| CPC G06F 21/577 (2013.01) [G06F 2221/033 (2013.01)] | 25 Claims |

|
1. A method for software containers attribution, comprising:
de-compiling a configuration file of a first container image of a software container, wherein the first container image is among a plurality of container images, wherein the de-compiled configuration file includes a plurality of commands;
identifying at least one candidate build file in the de-compiled configuration file, wherein each candidate build file contains a plurality of commands executed to create a respective container image among the plurality of container images;
determining if at least one matching condition is satisfied between each of the at least one candidate build file and the de-compiled configuration file based on the plurality of commands of the de-compiled configuration file and the plurality of commands of each of the at least one candidate build file;
associating the configuration file with each candidate build file satisfying the at least one matching condition; and
updating an inventory with the associated configuration file and the respective candidate build file, wherein such association provides a direct mapping between the container image and each build file that formed the container image.
|