Using real-time monitoring to inform static analysis
Using real-time monitoring to inform static analysis, including: inspecting, using one or more static code analysis techniques, one or more components of a cloud deployment; detecting, using data gathered during the execution of the component in the cloud deployment, a condition; and modifying, based on the detected condition, the one or more static code analysis techniques.
1. A method of using real-time monitoring to inform static analysis, the method comprising:
inspecting, using one or more static code analysis techniques, one or more components of a cloud deployment;
detecting, using data gathered during the execution of the component in the cloud deployment, a condition that occurred during the execution of the component, wherein the condition comprises at least one of: a policy violation, a rule violation, or an anomaly; and
modifying, based on the detected condition, the one or more static code analysis techniques to capture the detected condition.
2. The method of claim 1 further comprising modifying, based on one or more modifications to the static code analysis techniques, real-time monitoring of the component.
3. The method of claim 1 further comprising detecting, using the modified one or more static code analysis techniques, the condition.
4. The method of claim 1 further comprising determining whether the condition could have been detected using static code analysis techniques.
5. The method of claim 1 wherein static code analysis techniques deployed for a first customer are different than static code analysis techniques deployed for a second customer.
6. The method of claim 1 wherein the condition was detected for a component in a cloud deployment of a first customer and the static code analysis techniques that were modified are used for inspecting components in a cloud deployment of a second customer.
7. The method of claim 1 wherein the static code analysis techniques are used to inspect source code in a code repository prior to deploying the source code in the cloud deployment.
8. A system for using real-time monitoring to inform static analysis, the system comprising at least one processor and memory storing computer program instructions that, when executed, cause the system to carry out the steps of:
inspecting, using one or more static code analysis techniques, one or more components of a cloud deployment;
detecting, using data gathered during the execution of the component in the cloud deployment, a condition that occurred during the execution of the component, wherein the condition comprises at least one of: a policy violation, a rule violation, or an anomaly; and
modifying, based on the data gathered during the execution of the component in the cloud deployment, the one or more static code analysis techniques to capture the detected condition.
9. The system of claim 8 wherein the computer program instructions, when executed, further cause the system to carry out the step of modifying, based on one or more modifications to the static code analysis techniques, real-time monitoring of the component.
10. The system of claim 8 wherein the computer program instructions, when executed, further cause the system to carry out the step of detecting, using the modified one or more static code analysis techniques, the condition.
11. The system of claim 8 wherein the computer program instructions, when executed, further cause the system to carry out the step of determining whether the condition could have been detected using static code analysis techniques.
12. The system of claim 8 wherein static code analysis techniques deployed for a first customer are different than static code analysis techniques deployed for a second customer.
13. The system of claim 8 wherein the condition was detected for a component in a first cloud deployment and the static code analysis techniques that were modified are used for inspecting components in a second cloud deployment.
14. The system of claim 8 wherein the static code analysis techniques are used to inspect source code in a code repository prior to deploying the source code in the cloud deployment.
15. A computer program product for using real-time monitoring to inform static analysis, the computer program product disposed on a non-transitory computer readable medium, the computer program product including computer program instructions that, when executed, carry out the steps of:
detecting, using data gathered during the execution of the component in the cloud deployment, a condition that occurred during the execution of the component, wherein the condition comprises at least one of: a policy violation, a rule violation, or an anomaly;
determining whether the condition could have been detected using static code analysis techniques; and
modifying, based on the detected condition, one or more static code analysis techniques to capture the detected condition.
16. The computer program product of claim 15 further comprising computer program instructions that, when executed, carry out the step of modifying, based on one or more modifications to the static code analysis techniques, real-time monitoring of the component.
17. The computer program product of claim 15 further comprising computer program instructions that, when executed, carry out the step of detecting, using the modified one or more static code analysis techniques, the condition.
18. The computer program product of claim 15 wherein static code analysis techniques deployed for a first customer are different than static code analysis techniques deployed for a second customer.
19. The computer program product of claim 15 wherein the condition was detected for a component in a cloud deployment of a first customer and the static code analysis techniques that were modified are used for inspecting components in a cloud deployment of a second customer.
20. The computer program product of claim 15 wherein the static code analysis techniques are used to inspect source code in a code repository prior to deploying the source code in the cloud deployment.