Fixed but Not Gone: A Longitudinal Study of Security Violations in Infrastructure-as-Code

This repository contains the replication package for the paper *Fixed but Not Gone: A Longitudinal Study of Security Violations in Infrastructure-as-Code*, including all data, scripts, and documentation needed to reproduce the analyses and figures reported in the paper. This dataset accompanies a paper currently under double-anonymous review. Author information will be updated upon acceptance.