Granted Patent B1

US 12,423,089 · App. 19/191,013 · Granted Sep 23, 2025

Inventors: John Morello (Baton Rouge, LA); Ben Bernstein (New York, NY); Dima Stopel (Herzliya, IL)

Assignee: MINIMUS LTD

G06F8/65G06F21/577G06F2221/033

Abstract

Claims (58)

1. A method for software image management, comprising:

generating a plurality of software packages, wherein each software package is generated using a respective set of code,

building a plurality of software images based on a plurality of files, wherein building each software image further comprises combining a subset of the plurality of software packages according to a corresponding file of the plurality of files, wherein each file includes a set of instructions for combining the subset of the plurality of software packages in order to build one of the plurality of software images;

storing the plurality of software images in a repository;

monitoring for changes to a plurality of portions of code among the plurality of software packages, wherein the plurality of portions of code among the plurality of software packages is a plurality of first portions of code;

identifying an update based on the monitoring, wherein the update includes a change in at least one portion of code of the plurality of portions of code among the plurality of software packages; and

rebuilding at least one software image of the plurality of software images using a new version of the at least one portion of code;

wherein the monitoring for the changes to the plurality of portions of code among the plurality of software packages further comprises:

establishing a pipeline with respect to the plurality of software packages, wherein the pipeline is defined such that a software package of the plurality of software packages containing a dependency to a second portion of code is downstream of the second portion of code; and

detecting an upstream change for at least one software package of the plurality of software packages, wherein the update is identified based on the detected upstream change.

2. The method of claim 1 , further comprising:

configuring each of the plurality of software images based on the plurality of files, wherein the set of instructions for each file further defines a configuration for one of the plurality of software images.

3. The method of claim 1 , further comprising:

classifying the update into a classification; and

selecting the at least one software image to be rebuilt based on the classification.

4. The method of claim 3 , wherein the classification indicates that the change in the at least one portion of code is a change to patch a vulnerability.

5. The method of claim 1 , wherein the plurality of software images corresponds to a plurality of software components, further comprising:

ingesting cybersecurity data from a computing environment in which the plurality of software components is deployed; and

identifying a vulnerability being exploited based on the ingested cybersecurity data,

wherein the at least one software image includes a vulnerable software package of the plurality of software packages, wherein the vulnerable software package has the identified vulnerability.

6. The method of claim 5 , further comprising:

redeploying the at least one software image.

7. The method of claim 1 , wherein each software package is a unit of code defined with respect to at least one function.

8. A non-transitory computer-readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

generating a plurality of software packages, wherein each software package is generated using a respective set of code,

building a plurality of software images based on a plurality of files, wherein building each software image further comprises combining a subset of the plurality of software packages according to a corresponding file of the plurality of files, wherein each file includes a set of instructions for combining the subset of the plurality of software packages in order to build one of the plurality of software images;

storing the plurality of software images in a repository;

monitoring for changes to a plurality of portions of code among the plurality of software packages, wherein the plurality of portions of code among the plurality of software packages is a plurality of first portions of code;

identifying an update based on the monitoring, wherein the update includes a change in at least one portion of code of the plurality of portions of code among the plurality of software packages; and

rebuilding at least one software image of the plurality of software images using a new version of the at least one portion of code;

wherein the monitoring for the changes to the plurality of portions of code among the plurality of software packages further comprises:

establishing a pipeline with respect to the plurality of software packages, wherein the pipeline is defined such that a software package of the plurality of software packages containing a dependency to a second portion of code is downstream of the second portion of code; and

detecting an upstream change for at least one software package of the plurality of software packages, wherein the update is identified based on the detected upstream change.

9. A system for software image management, comprising:

a processing circuitry; and

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

generate a plurality of software packages, wherein each software package is generated using a respective set of code;

build a plurality of software images based on a plurality of files, wherein the instructions further configure the system to combine a subset of the plurality of software packages according to a corresponding file of the plurality of files, wherein each file includes a set of instructions for combining the subset of the plurality of software packages in order to build one of the plurality of software images;

store the plurality of software images in a repository;

monitor for changes to a plurality of portions of code among the plurality of software packages, wherein the plurality of portions of code among the plurality of software packages is a plurality of first portions of code;

identify an update based on the monitoring, wherein the update includes a change in at least one portion of code of the plurality of portions of code among the plurality of software packages; and

rebuild at least one software image of the plurality of software images using a new version of the at least one portion of code;

wherein the instructions further configure the system to:

establish a pipeline with respect to the plurality of software packages, wherein the pipeline is defined such that a software package of the plurality of software packages containing a dependency to a second portion of code is downstream of the second portion of code; and

detect an upstream change for at least one software package of the plurality of software packages, wherein the update is identified based on the detected upstream change.

10. The system of claim 9 , wherein the system is further configured to:

configure each of the plurality of software images based on the plurality of files, wherein the set of instructions for each file further defines a configuration for one of the plurality of software images.

11. The system of claim 9 , wherein the system is further configured to:

classify the update into a classification; and

select the at least one software image to be rebuilt based on the classification.

12. The system of claim 11 , wherein the classification indicates that the change in the at least one portion of code is a change to patch a vulnerability.

13. The system of claim 9 , wherein the plurality of software images corresponds to a plurality of software components, wherein the system is further configured to:

ingest cybersecurity data from a computing environment in which the plurality of software components is deployed; and

identify a vulnerability being exploited based on the ingested cybersecurity data,

wherein the at least one software image includes a vulnerable software package of the plurality of software packages, wherein the vulnerable software package has the identified vulnerability.

14. The system of claim 13 , wherein the system is further configured to:

redeploy the at least one software image.

15. The system of claim 9 , wherein each software package is a unit of code defined with respect to at least one function.

Assignments (2)

Continuity (1)

References Cited (38)