Abstract: Processing logic may obtain health data from each of a plurality of clients. The health data includes attributes of a respective one of the plurality of clients, a health status of the respective one of the plurality of clients, and a software version of the respective one of the plurality of clients. Processing logic may determine a conditional risk that is associated with at least one of the attributes and the software version, in view of the health data, and store the conditional risk in memory. Processing logic can make the conditional risk, which includes the attributes and the software version, available to a client.

Abstract: Processing logic may obtain a version of software that is running on a client. Processing logic may obtain a second version of the software which is an update to the version of software that is running on the client. Processing logic may send the second version to the client with one or more conditions that are associated with the second version, for the client to determine whether or not to update to the second version.

Abstract: Application permissions can be set in a cloud computing environment based on a user's authorization level in the cloud computing environment. For example, a system can determine that a user has a particular authorization level in a cloud computing environment. The system can determine that the user is to have particular permissions for a continuous integration tool by mapping the particular authorization level to the particular permissions. The system can then set a permission setting for the continuous integration tool to limit the user to the particular permissions.

Abstract: Implementations provide for container clustering in a container-based architecture. A method of the disclosure includes generating by a processing device executing a container deploying an instance of an application image, a domain name server (DNS) query to request identification of other containers in a container cluster. The other containers deploy other instances of the application image. The method also includes in responsive to the DNS query, receiving the identification of each of the other containers in the container cluster. The method further includes configuring, without manual intervention, the container as a member of the container cluster in view of the identification of each of the other containers.

Abstract: A pipeline object recommendation system may be configured to analyze a software development project for development attributes. The system may then generate a pipeline object corresponding to the development project based on the plurality of development attributes. The system may then present the pipeline object.

Abstract: Managing resources used during a development pipeline. A method of the disclosure includes analyzing historical resource usage of an application development system during different stages of a development pipeline for an application. The application development system includes a set of computing resources. The method also includes configuring the set of computing resources of the application development system for a later stage of the development pipeline based on an estimated resource usage.

Abstract: Managing resources used during a development pipeline. A method of the disclosure includes analyzing historical resource usage of an application development system during different stages of a development pipeline for an application. The application development system includes a set of computing resources. The method also includes determining a current resource usage for a current stage of the development pipeline for the application. The method further includes determining an estimated resource usage for a later stage of the development pipeline for the application based on one or more of the current resource usage or the historical resource usage. The method further includes configuring the set of computing resources of the application development system for the later stage of the development pipeline based on the estimated resource usage.

Abstract: Application permissions can be set in a cloud computing environment based on a user's authorization level in the cloud computing environment. For example, a system can determine that a user has a particular authorization level in a cloud computing environment. The system can determine that the user is to have particular permissions for a continuous integration tool by mapping the particular authorization level to the particular permissions. The system can then set a permission setting for the continuous integration tool to limit the user to the particular permissions.

Abstract: Application permissions can be set in a cloud computing environment based on a user's authorization level in the cloud computing environment. For example, a system can determine that a user has a particular authorization level in a cloud computing environment. The system can determine that the user is to have particular permissions for a continuous integration tool by mapping the particular authorization level to the particular permissions. The system can then set a permission setting for the continuous integration tool to limit the user to the particular permissions.

Abstract: Usage instrumented workload scheduling is disclosed. For example, a plurality of nodes host first and second pluralities of guests. An orchestrator includes a usage monitor, a workload classifier, and a scheduler, and executes on a processor to track, by the usage monitor, respective usage patterns of a plurality of accounts including a first account. A first workload is received from the first account, which has a first account factor based on the respective usage patterns of the first account. The first workload is assigned by the workload classifier to a first workload type of a plurality of workload types. The first workload is assigned by the scheduler to the first plurality of guests based on the first account factor and the first workload type.

Abstract: Implementations provide for container clustering in a container-based architecture. A method of the disclosure includes generating by a processing device executing a container deploying an instance of an application image, a domain name server (DNS) query to request identification of other containers in a container cluster. The other containers deploy other instances of the application image. The method also includes in responsive to the DNS query, receiving the identification of each of the other containers in the container cluster. The method further includes configuring, without manual intervention, the container as a member of the container cluster in view of the identification of each of the other containers.

Abstract: Implementations provide for an add-on image framework for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes launching a build container for a build process based on a base image of an application of a multi-tenant Platform-as-a-Service (PaaS) system. The base image provides a core functionality of the application. The method also includes providing a source code for the application to the build container. The method further includes extracting content from an add-on image and assembling an application image using the base image, the source code and the extracted add-on image content in the build container.

Abstract: Managing resources used during a development pipeline. A method of the disclosure includes analyzing historical resource usage of an application development system during different stages of a development pipeline for an application. The application development system includes a set of computing resources. The method also includes determining a current resource usage for a current stage of the development pipeline for the application. The method further includes determining an estimated resource usage for a later stage of the development pipeline for the application based on one or more of the current resource usage or the historical resource usage. The method further includes configuring the set of computing resources of the application development system for the later stage of the development pipeline based on the estimated resource usage.

Abstract: Implementations provide for container clustering in a container-based architecture. A method of the disclosure includes generating by a processing device executing a container deploying an instance of an application image, a domain name server (DNS) query to request identification of other containers in a container cluster. The other containers deploy other instances of the application image. The method also includes in responsive to the DNS query, receiving the identification of each of the other containers in the container cluster. The method further includes configuring, without manual intervention, the container as a member of the container cluster in view of the identification of each of the other containers.

Abstract: A pipeline object recommendation system may be configured to analyze a software development project for development attributes. The system may then generate a pipeline object corresponding to the development project based on the plurality of development attributes. The system may then present the pipeline object.

Abstract: Usage instrumented workload scheduling is disclosed. For example, a plurality of nodes host first and second pluralities of guests. An orchestrator includes a usage monitor, a workload classifier, and a scheduler, and executes on a processor to track, by the usage monitor, respective usage patterns of a plurality of accounts including a first account. A first workload is received from the first account, which has a first account factor based on the respective usage patterns of the first account. The first workload is assigned by the workload classifier to a first workload type of a plurality of workload types. The first workload is assigned by the scheduler to the first plurality of guests based on the first account factor and the first workload type.

Abstract: Application permissions can be set in a cloud computing environment based on a user's authorization level in the cloud computing environment. For example, a system can determine that a user has a particular authorization level in a cloud computing environment. The system can determine that the user is to have particular permissions for a continuous integration tool by mapping the particular authorization level to the particular permissions. The system can then set a permission setting for the continuous integration tool to limit the user to the particular permissions.

Abstract: The subject matter of this specification can be implemented in, among other things, a method that includes receiving, by a processing device in a platform-as-a-service (PaaS) system, package metadata including one or more attributes for each of a plurality of packages. Each of the plurality of packages includes one or more components of one or more applications to execute on the PaaS system. The method further includes receiving threat metadata including one or more attributes for each of a plurality of threats. The method further includes storing the package metadata or the threat metadata in one or more data stores. The method further includes comparing, by the processing device, the attributes of the packages to the attributes of the threats to determine that at least one package among the packages includes at least one threat from the threats.

Abstract: Implementations provide for an add-on image framework for a Platform-as-a-Service (PaaS) system. A method of the disclosure includes launching a build container for a build process based on a base image of an application of a multi-tenant Platform-as-a-Service (PaaS) system. The base image provides a core functionality of the application. The method also includes providing a source code for the application to the build container. The method further includes extracting content from an add-on image and assembling an application image using the base image, the source code and the extracted add-on image content in the build container.

Abstract: Implementations provide for container clustering in a container-based architecture. A method of the disclosure includes generating by a processing device executing a container deploying an instance of an application image, a domain name server (DNS) query to request identification of other containers in a container cluster. The other containers deploy other instances of the application image. The method also includes in responsive to the DNS query, receiving the identification of each of the other containers in the container cluster. The method further includes configuring, without manual intervention, the container as a member of the container cluster in view of the identification of each of the other containers.