Red Hat, Inc.

Ralph Bean

Michael Stavros Bonnet

Jan Kaluza

Petr Sabata

Matthew Prahl

Luiz Renato Ferreira Carvalho

Cuiping Huo

Christophe Giuseppe Augello

Brandon Caton

Zoran Regvart

Simon Cobden Baird

Joseph James Stuart

Robert Garland Nester

A system, method, and computer readable medium receive a container image and an attestation log. The container image is built from a build pipeline and the attestation log includes information corresponding to tasks utilized by the build pipeline to build the container image. The system, method, and computer readable medium compare the information in the attestation log with policies that includes build pipeline requirements. The system, method, and computer readable medium release the container image to a destination based on the comparison indicating that tasks utilized by the build pipeline to build the container image meet the build pipeline requirements.

Lazy evaluation of supply chain policy based on transparency log attestations

Build environments for software can be constructed. For example, a computing device can receive a file indicating a first software component to be installed in a build environment and a second software component to be built in the build environment. The computing device can perform a first setup phase for creating part of the build environment by causing the first software component to be installed in the build environment. The computing device can also determine that the first setup phase is complete. Based on determining that the first setup phase is complete, the computing device can perform a second setup phase for completing the build environment by causing the second software component to be built in the build environment.

Constructing build environments for software

A build dependency tracking system includes a plurality of heterogeneous database, a dependency database, a monitoring system, an extraction system, and a database system. The monitoring system is configured to receive a successful build record from one of the plurality of heterogeneous databases corresponding to a build. The extraction system is configured to (i) extract an artifact from the successful build record associated with the build and (ii) extract a relationship from the successful build record indicating how the artifact relates to the build. The database update system is configured to store an indication of the artifact and the relationship in the dependency database.

Normalizing compound artifact dependency data

Growing community of inventors

Rochester, NY, United States of America

Ralph Bean