Augmenting Large Language Models with Static Code Analysis for Automated Code Quality Improvements
Not on the map. Why?
Abstract (arXiv)
This study examined code issue detection and revision automation by integrating Large Language Models (LLMs) such as OpenAI's GPT-3.5 Turbo and GPT-4o into software development workflows. A static code analysis framework detects issues such as bugs, vulnerabilities, and code smells within a large-scale software project. Detailed information on each issue was extracted and organized to facilitate automated code revision using LLMs. An iterative prompt engineering process is applied to ensure that prompts are structured to produce accurate and organized outputs aligned with the project requirements. Retrieval-augmented generation (RAG) is implemented to enhance the relevance and precision of the revisions, enabling LLM to access and integrate real-time external knowledge. The issue of LLM hallucinations - where the model generates plausible but incorrect outputs - is addressed by a custom-built "Code Comparison App," which identifies and corrects erroneous changes before applying them to the codebase. Subsequent scans using the static code analysis framework revealed a significant reduction in code issues, demonstrating the effectiveness of combining LLMs, static analysis, and RAG to improve code quality, streamline the software development process, and reduce time and resource expenditure.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 20 of its 48 references that are in the map. First posted on arXiv 12 Jun 2025.
Builds on
20 of 48 references.
References · 20
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2024Retrieval-Augmented Generation for AI-Generated Content: A Surveycited by 354
- 2023Domain Specialization as the Key to Make Large Language Models Disruptive: A Comprehensive Surveycited by 135
- 2024LLM Agents can Autonomously Exploit One-day Vulnerabilitiescited by 128
- 2024Large Language Models Meet NLP: A Surveycited by 103
- 2022Programming Is Hard -- Or at Least It Used to Be: Educational Opportunities And Challenges of AI Code Generationcited by 99
- 2022Learning from Few Examples: A Summary of Approaches to Few-Shot Learningcited by 86
- 2023Review of Large Vision Models and Visual Prompt Engineeringcited by 77
- 2023LLaMA-Reviewer: Advancing Code Review Automation with Large Language Models through Parameter-Efficient Fine-Tuningcited by 47
- 2024AI-powered Code Review with LLMs: Early Resultscited by 22
- 2024Enhancing Text Classification through LLM-Driven Active Learning and Human Annotationcited by 20
8 more
- 2024Unveiling LLM Evaluation Focused on Metrics: Challenges and Solutionscited by 18
- 2024Exploring the Capabilities of LLMs for Code Change Related Taskscited by 18
- 2024LLM-Powered Code Vulnerability Repair with Reinforcement Learning and Semantic Rewardcited by 16
- 2023What Makes a Code Review Useful to OpenDev Developers? An Empirical Investigationcited by 10
- 2021A Systematic Literature Review and Taxonomy of Modern Code Reviewcited by 7
- 2024VulScribeR: Exploring RAG-based Vulnerability Augmentation with LLMscited by 7
- 2021Sorald: Automatic Patch Suggestions for SonarQube Static Analysis Violationscited by 4
- 2023Combining static analysis and dynamic symbolic execution in a toolchain to detect fault injection vulnerabilitiescited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026An Empirical Evaluation of LLM-Based Approaches for Code Vulnerability Detection: RAG, SFT, and Dual-Agent Systems
- 2024A RAG Method for Source Code Inquiry Tailored to Long-Context LLMs
- 2026Enhancing Large Language Models with Retrieval Augmented Generation for Software Testing and Inspection Automation
- 2025WIP: Leveraging LLMs for Enforcing Design Principles in Student Code: Analysis of Prompting Strategies and RAG ↗
- 2025Meta-RAG on Large Codebases Using Code Summarization
- 2025PredicateFix: Repairing Static Analysis Alerts with Bridging Predicates
- 2024Are LLMs Correctly Integrated into Software Systems?
- 2025A Deep Dive into Retrieval-Augmented Generation for Code Completion: Experience on WeChat