Replication package for "Analysing Infrastructure-as-Code Software Supply Chains: Extraction of Ansible Plugin Dependencies", submitted to SANER'25.
analysis.zip contains the analysis scripts and notebooks, as well as the Software Composition Analysis.
data.zip contains the dataset used in this study, including the Ansible collection sources and all derived data used in the RQs.
To reproduce:
Download the above-mentioned ZIP files and extract them. Put the extracted contents of data.zip (the data directory) into the directory containing the analysis scripts.
Install the required dependencies using Poetry: poetry install
Follow the instructions in the Jupyter notebooks.
Funding
Pattern Mining and Static Analysis for Detecting Defects in Infrastructure as Code