Populating multi-layer technology product catalogs

Patent metadata

Field	Value
Publication number	US-12547601-B2
Application number	US-202418672758-A
Country	US
Kind code	B2
Filing date	May 23, 2024
Priority date	Mar 2, 2021
Publication date	Feb 10, 2026
Grant date	Feb 10, 2026

Abstract

A method and system for populating multi-layer technology product catalogs are provided. The method includes scanning an environment executing a software project to collect hints on technology products required for the execution of the software project; mapping the collected hints to identifiers of technology products to identify technology products required for the execution of the software project; analyzing each of the identified technology products to determine a set of descriptors identifying certain attributes of a technology product; classifying each of the identified technology products to at least one technology layer, wherein a technology layer represents the functionality of a technology product; populating a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and marinates the set of descriptors and the least one technology layer associated with the technology product; and saving the populated technology product catalog in a database.

First claim

What is claimed is:

1 . A method for populating multi-layer technology product catalogs, comprising:
performing static analysis on a technology product code required for execution of a software project executed in a computing environment; collecting hints on the technology product code; mapping a collected hint to an identifier of a technology product required for execution of the software project; determining a set of descriptors identifying an attribute of a technology product; classifying the technology product to at least one technology layer, wherein a technology layer represents a functionality of a technology product; populating a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the least one technology layer; and
saving the populated technology product catalog in a database.

2 . The method of claim 1 , further comprising:
analyzing the technology product to determine the set of descriptors.

3 . The method of claim 1 , further comprising:
validating an identity of each of the identified technology products.

4 . The method of claim 1 , further comprising:
scanning a cloud infrastructure on which the computing environment is deployed.

5 . The method of claim 4 , further comprising:
scanning the cloud infrastructure for any one of: a cloud workload, and the product code, wherein the cloud infrastructure, the cloud workloads, and the product code are included in the executing environment.

6 . The method of claim 1 , further comprising:
scanning a disk of a machine executing the project code.

7 . The method of claim 1 , further comprising:
scanning a snapshot of the project code.

8 . The method of claim 1 , further comprising:
scanning an image of the project code.

9 . The method of claim 1 , further comprising:
utilizing a different static analysis technique for a different type of a technology product.

10 . The method of claim 1 , further comprising:
querying an external security source to determine a security descriptor, wherein the security descriptor includes at least a variability associated with the technology product.

11 . A non-transitory computer-readable medium storing a set of instructions for populating multi-layer technology product catalogs, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
perform static analysis on a technology product code required for execution of a software project executed in a computing environment;
collect hints on the technology product code;
map a collected hint to an identifier of a technology product required for execution of the software project;
determine a set of descriptors identifying an attribute of a technology product;
classify the technology product to at least one technology layer, wherein a technology layer represents a functionality of a technology product;
populate a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the least one technology layer; and
save the populated technology product catalog in a database.

12 . A system for populating multi-layer technology product catalogs comprising:
a processing circuitry; a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to: perform static analysis on a technology product code required for execution of a software project executed in a computing environment; collect hints on the technology product code; map a collected hint to an identifier of a technology product required for execution of the software project; determine a set of descriptors identifying an attribute of a technology product; classify the technology product to at least one technology layer, wherein a technology layer represents a functionality of a technology product; populate a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and maintains the set of descriptors and the least one technology layer; and save the populated technology product catalog in a database.

13 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to
analyze the technology product to determine the set of descriptors.

14 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
validate an identity of each of the identified technology products.

15 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan a cloud infrastructure on which the computing environment is deployed.

16 . The system of claim 15 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan the cloud infrastructure for any one of: a cloud workload, and the product code, wherein the cloud infrastructure, the cloud workloads, and the product code are included in the executing environment.

17 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan a disk of a machine executing the project code.

18 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan a snapshot of the project code.

19 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
scan an image of the project code.

20 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
utilize a different static analysis technique for a different type of a technology product.

21 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:
query an external security source to determine a security descriptor, wherein the security descriptor includes at least a variability associated with the technology product.

Assignees

• Wiz Inc

Inventors

• Kozoshnik Gal
• Herzberg Raaz
• Costica Yinon
• Shaked Yaniv
• Klein Daniel
• Luttwak Ami

Classifications

• G06Q10/087 Primary

  Inventory or stock management, e.g. order filling, procurement or balancing against orders · CPC title

• G06F16/23 Primary

  Updating · CPC title