International Business Machines Corporation

Da Hu Kuang

Yu Zhang

Tan Jiang

Liang Wang

Dong Hui

Chun Xiao Zhang

Peng Xa Cui

Lan Ling

Xu Peng

Shu Chao Wan

Xin Peng Liu

Li Yi

Zhao Liu

Ling Lan

Jing Jing Pan

Wei Feng Li

A method and system. A dataset is generated according to a code package. The code package includes an image file associated with a container for a tenant in a cloud environment. The dataset includes general information related to security aspects of the image file. The image file includes two or more image layers. A security indicator of the image file is extracted according to the dataset. A security level of the image file is determined by comparing the extracted security indicator of the image file with a security indicator of an authenticated image file. A vulnerability in the image file is identified based on the determined security level. In response to the vulnerability having been identified, the image file is updated with a patch that fixes the identified vulnerability. The patch includes a new image layer added to the two or more image layers in the updated image file.

Code package processing

A method and system for code package. A dataset is generated according to a code package. The code package includes an image file associated with a container for a tenant. The dataset includes general information related to security aspects of the image file. The image file includes two or more image layers. Generating the dataset according to the code package includes: exporting an image layer from the image file; and obtaining a configuration file of the exported image layer as the dataset. In response to the vulnerability having been identified, the image file is updated with a patch that fixes the identified vulnerability. The patch includes a new image layer added to the two or more image layers in the updated image file.

A method and associated system. A dataset is generated according to a code package. The code package includes an image file associated with a container for a tenant in a cloud environment. The dataset includes general information related to security aspects of the image file. A security level of the image file is determined according to the generated dataset. A vulnerability corresponding to the code package is identified based on the security level. In response to the vulnerability having been identified, the code package is updated with a patch associated with the identified vulnerability.

Systems, methods, and computer program products to perform an operation including receiving an indication to commit a containerized image to an image repository, wherein the containerized image comprises a plurality of layers, and upon validating the containerized image by determining whether each layer of the containerized image is associated with a respective signature value, generating a first signature value for the containerized image, updating a data store for signature values to reflect the first signature value for the containerized image, and committing the containerized image to the repository.

Determining license use for composed container services in cloud platforms

A computer-implemented method includes monitoring a template registry for changes in the template registry. In response to detecting a new template in the template registry, the method includes analyzing the new template to identify explicit and implicit metadata corresponding to the new template. The method further includes determining one or more possible link dependencies between a container based on the new template and one or more other containers, respectively, based on the identified explicit and implicit metadata. In addition, the method includes providing container setting recommendations to a user based on the one or more possible link dependencies and the identified explicit and implicit metadata.

Application development in cloud based environment

Growing community of inventors

Beijing, China

Da Hu Kuang