Back to results
US 12,518,014 B2Granted
Data confidence and software development operations
AssigneeDell Products L.P.
InventorsNicole Reineke, Stephen J. Todd, Trevor Scott Conn
Life of this patent
Estimating the term…
Abstract
A data confidence fabric for generating data confidence scores for a build pipeline is disclosed. Confidence scores are generated for data or jobs in a build pipeline. The scores may be combined into a final confidence score that reflects a confidence in the artifact generated by the pipeline and in the pipeline. A user or infrastructure may or may not perform the artifact based on the associated confidence score.
Claims20
A method comprising:
- for each stage of a pipeline that includes two or more of a development stage, a build stage, a test stage, and a deploy stage:
- executing the stage of the pipeline for a code portion;
- for each job performed on the code portion in the stage, generating job-specific confidence information, wherein the confidence information includes a plurality of annotations produced using two or more heterogeneous trust insertion technologies selected from static code analysis, dependency auditing, cryptographic signing, and runtime environment verification
- cryptographically linking each instance of the confidence information to a unique identifier for the job and the code portion;
- and
- storing the confidence information and corresponding metadata in an immutable blockchain-based ledger maintained by a data confidence fabric, wherein the data confidence fabric is integrated with each of the pipeline stages and configured to collect, timestamp, and store the confidence information in real time;
- and
- generating a final confidence score for an artifact generated by the pipeline from the code portion, wherein:
- the final confidence score includes job-specific confidence scores for each of the jobs performed on the code portion across the stages, and
- the final confidence score is computed using a weighted function over the job-specific confidence scores and a validity check of the corresponding cryptographically linked provenance records.
7 more elements
A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
- for each stage of a pipeline that includes two or more of a development stage, a build stage, a test stage, and a deploy stage:
- executing the stage of the pipeline for a code portion;
- for each job performed on the code portion in the stage, generating job-specific confidence information, wherein the confidence information includes a plurality of annotations produced using two or more heterogeneous trust insertion technologies selected from static code analysis, dependency auditing, cryptographic signing, and runtime environment verification;
- cryptographically linking each instance of the confidence information to a unique identifier for the job and the code portion;
- and
- storing the confidence information and corresponding metadata in an immutable blockchain-based ledger maintained by a data confidence fabric wherein the data confidence fabric is integrated with each of the pipeline stages and configured to collect, timestamp, and store the confidence information in real time;
- generating a final confidence score for an artifact generated by the pipeline from the code portion, wherein:
- the final confidence score includes job-specific confidence scores for each of the jobs performed on the code portion across the stages, and
- the final confidence score is computed using a weighted function over the job-specific confidence scores and a validity check of the corresponding cryptographically linked provenance records.
6 more elements
Dependencies are inferred from the claim text.