Red Hat, Inc.

James Scott

Mandar Darwatkar

Nakul Chander

Khushboo Sancheti

Alan Roy

Saif Chaudhry

Hoo In Song

Mansur Syed

In one example described herein a system can intercept, using a webhook, a container command issued to a user interface of a container orchestration platform. In response to intercepting the container command, the system can determine that the container command violates a security policy. In response to determining that the container command violates the security policy, the system can prevent the container command from being executed in relation to a container of the container orchestration platform.

Controlling container commands issued in a distributed computing environment

A vulnerability with respect to an image file in a continuous integration (CI) pipeline can be suppressed according to some aspects described herein. For example, a processor can receive an alert for the vulnerability with the CI pipeline being able to block deployment of the image file in response to the alert. Based on the alert, the processor can determine that the vulnerability of the image file is deferrable. After determining that the vulnerability is deferrable, the processor can automatically adjust a status of the vulnerability from an observed state to a deferred state. The CI pipeline can allow the deployment of the image file based on the status of the vulnerability being in the deferred state. The processor can deploy the image file in the CI pipeline after adjusting the status of the vulnerability to the deferred state.

Suppressing a vulnerability of a continuous integration pipeline with audit functionality

Growing community of inventors

Santa Clara, CA, United States of America

James Scott