The Supply of Software Composition Analysis Tool (including Binary Repository Manager) for Security Vulnerability Checking, License Compliance and Architectural Governance

In summary, the Services comprise: (1) supply of a tool to perform software composition analysis and a binary repository manager tool for the purpose of (a) security vulnerability checking of 3rd party open source libraries, (b) license compliance checking of those libraries, and (c) architectural governance to manage the use of such 3rd party libraries; (2) support/maintenance contract of the tool for the duration of the license. The proposal may supply an alternate binary repository manager tool to replace the Department’s use of Sonatype Nexus Repository Pro. If so, then it must have equivalent capabilities to Sonatype Nexus. (This RFT outlines the features used in its current integration to Nexus).

Services

26/04/2021 18:00:00

72261000-2  Software support services
48170000-0  Compliance software package
48218000-9  License management software package
48730000-4  Security software package
48731000-1  File security software package
48790000-2  Version checker software package
72263000-6  Software implementation services