| <?xml version='1.0' encoding='UTF-8' ?> |
| <svg xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' class='svglite' width='432.00pt' height='220.61pt' viewBox='0 0 432.00 220.61'> |
| <defs> |
| <style type='text/css'><![CDATA[ |
| .svglite line, .svglite polyline, .svglite polygon, .svglite path, .svglite rect, .svglite circle { |
| fill: none; |
| stroke: #000000; |
| stroke-linecap: round; |
| stroke-linejoin: round; |
| stroke-miterlimit: 10.00; |
| } |
| .svglite text { |
| white-space: pre; |
| } |
| ]]></style> |
| </defs> |
| <rect width='100%' height='100%' style='stroke: none; fill: #FFFFFF;'/> |
| <defs> |
| <clipPath id='cpMC4wMHw0MzIuMDB8MC4wMHwyMjAuNjE='> |
| <rect x='0.00' y='0.00' width='432.00' height='220.61' /> |
| </clipPath> |
| </defs> |
| <g clip-path='url(#cpMC4wMHw0MzIuMDB8MC4wMHwyMjAuNjE=)'> |
| </g> |
| <defs> |
| <clipPath id='cpMTQyLjYxfDQyNi41Mnw1My4xM3wxNzMuNzQ='> |
| <rect x='142.61' y='53.13' width='283.91' height='120.61' /> |
| </clipPath> |
| </defs> |
| <g clip-path='url(#cpMTQyLjYxfDQyNi41Mnw1My4xM3wxNzMuNzQ=)'> |
| <polyline points='204.33,173.74 204.33,53.13 ' style='stroke-width: 0.53; stroke: #EBEBEB; stroke-linecap: butt;' /> |
| <polyline points='327.77,173.74 327.77,53.13 ' style='stroke-width: 0.53; stroke: #EBEBEB; stroke-linecap: butt;' /> |
| <polyline points='142.61,173.74 142.61,53.13 ' style='stroke-width: 1.07; stroke: #EBEBEB; stroke-linecap: butt;' /> |
| <polyline points='266.05,173.74 266.05,53.13 ' style='stroke-width: 1.07; stroke: #EBEBEB; stroke-linecap: butt;' /> |
| <polyline points='389.49,173.74 389.49,53.13 ' style='stroke-width: 1.07; stroke: #EBEBEB; stroke-linecap: butt;' /> |
| <rect x='142.61' y='57.77' width='94.85' height='18.55' style='stroke-width: 1.07; stroke: none; stroke-linecap: square; stroke-linejoin: miter; fill: #00ADD8;' /> |
| <rect x='142.61' y='150.54' width='11.97' height='18.55' style='stroke-width: 1.07; stroke: none; stroke-linecap: square; stroke-linejoin: miter; fill: #00ADD8;' /> |
| <rect x='142.61' y='80.96' width='65.60' height='18.55' style='stroke-width: 1.07; stroke: none; stroke-linecap: square; stroke-linejoin: miter; fill: #00ADD8;' /> |
| <rect x='142.61' y='104.16' width='55.40' height='18.55' style='stroke-width: 1.07; stroke: none; stroke-linecap: square; stroke-linejoin: miter; fill: #00ADD8;' /> |
| <rect x='142.61' y='127.35' width='33.24' height='18.55' style='stroke-width: 1.07; stroke: none; stroke-linecap: square; stroke-linejoin: miter; fill: #00ADD8;' /> |
| <polyline points='247.44,69.37 247.44,64.73 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='247.44,67.05 227.49,67.05 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='227.49,69.37 227.49,64.73 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='158.98,162.14 158.98,157.50 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='158.98,159.82 150.18,159.82 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='150.18,162.14 150.18,157.50 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='217.27,92.56 217.27,87.92 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='217.27,90.24 199.15,90.24 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='199.15,92.56 199.15,87.92 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='206.57,115.75 206.57,111.12 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='206.57,113.44 189.46,113.44 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='189.46,115.75 189.46,111.12 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='182.85,138.95 182.85,134.31 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='182.85,136.63 168.86,136.63 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <polyline points='168.86,138.95 168.86,134.31 ' style='stroke-width: 1.07; stroke: #DDDDDD; stroke-linecap: butt;' /> |
| <text x='249.47' y='69.74' style='font-size: 7.50px;fill: #555555; font-family: "Arial";' textLength='15.00px' lengthAdjust='spacingAndGlyphs'>38%</text> |
| <text x='163.25' y='162.51' style='font-size: 7.50px;fill: #555555; font-family: "Arial";' textLength='10.84px' lengthAdjust='spacingAndGlyphs'>5%</text> |
| <text x='220.21' y='92.93' style='font-size: 7.50px;fill: #555555; font-family: "Arial";' textLength='15.00px' lengthAdjust='spacingAndGlyphs'>27%</text> |
| <text x='210.02' y='116.12' style='font-size: 7.50px;fill: #555555; font-family: "Arial";' textLength='15.00px' lengthAdjust='spacingAndGlyphs'>22%</text> |
| <text x='187.86' y='139.32' style='font-size: 7.50px;fill: #555555; font-family: "Arial";' textLength='15.00px' lengthAdjust='spacingAndGlyphs'>13%</text> |
| </g> |
| <g clip-path='url(#cpMC4wMHw0MzIuMDB8MC4wMHwyMjAuNjE=)'> |
| <text x='137.68' y='158.52' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='112.21px' lengthAdjust='spacingAndGlyphs'>Notified by a separate team (e.g., a</text> |
| <text x='137.68' y='166.29' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='45.12px' lengthAdjust='spacingAndGlyphs'>security team)</text> |
| <text x='137.68' y='135.32' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='121.01px' lengthAdjust='spacingAndGlyphs'>Found by other techniques (e.g., code</text> |
| <text x='137.68' y='143.10' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='101.03px' lengthAdjust='spacingAndGlyphs'>reviews, accidental discoveries)</text> |
| <text x='137.68' y='116.02' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='113.41px' lengthAdjust='spacingAndGlyphs'>Learned about it from public reports</text> |
| <text x='137.68' y='88.93' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='92.25px' lengthAdjust='spacingAndGlyphs'>Notified by other vulnerability</text> |
| <text x='137.68' y='96.71' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='29.15px' lengthAdjust='spacingAndGlyphs'>scanners</text> |
| <text x='137.68' y='69.63' text-anchor='end' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='103.44px' lengthAdjust='spacingAndGlyphs'>Notified by GitHub / Dependabot</text> |
| <text x='142.61' y='183.83' text-anchor='middle' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='10.39px' lengthAdjust='spacingAndGlyphs'>0%</text> |
| <text x='266.05' y='183.83' text-anchor='middle' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='14.39px' lengthAdjust='spacingAndGlyphs'>50%</text> |
| <text x='389.49' y='183.83' text-anchor='middle' style='font-size: 7.20px;fill: #666666; font-family: "Arial";' textLength='18.38px' lengthAdjust='spacingAndGlyphs'>100%</text> |
| <text x='284.57' y='201.12' text-anchor='middle' style='font-size: 8.00px;fill: #666666; font-family: "Arial";' textLength='62.28px' lengthAdjust='spacingAndGlyphs'>% of respondents</text> |
| <text x='5.48' y='41.40' style='font-size: 8.00px;fill: #666666; font-family: "Arial";' textLength='98.31px' lengthAdjust='spacingAndGlyphs'>(open-ended text response)</text> |
| <text x='5.48' y='17.66' style='font-size: 10.00px; font-weight: bold;fill: #333333; font-family: "Arial";' textLength='394.08px' lengthAdjust='spacingAndGlyphs'>Think of the most recent time you learned of a security vulnerability in Go software</text> |
| <text x='5.48' y='28.46' style='font-size: 10.00px; font-weight: bold;fill: #333333; font-family: "Arial";' textLength='308.96px' lengthAdjust='spacingAndGlyphs'>that you work on. How did you first learn about the vulnerability?</text> |
| <text x='426.52' y='213.54' text-anchor='end' style='font-size: 7.20px;fill: #999999; font-family: "Arial";' textLength='26.16px' lengthAdjust='spacingAndGlyphs'>n = 557</text> |
| </g> |
| </svg> |