Data security transactions using software container machine readable configuration data

A system, comprising:

• a data repository configured to store software container data retrieved in response to a query generated from a platform configured to evaluate a software container;
• and
• a logic module configured to receive in response to a query, an artifact associated with the software container, to parse the artifact to identify source code of the software container and a supply chain by invoking a scanning engine configured to parse the source code to identify a security tool usable to generate representative data as input to a scoring engine to generate a score associated with each of one or more components of the software container, the scanning engine also being configured to parse the source code of the software container to identify a security threat, to invoke the scoring engine configured to run an algorithm to evaluate the source code to identify the one or more components associated with the software container, the scoring engine also being configured to generate the score associated with each of the one or more components, the score being generated by referencing an identifier of each of the one or more components against a library of referenced identifiers, the identifier being configured to identify the supply chain associated with one of the one or more components and whether the security tool is being invoked by one of the one or more components and the identifier also being configured to identify whether the source code associated with the one of the one or more components of the software container has been changed, a value of the score being adjusted if the identifier indicates the security tool is invoked by each of the one or more components, the identifier being generated and assigned by the scoring engine based on identification of the security tool when the source code is parsed and used to perform a lookup operation to compare the identifier to the library of referenced identifiers, each of the referenced identifiers being associated with at least one security tool, to execute the algorithm until each of the one or more components of the software container has been evaluated and each of the one or more components has been assigned one or more scores, and to generate an aggregate score using an aggregate scoring engine, the aggregate score being determined using the score and the one or more scores.

A non-transitory computer readable medium having one or more computer program instructions configured to perform a method, the method comprising:

• receiving in response to a query, an artifact associated with a software container;
• parsing the artifact to identify source code of the software container and a supply chain by invoking a scanning engine configured to parse the source code to identify a security tool usable to generate representative data as input to a scoring engine to generate a score associated with each of one or more components of the software container, the scanning engine also being configured to parse the source code of the software container to identify a security threat;
• invoking the scoring engine configured to run an algorithm to evaluate the source code to identify the one or more components associated with the software container, the scoring engine also being configured to generate the score associated with each of the one or more components, the score being generated by referencing an identifier of each of the one or more components against a library of referenced identifiers, the identifier being configured to identify the supply chain associated with one of the one or more components and whether the security tool is being invoked by one of the one or more components, a value of the score being adjusted if the identifier indicates the security tool is invoked by each of the one or more components and the identifier also being configured to identify whether the source code associated with the one of the one or more components of the software container has been changed, the identifier being generated and assigned by the scoring engine based on identification of the security tool when the source code is parsed and used to perform a lookup operation to compare the identifier to the library of referenced identifiers, each of the referenced identifiers being associated with at least one security tool;
• executing the algorithm until each of the one or more components of the software container has been evaluated and each of the one or more components has been assigned one or more scores;
• and
• generating an aggregate score using an aggregate scoring engine, the aggregate score being determined using the score and the one or more scores.