pieces of code. The goal of this
internship is developing a source code scanner that will be run on a software
project to determine which parts of it are already known/archived in the
Software Heritage archive. The scanning should be as efficient as possible and
the results should be displayed in simple graphical ways (e.g.,
[https://en.wikipedia.org/wiki/Treemapping treemaps]).

'''Desirable skills''' to obtain this internship:
* Python development

'''Workplace''': Inria Paris

'''Environnement''': you will work shoulder to shoulder with all members of the
Software Heritage team, and you will have a chance to witness from within the
construction of the ultimate source code archive.

'''Internship mentors''':
* Guillaume Rousseau <guillaume.rousseau@univ-paris-diderot.fr>
* Stefano Zacchiroli <zack@upsilon.cc>

[[Category:Available internship]]
[[Category:Internship]]
[[Category:Lang:English]]