InfraFix: Technology-Agnostic Repair of Infrastructure as Code

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Saavedra, Nuno, Ferreira, João F., Mendes, Alexandra
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866913840703209472
author Saavedra, Nuno
Ferreira, João F.
Mendes, Alexandra
author_facet Saavedra, Nuno
Ferreira, João F.
Mendes, Alexandra
contents Infrastructure as Code (IaC) enables scalable and automated IT infrastructure management but is prone to errors that can lead to security vulnerabilities, outages, and data loss. While prior research has focused on detecting IaC issues, Automated Program Repair (APR) remains underexplored, largely due to the lack of suitable specifications. In this work, we propose InfraFix, the first technology-agnostic framework for repairing IaC scripts. Unlike prior approaches, InfraFix allows APR techniques to be guided by diverse information sources. Additionally, we introduce a novel approach for generating repair scenarios, enabling large-scale evaluation of APR techniques for IaC. We implement and evaluate InfraFix using an SMT-based repair module and a state inference module that uses system calls, demonstrating its effectiveness across 254,288 repair scenarios with a success rate of 95.7%. Our work provides a foundation for advancing APR in IaC by enabling researchers to experiment with new state inference and repair techniques using InfraFix and to evaluate their approaches at scale with our repair scenario generation method.
format Preprint
id arxiv_https___arxiv_org_abs_2503_17220
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle InfraFix: Technology-Agnostic Repair of Infrastructure as Code
Saavedra, Nuno
Ferreira, João F.
Mendes, Alexandra
Software Engineering
Infrastructure as Code (IaC) enables scalable and automated IT infrastructure management but is prone to errors that can lead to security vulnerabilities, outages, and data loss. While prior research has focused on detecting IaC issues, Automated Program Repair (APR) remains underexplored, largely due to the lack of suitable specifications. In this work, we propose InfraFix, the first technology-agnostic framework for repairing IaC scripts. Unlike prior approaches, InfraFix allows APR techniques to be guided by diverse information sources. Additionally, we introduce a novel approach for generating repair scenarios, enabling large-scale evaluation of APR techniques for IaC. We implement and evaluate InfraFix using an SMT-based repair module and a state inference module that uses system calls, demonstrating its effectiveness across 254,288 repair scenarios with a success rate of 95.7%. Our work provides a foundation for advancing APR in IaC by enabling researchers to experiment with new state inference and repair techniques using InfraFix and to evaluate their approaches at scale with our repair scenario generation method.
title InfraFix: Technology-Agnostic Repair of Infrastructure as Code
topic Software Engineering
url https://arxiv.org/abs/2503.17220