This is an interesting finding, but very specialised. It would also be great to get some more information about the benchmark. Is it just a collection of files

This is an interesting finding, but very specialised. It would also be great to get some more information about the benchmark. Is it just a collection of files with vulnerabilities, or are they hidden in a real codebase, where LLM based approaches will not be able to scan every file like a static code scanner is able todo.