DevSecOps environment and CI pipeline configuration, licence management, and continuous code quality and security improvement

Summary

Mutualia is procuring a single, non-lotted service to manage software licences and configure, integrate, support and continuously improve its DevSecOps environment. The work includes configuring SonarQube and Dependency-Check, integrating automated code-quality and dependency-vulnerability analyses into Jenkins continuous-integration pipelines for Java/Maven and Angular projects, and providing technical support, reporting and knowledge transfer. The initial term is one year, with three possible one-year extensions.