Mikhail Surikov

Securing AI-Generated Code: A Just-in-Time Vulnerability Detection and Remediation Pipeline

An automated security evaluation pipeline that generates Python code from LLMSecEval prompts, scans for vulnerabilities using CodeQL and Bandit in parallel with an independent Code Validator LLM, enriches the Code Validator findings with MITRE ATT&CK techniques, CWE Observed Examples, and Python best practice guideline...