Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub

In the corresponding scientific paper, we proposed a pipeline to mine Helm charts from Artifact Hub, a popular centralized repository, and analyze them using state-of-the-art open-source tools like Checkov and KICS. First, such a pipeline runs several chart analyzers and identifies the common and unique misconfigurations reported by each tool. Secondly, it uses LLMs to suggest mitigation for each misconfiguration. Finally, the chart refactoring previously generated is analyzed again by the same tools to see whether it satisfies the tool's policies. In this dataset, you can find all the Helm chart templates downloaded from Artifact Hub (available in June 2024), all the outputs of the tools analyzing such templates, the CSV result files with all LLM queries and answers, and the snippets selected for the manual analysis.在对应的学术论文中，我们提出了一套从热门集中式工件仓库Artifact Hub中挖掘Helm图表（Helm charts）的处理流水线，并借助Checkov与KICS等前沿开源工具对其开展分析。首先，该流水线会运行多款图表分析工具，识别各工具报告的共性与独有配置错误；其次，借助大语言模型（LLMs）为每一处配置错误提供缓解方案；最后，使用相同工具对此前生成的图表重构版本再次开展分析，以验证其是否符合工具的策略规范。 本数据集涵盖2024年6月从Artifact Hub下载的全部Helm图表模板、各工具分析此类模板生成的全部输出结果、收录所有大语言模型查询与回复的逗号分隔值（CSV）格式结果文件，以及用于人工分析的筛选代码片段。