Software composition analysis (SCA) to identify AI-generated code that includes code copied from third-party libraries

A server comprising:

• one or more processors;
• and
• one or more non-transitory computer readable media storing instructions executable by the one or more processors to perform operations comprising:
• selecting a code file in a development system to create a selected code file;
• segmenting the selected code file, using a parser, to create multiple parsed blocks comprising:
• function definition blocks;
• file license blocks;
• and
• remaining blocks;
• selecting a block of the multiple parsed blocks to create a selected block;
• creating, using a cryptographic hash function and based on the selected block, a block signature that uniquely identifies the selected block;
• comparing the block signature to multiple signatures of blocks in third-party libraries, the multiple signatures located in an index;
• based at least in part on determining that the block signature matches one of the multiple signatures of blocks in third-party libraries:
• determining, using the index, a source file from which the selected block was copied;
• and
• adding a source file identifier associated with the source file to a software composition report of the selected code file;
• identifying, based on the software composition report, one or more vulnerabilities included in the source file to create identified vulnerabilities;
• identifying, based on the one or more vulnerabilities, one or more fixes to address the vulnerabilities to create identified fixes;
• and
• providing the software composition report, the identified vulnerabilities, and the identified fixes to a software developer associated with the selected code file to enable the software developer to apply the identified fixes to the identified vulnerabilities.

One or more non-transitory computer readable media capable of storing instructions executable by one or more processors to perform operations comprising:

• selecting a code file in a development system to create a selected code file;
• segmenting the selected code file, using a parser, to create multiple parsed blocks comprising:
• function definition blocks;
• file license blocks;
• and
• remaining blocks;
• selecting a block of the multiple parsed blocks to create a selected block;
• creating, using a cryptographic hash function and based on the selected block, a block signature that uniquely identifies the selected block;
• comparing the block signature to multiple signatures of blocks in third-party libraries, the multiple signatures located in an index;
• based at least in part on determining that the block signature matches one of the multiple signatures of blocks in third-party libraries:
• determining, using the index, a source file from which the selected block was copied;
• and
• adding a source file identifier associated with the source file to a software composition report of the selected code file;
• identifying, based on the software composition report, one or more vulnerabilities included in the source file to create identified vulnerabilities;
• identifying, based on the one or more vulnerabilities, one or more fixes to address the vulnerabilities to create identified fixes;
• and
• providing the software composition report, the identified vulnerabilities, and the identified fixes to a software developer associated with the selected code file to enable the software developer to apply the identified fixes to the identified vulnerabilities.