Patent ID: 11875288
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 15:
16. A computer program product in a non-transitory computer-readable medium for use in a data processing system, the computer program product holding computer program instructions executed by the data processing system for continuous integration and deployment (CI/CD) in association with an enterprise application in a computing environment, the computer program instructions comprising program code configured in association with a sequence of automated stages comprising a CI/CD pipeline to:
prior to a next deployment of the enterprise application, the enterprise application comprising code that passes through the sequence of automated stages during its development:
discover one or more software supply chain artifacts associated with the pipeline;
for at least one software supply chain artifact, discover one or more tasks responsible for handling the software supply chain artifact, together with any associated dependencies;
retrieve a compliance policy associated with a development side of the computing environment;
register the discovered software supply chain artifact, the one or more tasks, and the one or more associated dependencies with the compliance policy; and
within the development side of the computing environment, and based on at least one of the discovered software supply chain artifact, the one more tasks, and the one or more associated dependencies, update one or more values associated with one or more policy check parameters associated with the compliance policy, wherein the one or more values associated with one or more policy check parameters are updated in an automated manner using pre-defined or pre-configured values; and

thereafter, deploy the enterprise application in a production environment.