VULNERABILITY ANALYZER FOR APPLICATION DEPENDENCIES IN DEVELOPMENT PIPELINES

Systems, methods, and machine-readable instructions stored on machine-readable media are disclosed for analyzing an image for vulnerabilities. A repository is provided to a development stage of a development pipeline. An image associated with the repository is built. A list of dependencies and versi...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Patel, Mitesh, Shah, Aagam, Choudhury, Samuzzal
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:Systems, methods, and machine-readable instructions stored on machine-readable media are disclosed for analyzing an image for vulnerabilities. A repository is provided to a development stage of a development pipeline. An image associated with the repository is built. A list of dependencies and versions of the dependencies used in the building of the image is identified. The image is analyzed for vulnerabilities based on the identified list of dependences and the versions of the dependencies used in the building of the image. A report is provided based on the analysis.