Automated container image assembly

A computer system for automatically generating a container image assembly file, the computer system comprising:

• a bus system;
• a storage device connected to the bus system, wherein the storage device stores program instructions;
• and
• a processor connected to the bus system, wherein the processor executes the program instructions to:
• assess a definition of an application to determine a base container image and application libraries needed as add-ons for a container image corresponding to the application;
• generate a library dependency graph of flow from the base container image to add-on libraries for the application;
• generate the container image assembly file based on the library dependency graph of flow from the base container image to the add-on libraries for the application;
• remove vulnerabilities corresponding to the add-on libraries of the container image assembly file;
• ingest historical container image assembly file data corresponding to the application;
• build a knowledge base of historical library dependency data based on ingested historical container image assembly file data corresponding to the application and received user feedback corresponding to container image assembly file optimization to automatically generate the container image assembly file;
• and
• curate the historical library dependency data in the knowledge base.

A computer program product for automatically generating a container image assembly file, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:

• assessing, by the computer, a definition of an application to determine a base container image and application libraries needed as add-ons for a container image corresponding to the application;
• generating, by the computer, a library dependency graph of flow from the base container image to add-on libraries for the application;
• generating, by the computer, the container image assembly file based on the library dependency graph of flow from the base container image to the add-on libraries for the application;
• removing, by the computer, vulnerabilities corresponding to the add-on libraries of the container image assembly file;
• ingesting, by the computer, historical container image assembly file data corresponding to the application;
• building, by the computer, a knowledge base of historical library dependency data based on ingested historical container image assembly file data corresponding to the application and received user feedback corresponding to container image assembly file optimization to automatically generate the container image assembly file;
• and
• curating, by the computer, the historical library dependency data in the knowledge base.