US 11,599,644 B2 · Blocking insecure code with locking

Abstract

Systems and methods for preventing vulnerable software assets from being deployed by modifying the underlying source code in such a way that a build of the software asset will fail. In one aspect of the present disclosure, a system for securing software artifacts in a repository comprises a repository interface communicably coupleable to a software repository to retrieve an original artifact usable for building a software asset, and to replace the original artifact in the software repository with a modified artifact. A security scanner is configured to initiate a security scan of the original artifact and produce an output indicating the presence of a security vulnerability in the original artifact. An encoder is configured to reversibly modify the original artifact to produce the modified artifact, the modified artifact unusable for building the software asset.

Claims19

Dependent claims

A system for securing software artifacts in a repository comprising:

computing hardware of at least one processor and a memory operably coupled to the at least one processor;
and
instructions that, when executed on the at least one processor, cause the at least one processor to implement:
a repository interface communicably coupleable to a software repository to retrieve an original artifact usable for building a software asset, and to replace the original artifact in the software repository with a modified artifact;
a security scanner configured to initiate a security scan of the original artifact and produce an output indicating the presence of a security vulnerability in the original artifact;
and
an encoder configured to reversibly modify the original artifact to produce the modified artifact, the modified artifact unusable for building the software asset.

4 more elements

Dependencies are inferred from the claim text.

Blocking insecure code with locking

Life of this patent

Blocking insecure code with locking

Life of this patent

Abstract

Claims19