Data security transactions using software container machine readable configuration data

A system, comprising:

• a data storage facility configured to store data associated with a software container and a component of the software container, the data being retrieved in response to a query transmitted from a platform to the data storage facility;
• and
• a logic module configured to receiving at a platform in response to a query, an artifact associated with a software container, to parse the artifact to identify source code of the software container and a supply chain, to rewrite a filesystem of the software container to include verification information for each component of the software container, the verification information being used to validate data integrity of the software container executed in a runtime environment, to invoke a scoring engine configured to generate a score associated with at least one component of the software container and an aggregate score of the software container, either the score or the aggregate score, or both, being determined as a function of whether data in the software container is modified in which the data integrity of the software container is compromised, the aggregate score being based on a security tool being included with the software container, and to generate a report from the platform, the report being associated with the software container and the report including an attestation comprising the score and the aggregate score.

A non-transitory computer readable medium having one or more computer program instructions configured to perform a method, the method comprising:

• receiving at a platform in response to a query, an artifact associated with a software container;
• parsing the artifact to identify source code of the software container and a supply chain;
• rewriting a filesystem of the software container to include verification information for each component of the software container, the verification information being used to validate data integrity of the software container executed in a runtime environment;
• invoking a scoring engine configured to generate a score associated with at least one component of the software container and an aggregate score of the software container, the aggregate score being based on a security tool being included with the software container, either the score or the aggregate score, or both, being determined as a function of whether data in the software container is modified in which the data integrity of the software container is compromised;
• and
• generating a report from the platform, the report being associated with the software container and the report including an attestation comprising the score and the aggregate score.