...

The diagram below illustrates how DTP, the CVE Match model, and OpenAI embeddings API work together.

Attribution

...

If the prerequisite conditions have been met, the CVE match will be added to the Recommendations section. If one or more prerequisite conditions have not been met, there will be an info icon to the left of the Recommendations label that you can hover over for details.

Note: The OpenAI embeddings API is called when calculating the CVE match for a violation. Since each API call incurs a cost, DTP 2024.1 CVE match does not use the OpenAI LLM APIs. CVE Match uses OpenAI integration solely for the purpose of the method source code embedding. The cost of calls to the embeddings API are much lower than calls to the LLM APIs. DTP only allows calculating CVE match for one violation at a time.  

...