US 2025/0328643 A1 · COMPUTER-BASED SYSTEM TO VALIDATE BUILD INTEGRITY OF SOFTWARE PRODUCTS

Abstract

Techniques are described for validating build integrity of software products, such as applications or containers. More specifically, this disclosure describes a build integrity validation system that analyzes build artifacts resulting from a software build process to create source code assertions, and compares the assertions against the source code from which the build artifacts were produced. The build integrity validation system validates that a particular build artifact is producible by the source code to ensure that no additional code was introduced during the build process. The build integrity validation system may also reverse the analysis to validate that the source code is able to produce the build artifacts to ensure that no code was removed or modified during the build process. The build integrity validation system identifies and reports identified discrepancies between the source code and the build artifacts resulting from the software build process of the source code.

Claims20

Dependent claims

A method comprising:

identifying, by a computing system, at least one discrepancy between one or more assertions created from at least one build artifact resulting from a software build process of source code and actual data of the source code, wherein identifying the at least one discrepancy comprises identifying at least one assertion with respect to at least one asserted definition of a software component expected to be included in the source code in order to produce the at least one build artifact that is not included in the actual data of the source code such that the at least one build artifact is not producible by the actual data of the source code;
and
generating, by the computing system, a report indicating the at least one discrepancy between the at least one build artifact and the source code.

A computing system comprising:

a memory;
and
one or more processors in communication with the memory, the one or more processors configured to:
identify at least one discrepancy between one or more assertions created from at least one build artifact resulting from a software build process of source code and actual data of the source code, wherein identifying the at least one discrepancy comprises identifying at least one assertion with respect to at least one asserted definition of a software component expected to be included in the source code in order to produce the at least one build artifact that is not included in the actual data of the source code such that the at least one build artifact is not producible by the actual data of the source code;
and
generate a report indicating the at least one discrepancy between the at least one build artifact and the source code.

3 more elements

Dependencies are inferred from the claim text.

Computer-based system to validate build integrity of software products

Life of this patent

Computer-based system to validate build integrity of software products

Life of this patent

Abstract

Claims20