US 12,481,487 B2 · Mapping pipeline run sources and targets in cloud infrastructures

Abstract

According to examples, an apparatus includes a processor that may obtain and parse a pipeline code to determine how variables of the pipeline code relate to each other, and replace the variables in the parsed pipeline code with values to which the variables respectively represent, in which the values correspond to pipeline run sources and pipeline run targets of API calls. The processor may also identify how the pipeline run targets interact with the pipeline run sources of the API calls and build a dependency graph that maps the pipeline run sources with the pipeline run targets. Runtime resources may thus be mapped to source code in a pipeline run to provide visibility into actions carried out by the pipeline. This visibility may be used to determine whether there are security vulnerabilities in the pipeline run sources and/or targets such that the vulnerabilities may be addressed/overcome.

Claims20

Dependent claims

An apparatus comprising:

a processor;
and
a memory on which is stored machine-readable instructions that when executed by the processor, cause the processor to:
obtain a pipeline code used for a pipeline run in a cloud infrastructure;
parse the pipeline code to analyze a structure and a syntax of the pipeline code to determine how variables of the pipeline code relate to each other;
replace the variables in the parsed pipeline code with values to which the variables respectively represent, wherein the values correspond to pipeline run sources and pipeline run targets of application program interface (API) calls;
identify how the pipeline run targets interact with the pipeline run sources of the API calls;
and
build a dependency graph that maps the pipeline run sources with the pipeline run targets based on interactions between the pipeline run targets and the pipeline run sources.

6 more elements

A method comprising:

applying, by a processor, instrumentation code into a pipeline run in a cloud infrastructure, wherein a pipeline code is used for the pipeline run and wherein the instrumentation code is to:
collect values of environment variables used in the pipeline run;
and
analyze the pipeline code given the collected values;
parsing, by the processor, the pipeline code to determine how variables of the pipeline code relate to each other;
replacing, by the processor, the variables in the parsed pipeline code with values to which the variables respectively represent, wherein the values correspond to pipeline run sources and pipeline run targets;
identifying, by the processor, how the pipeline run targets interact with the pipeline run sources;
and
building, by the processor, a dependency graph that maps the pipeline run sources with the pipeline run targets based on interactions between the pipeline run targets and the pipeline run sources.

6 more elements

A non-transitory computer-readable medium on which is stored a plurality of instructions that when executed by a processor, cause the processor to:

insert instrumentation code into a pipeline run in a cloud infrastructure, wherein a pipeline code is used for the pipeline run and wherein the instrumentation code is to:
collect values of environment variables used in the pipeline run;
and
analyze the pipeline code given the collected values;
parse the pipeline code used for the pipeline run to determine how variables of the pipeline code relate to each other;
replace the variables in the parsed pipeline code with values to which the variables respectively represent, wherein the values correspond to pipeline run sources and pipeline run targets;
identify how the pipeline run targets interact with the pipeline run sources;
build a dependency graph that maps the pipeline run sources with the pipeline run targets based on interactions between the pipeline run targets and the pipeline run sources;
and
use the dependency graph to identify whether there is anomalous activity associated with the pipeline run.

7 more elements

Dependencies are inferred from the claim text.

Mapping pipeline run sources and targets in cloud infrastructures

Life of this patent

Mapping pipeline run sources and targets in cloud infrastructures

Life of this patent

Abstract

Claims20