You Get Where You're Looking for: The Impact of Information Sources on Code Security