IBM and Google Team Up to Tackle Developer Security Challenges
developer.ibm.com
developer.ibm.com
https://cloudplatform.googleblog.com/2017/10/introducing-gra...
The GitHub repository is here. https://github.com/Grafeas/Grafeas
The GitHub README.md has the most concise description of Grafeas, which is a metadata API specification. It further explaisn note and occurrence. I think that reading through the README.md of the Grafeas project first might help to understand the blogs by Google and IBM.
https://github.com/Grafeas/Grafeas/blob/master/README.md
When can I use this as part of the IBM Cloud? Any speculation? Can I use it on the Google Cloud? It seems like Black Duck integrating it with the Google Cloud https://blog.blackducksoftware.com/black-duck-google-grafeas
Or, do I need to install this myself?
Yes we do have plans to integrate Grafeas and Kritis with the IBM Cloud Container Service as well as extend Grafeas with security services such as Vulnerability Advisor. Timing TBD. Until that time, I expect that the grafeas.io site will eventually have instructions to install and run Grafeas locally or within various cloud providers.
- Dan
It looks like the README.md for Grafeas was updated a few times in the last few days.
https://github.com/Grafeas/Grafeas/commits/master/README.md
This section of the README.md is interesting:
TODO:Document the process for adding a new kind to the spec and generating the model, documents, and client libraries to include that kind. #38
Hopefully, these types of things will be fully explained when we see companies like IBM commercialize Grafeas and offer it as a service.