| CPC G06F 21/577 (2013.01) [G06F 8/77 (2013.01); G06F 16/27 (2019.01); H04L 9/0825 (2013.01); G06F 2221/033 (2013.01)] | 20 Claims |

|
1. A system comprising:
a computing device comprising a hardware processor and a memory; and
machine-readable instructions stored in the memory that, when executed by the hardware processor, cause the computing device to at least:
request a validation service to determine if an application component is permitted to be deployed within a software application,
wherein a use indicator that indicates a permissible use of the application component is provided with the request to the validation service and indicates how the application component is being used within the software application;
receive a response from the validation service confirming that an endorsed application component record exists for the application component in a distributed ledger, wherein the response indicates that a degree or type of security risk that usage of the application component can introduce to the software application complies with a security policy for inclusion of application components in the software application; and
responsive to receiving the response from the validation service, deploy the application component in the software application.
|