US 11,989,570 B2
Secure DevSecOps pipeline with task signing
Shripad Nadgowda, Elmsford, NY (US); Laura-Zaihua Luan, Scarsdale, NY (US); and James R. Doran, New Milford, CT (US)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Apr. 27, 2021, as Appl. No. 17/241,699.
Prior Publication US 2022/0342679 A1, Oct. 27, 2022
Int. Cl. G06F 21/00 (2013.01); G06F 9/445 (2018.01); G06F 9/54 (2006.01); G06F 21/12 (2013.01); G06F 21/64 (2013.01)
CPC G06F 9/44589 (2013.01) [G06F 9/542 (2013.01); G06F 9/544 (2013.01); G06F 9/547 (2013.01); G06F 21/128 (2013.01); G06F 21/64 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
selecting a current processing element from a plurality of processing elements included in a software pipeline, wherein a first selected input data to the current processing element is an output data from a previously executed processing element, and wherein a second selected input data to the current processing element is a file that is not generated by any of the processing elements included in the software pipeline;
verifying the at least one input data, the verifying including:
computing a first current fingerprint of the first selected input data; and
comparing the first current fingerprint to a first expected fingerprint,
wherein the first expected fingerprint was computed after the output data was generated by the previously executed processing element;
indicating a first verification error in response to the comparing revealing that the first current fingerprint fails to match the first expected fingerprint and verifying the second selected input data by:
computing a second current fingerprint of the second selected input data; and
comparing the second current fingerprint to a second expected fingerprint,
wherein the second expected fingerprint was previously before execution of the software pipeline; and
indicating a second verification error in response to the comparing revealing that the second current fingerprint fails to match the second expected fingerprint.