B08 - ATTACHMENT J - Code Quality Checking Table.pdf

28 KB Posted

Attached to
Anatomic Pathology Laboratory Information System (APLIS)
Solicitation number
W81XWH-20-R-0029
Issued by

About this file

Written by GovTribe AI ·

This document contains information on code quality checking tools and tables for a Department of the Army contract opportunity. The contract is for operation and sustainment of an Anatomic Pathology Laboratory Information System (APLIS) at Army medical facilities. The contractor will perform installation, maintenance, customer support, quality assurance, and configuration management activities to support the current version of APLIS and future releases throughout the life of the contract. This includes implementing new versions of APLIS and interfaces with other clinical systems at Military Treatment Facility sites. The contractor must use the static analysis and quality tools specified in the tables to check code and ensure standards are met for issues like security vulnerabilities, error handling, architectural separation, and coupling.

View the file

Other files

File Type Posted
W81XWH20R0029-0004 Questions.Answers.XLSX XLSX spreadsheet
Amendment 0004 - Attachment C - Excel Price Template.xlsx XLSX spreadsheet
W81XWH20R0029-0004 - CONFORMED RFP.pdf PDF
Amendment 0004 - W81XWH20R0029 Questions and Answers.pdf PDF
W81XWH20R0029-0004 - AMENDMENT.pdf PDF
Amendment 0003.pdf PDF
W81XWH-20-R-0029-0002.pdf PDF
W81XWH-20-R-0029-0001.pdf PDF
B08 - ATTACHMENT D - SMALL BUSINESS PARTICIPATION PLAN TEMPLATE.PDF PDF
B08 - ATTACHMENT E - OCI Certification.pdf PDF
B08 - ATTACHMENT H - Product Site Module List.pdf PDF
B08 - ATTACHMENT B - PAST PERFORMANCE QUESTIONAIRE.pdf PDF
W81XWH-20-R-0029.pdf PDF
B08 - ATTACHMENT G - APLIS Site List.pdf PDF
B08 - ATTACHMENT F - Non-Disclosure Form.pdf PDF
B08 - ATTACHMENT I - Access to HA-DHA Network-DoD IT Systems FORM DD2875....pdf PDF
B08 - ATTACHMENT A - PAST PERFORMANCE INFORMATION.pdf PDF
B08 - Attachment C - Excel Price Template.xlsx XLSX spreadsheet
B08 - ATTACHMENT K - APLIS QASP Draft.docx DOCX document
Show all 19

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file
Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

ATTACHMENT J: CODE QUALITY CHECKING TABLE

Table 1 - Static Security Analysis

Tools Languages Reports SW Code Targets Fortify .Net,ASP, COBOL, CFML, ABAP, Java, JavaScript/AJAX, JSP, PHP, PL/SQL, Python, T- SQL, Visual Basic 6.0, VBScript

Report File Extension: .FPR file Report Description: Findings contain list of security (and some quality) vulnerabilities identified during analysis of source code

Critical=0, High=0, CAT I=0, CAT II=0

Table 2 - Static Quality Analysis

CAST .Net, Java, C/C++, ABAP,VB 6, ASP, HTML, PHP, JavaScript, Python, VBScript, Oracle, PeopleSoft, Siebel and SQL Server

CAST Dashboard CAST findings contains the information on the issues identified during analysis on the standards of the coding, and software architecture principles and best practices

Error Handling = < 5% of total code Architectural Separation=0 Data integrity=0 Errors in Security=0 Afferent coupling < 5 Efferent Coupling < 5 Cyclomatic Complexity < 10

SonarQube .NET, Java, Flex, PHP, PL/SQL, Cobol, and Visual Basic 6.0

SONAR Dashboard SONAR findings contains the information on the issues identified during analysis on the standards of the coding, and software architecture principles and best practices

Blocker=0, High=0, Major=0

JArchitect (Java only)

JAVA JArchitect .MHT files JArchitect findings in MHT file contains issues on the software quality and is more focused towards the software architecture

Afferent coupling < 5 Efferent Coupling <5 Cyclomatic Complexity < 10 Lack of Cohesion = one responsibility per component

NDepend (.NET only)

.NET NDepend .MHT files NDepend findings in MHT file contains issues on the software quality and is more focused towards the software architecture

Afferent coupling < 5 Efferent Coupling < 5 Cyclomatic Complexity < 10

Table 3– Dynamic Security Analysis

Web Inspect Analyzes web based software hosted in runtime environment by performing malicious data injection

WebInspect Dashboard WebInspect findings contains list of security vulnerabilities identified during the analysis after injecting malicious data.

Critical=0, High=0 Medium=0, Low=0

Table 4 – Software Code Targets

Tools Languages/Analysis Reports SW Code Targets Retina Scan

Configuration settings on servers, workstations, and network devices

Report file extension: .RTD The file is uploaded to Vulnerability Management System. Remediation report is generated by IP or Machine

Fix all CAT I and CAT II OR provide a mitigation strategy for Plan of Action and Milestone (POA&M)

DISA SCAP Checks STIG compliance on Server/ Workstation operating systems.

Currently supports:

• AIX

• .NET

• Google Chrome

• HP-UX

• IE

• Red Hat

• Solaris

• Windows 2016

Report file extension: .XML Fix all CAT I and CAT II OR provide a mitigation strategy for

POA&M

ATTACHMENT J: CODE QUALITY CHECKING TABLE

File details come from the government source that posted it. Updated .