You Get Where You're Looking For: The Impact of Information Sources on Code Security