Software support services

Tender description

In summary, the Services comprise: 1) Supply of a tool to perform software composition analysis and a binary repository manager tool for the purpose of (a) security vulnerability checking of 3rd party open source libraries; (b) license compliance checking of those libraries; and (c) architectural governance to manage the use of such 3rd party libraries; 2) Support/maintenance contract of the tool for the duration of the license. The proposal may supply an alternate binary repository manager tool to replace the Department’s use of Sonatype Nexus Repository Pro. If so, then it must have equivalent capabilities to Sonatype Nexus. (This RFT outlines the features used in its current integration to Nexus). In summary, the services comprise: 1) Supply of a tool to perform software composition analysis and a binary repository manager tool for the purpose of (a) security vulnerability checking of 3rd party open source libraries; (b) license compliance checking of those libraries; and (c) architectural governance to manage the use of such 3rd party libraries; 2) Support/maintenance contract of the tool for the duration of the license. The proposal may supply an alternate binary repository manager tool to replace the Department’s use of Sonatype Nexus Repository Pro. If so, then it must have equivalent capabilities to Sonatype Nexus. (This RFT outlines the features used in its current integration to Nexus).