| CPC G06F 16/2358 (2019.01) [G06F 16/2433 (2019.01)] | 20 Claims |

|
1. A method comprising:
processing programming code, written in an imperative programming language, using a fact collector to instantiate a programming object, from the programming code, representing a set of facts of a build system comprising an artifact;
processing the programming object using a mapper to expose the set of facts as a fact database,
wherein the fact database is organized into tables with rows and columns, and
wherein the mapper exposes the set of facts by mapping the set of facts, of the build system, stored in the programming object to the fact database;
evaluating a policy, written in a declarative programming language, and the fact database, exposing the set of facts from the programming object, using a policy engine to construct a result corresponding to the artifact of the build system; and
presenting the result comprising a supply chain security analysis of the artifact.
|