Enterprise Cloud Management Agency

Engineering Productivity Tools are a suite of IL-4 accredited tools that boost efficiency and serve as a total Army resource for modern software development. Users can focus on providing the best possible software instead of worrying about getting the tools they need.

Source code push team (SCRerer) provides guidance on building pipelines that can deploy an application to production through a series of security checks, which have been put in place through consultation with application security validation engineers. The SRCerer premiere products offers a source code push model that provides repeatable, accredited build processes with inherited controls. SRCerer allows application teams to drastically reduce the time it takes for the application to go from ideation to running in production in a secure and approved way. SRCerer customers, those using the SCRerer pipeline, not just guidance, inherit ~75% of security technical implementation guidance (STIG) controls from our product using App Dev STIG. The application security validation engineer (AVSE) team has developed a security pipeline that can be added to build pipelines to ensure minimum security requirements are met. Currently the pipelines ASVE have pre-built focus on those application on the CReATE-SWF path to production. For those following an alternat P2P modifications would need to be made. Our ASVE team members are developer security advocates that bridge the gap between technical implementation and compliance to reduce debt for teams and accelerate deployments. Along any path to production there will be continuous integration/continuous deployment occurring. And at times an organization may not quite be ready for a full path to productions. While not writing pipelines for application teams continuous integration (CI) assistance is available from SCRerer and customer success which may extend the use of CReATE's engineering productivity tools by enabling teams to perform builds, unit tests, static code analysis and other CI-only actions, allowing teams to foster DevSecOps behaviors and culture on their team.

Phantom is the roadmap supporting the underlying DevSecOps-ecosystem (DSO-E) platform whose mission is to enable DSO-E product teams to focus on customer-facing features for their respective products. The team is charged with providing platform security, stability and reliability and ensuring common services are consumable by all DSO-E product teams.