Code-change based prompt for code repair

A computer-implemented method, comprising:

• providing a group having a plurality of code changes made to correct a first type of software vulnerability;
• obtaining a source code snippet having a vulnerability of the first type of software vulnerability;
• selecting at least one code change from the group associated with the first type of software vulnerability;
• generating a prompt for a large language model to generate repaired code to correct the vulnerability of the source code snippet, wherein the prompt includes the source code snippet having the vulnerability and the selected at least one code change;
• and
• obtaining from the large language model the repaired code given the prompt.

A computer-implemented method, comprising:

• obtaining a group comprising a plurality of code diffs associated with a first type of a software vulnerability, wherein a code diff of the plurality of code diffs is associated with a vector comprising an embedding of a respective code diff and a description of the respective code diff;
• choosing a select one of the code diffs of the group based on a closest similarity of the vector of the select one of the code diffs to a mean intra-cluster distance and a mean nearest-cluster distance of each vector in the group;
• obtaining a source code snippet having a first type of vulnerability;
• creating a prompt for a large language model to generate repaired code for the source code snippet, wherein the prompt includes the source code snippet and the select one of the code diffs of a group associated with the first type of vulnerability;
• and
• obtaining repaired code for the source code snippet from a large language model given the prompt.