US 2024/0193259 A1 · CODE COVERAGE BASED RISK MITIGATION FOR CONTAINERS

Abstract

For each layer of a plurality of layers of a containerized unit of software instructions, a service loaded by the layer is determined. Service state information associated with the service loaded by the layer is retrieved, wherein the service state information comprises at least one of source software instructions that implement the service or code repository metadata for a code repository that stores the source software instructions. Code coverage information indicative of a degree of code coverage for the source software instructions that implement the service is obtained. Based at least in part on the code coverage information and the service state information, the layer is annotated with risk information indicative of a degree of risk associated with the layer.

Claims20

Dependent claims

A method comprising:

for each layer of a plurality of layers of a containerized unit of software instructions:
identifying, by a computing system comprising one or more computing devices, a service loaded by the layer;
retrieving service state information associated with the service loaded by the layer, wherein the service state information comprises at least one of:
source software instructions that implement the service;
or
code repository metadata for a code repository that stores the source software instructions;
and
obtaining code coverage information indicative of a degree of code coverage for the source software instructions that implement the service;
and
based at least in part on the code coverage information and the service state information, annotating the layer with risk information indicative of a degree of risk associated with the layer.

7 more elements

A computing system comprising:

one or more computing devices to:
for each layer of a plurality of layers of a containerized unit of software instructions:
identify a service loaded by the layer;
retrieve service state information associated with the service loaded by the layer, wherein the service state information comprises at least one of:
source software instructions that implement the service;
or
code repository metadata for a code repository that stores the source software instructions;
and
obtain code coverage information indicative of a degree of code coverage for the source software instructions that implement the service;
and
based at least in part on the code coverage information and the service state information, annotate the layer with risk information indicative of a degree of risk associated with the layer.

8 more elements

A non-transitory computer-readable storage medium that includes executable instructions to cause one or more processor devices to:

for each layer of a plurality of layers of a containerized unit of software instructions:
identify a service loaded by the layer;
retrieve service state information associated with the service loaded by the layer, wherein the service state information comprises at least one of:
source software instructions that implement the service;
or
code repository metadata for a code repository that stores the source software instructions;
and
obtain code coverage information indicative of a degree of code coverage for the source software instructions that implement the service;
and
based at least in part on the code coverage information, determine risk information indicative of a degree of risk associated with the layer.

7 more elements

Dependencies are inferred from the claim text.

Code coverage based risk mitigation for containers

Life of this patent

Code coverage based risk mitigation for containers

Life of this patent

Abstract

Claims20