Populating multi-layer technology product catalogs
A method and system for populating multi-layer technology product catalogs are provided. The method includes scanning an environment executing a software project to collect hints on technology products required for the execution of the software project; mapping the collected hints to identifiers of technology products to identify technology products required for the execution of the software project; analyzing each of the identified technology products to determine a set of descriptors identifying certain attributes of a technology product; classifying each of the identified technology products to at least one technology layer, wherein a technology layer represents the functionality of a technology product; populating a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and marinates the set of descriptors and the least one technology layer associated with the technology product; and saving the populated technology product catalog in a database.
1 . A method for populating multi-layer technology product catalogs, comprising:
performing static analysis on a technology product code required for execution of a software project executed in a computing environment;
collecting hints on the technology product code;
mapping a collected hint to an identifier of a technology product required for execution of the software project;
determining a set of descriptors identifying an attribute of a technology product;
classifying the technology product to at least one technology layer, wherein a technology layer represents a functionality of a technology product;
populating a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the least one technology layer; and
saving the populated technology product catalog in a database.
2 . The method of claim 1 , further comprising:
analyzing the technology product to determine the set of descriptors.
3 . The method of claim 1 , further comprising:
validating an identity of each of the identified technology products.
4 . The method of claim 1 , further comprising:
scanning a cloud infrastructure on which the computing environment is deployed.
5 . The method of claim 4 , further comprising:
scanning the cloud infrastructure for any one of: a cloud workload, and the product code, wherein the cloud infrastructure, the cloud workloads, and the product code are included in the executing environment.
6 . The method of claim 1 , further comprising:
scanning a disk of a machine executing the project code.
7 . The method of claim 1 , further comprising:
scanning a snapshot of the project code.
8 . The method of claim 1 , further comprising:
scanning an image of the project code.
9 . The method of claim 1 , further comprising:
utilizing a different static analysis technique for a different type of a technology product.
10 . The method of claim 1 , further comprising:
querying an external security source to determine a security descriptor, wherein the security descriptor includes at least a variability associated with the technology product.
11 . A non-transitory computer-readable medium storing a set of instructions for populating multi-layer technology product catalogs, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
perform static analysis on a technology product code required for execution of a software project executed in a computing environment;
collect hints on the technology product code;
map a collected hint to an identifier of a technology product required for execution of the software project;
determine a set of descriptors identifying an attribute of a technology product;
classify the technology product to at least one technology layer, wherein a technology layer represents a functionality of a technology product;
populate a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the least one technology layer; and
save the populated technology product catalog in a database.
12 . A system for populating multi-layer technology product catalogs comprising:
a processing circuitry;
a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
perform static analysis on a technology product code required for execution of a software project executed in a computing environment;
collect hints on the technology product code;
map a collected hint to an identifier of a technology product required for execution of the software project;
determine a set of descriptors identifying an attribute of a technology product;
classify the technology product to at least one technology layer, wherein a technology layer represents a functionality of a technology product;
populate a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the least one technology layer; and
save the populated technology product catalog in a database.
13 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to
analyze the technology product to determine the set of descriptors.
14 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
validate an identity of each of the identified technology products.
15 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan a cloud infrastructure on which the computing environment is deployed.
16 . The system of claim 15 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan the cloud infrastructure for any one of:
a cloud workload, and the product code, wherein the cloud infrastructure, the cloud workloads, and the product code are included in the executing environment.
17 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan a disk of a machine executing the project code.
18 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan a snapshot of the project code.
19 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan an image of the project code.
20 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
utilize a different static analysis technique for a different type of a technology product.
21 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
query an external security source to determine a security descriptor, wherein the security descriptor includes at least a variability associated with the technology product.