SOO_SonarQube_FY26.pdf
PDF 155 KB Posted
- Attached to
- SonarQube Alternate Sources
- Solicitation number
- FA830726RB030
About this file
This is a Statement of Objectives (SOO) for SonarQube, a Code Quality Assurance tool to be provided to Platform One (P1) in support of United States Air Force Development Security Operations (DevSecOps). The contract number is FA830726RB030. The purpose is to enable P1 to create and maintain software threat models and secure compliant code while utilizing cloud flexibility. SonarQube combines static and dynamic analysis tools to measure code quality continually, ensuring code reliability, application security, and reduced technical debt by making code bases clean and maintainable. The tool will be deployed on Impact Level 2 and Impact Level 4 environments to support the P1 Party Bus Value Stream and directly benefit government interests regarding cost and development schedule efficiency.
The Period of Performance consists of a base year from 15 May 2026 to 14 May 2027, with two one-year option periods (OY1: 15 May 2027–14 May 2028; OY2: 15 May 2028–14 May 2029), with place of performance at Platform One/HNCX in San Antonio, Texas. The contract requires the provision of SonarQube Server Enterprise Edition licenses: for each period (base year, OY1, and OY2), the contractor shall provide one license for up to 5 million Lines of Code (LOCs), one license for up to 10 million LOCs, and one license for up to 10 million LOCs with support. License keys must be emailed to Robert.mckeithan.1@us.af.mil and AFLCMC.HNCX.P1LicenseManagement@us.af.mil within 5 business days after receipt of award. The contractor must designate a single point of contact for coordination with the P1 Program/Acquisition Manager and Procurement Contracting Officer, and shall provide timely identification of issues, root cause remedies, and effective communication regarding license updates, timelines, and expiration dates.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| SonarQube_RFI_Vendor_Questions.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
STATEMENT OF OBJECTIVES (SOO)
SonarQube
FA830726RB030
Purpose:
The purpose of this Government purchase is to provide Platform One (P1) the ability to create and maintain software threat models and secure compliant code in support of the United States Air Force (USAF) Development Security Operations (DevSecOps) while utilizing the flexibility of the cloud. SonarQube is a Code Quality Assurance tool that collects and analyzes source code and provides reports for the code quality of P1.
Scope or Mission:
SonarQube is deployed on Impact Level 2 and Impact Level 4 in support of the P1 Party Value Stream. SonarQube combines static and dynamic analysis tools and enables quality to be measured continually over time. SonarQube ensures code reliability, Application security, and reduces technical debt by making the code base clean and maintainable in support of P1 Party Bus Value Stream customers. SonarQube Enterprise is a direct benefit to the Government in the interest of cost and time (development schedule).
SonarQube improves productivity by enabling Development Security Operations (DevSecOps) teams to identify and muzzle redundancy and duplication of code inside the P1 software ecosystem.
Period and Place of Performance.
PoP:
Base: 15 May 2026-14 May 2027 OY1: 15 May 2027-14 May 2028 OY2: 15 May 2028-14 May 2029
Place of Performance: Platform One/HNCX 420 Broadway San Antonio, TX 78205
Background:
P1 requires an application that provides the framework to track, collect and analyze source code for DevSecOps, directly supporting customers P1 works with.
Performance Objectives (required results):
SonarQube facilitates the Party Bus Value Stream engineers’ requirements to decrease application size, code complexity, time and cost of maintenance, and make code easier to read and understand for all users. SonarQube is a critical piece of the Party Bus software development to speed delivery of tested and approved code in DevSecOps in meeting the needs of the war-fighter.
This is an initial license purchase for P1.
The SonarQube contract shall provide:
Line Number Part # Description QTY Base Year
0001 SQS-EE5M SonarQube Server Enterprise Edition up to 5M LOCs 1
0002 SQS-EE10M
SonarQube Server Enterprise Edition up to 10M
LOCs 1
SQS-EE10M w support SonarQube Server Enterprise Edition up to 10M
LOCs, with Support 1
OY1
1001 SQS-EE5M SonarQube Server Enterprise Edition up to 5M LOCs 1
1002 SQS-EE10M
SonarQube Server Enterprise Edition up to 10M
LOCs 1
SQS-EE10M w support SonarQube Server Enterprise Edition up to 10M
LOCs, with Support 1
OY2
2001 SQS-EE5M SonarQube Server Enterprise Edition up to 5M LOCs 1
2002 SQS-EE10M
SonarQube Server Enterprise Edition up to 10M
LOCs 1
SQS-EE10M w support SonarQube Server Enterprise Edition up to 10M
LOCs, with Support 1
· License keys shall be emailed to (Robert.mckeithan.1@us.af.mil, AFLCMC.HNCX.P1LicenseManagement@us.af.mil), and must be delivered within 5 business days After Receipt Of, ARO, Award.
Operating Constraints:
The Contractor shall have a single POC (Point of Contact) for coordination with the P1 Program/Acquisition Manager (PM/AM) and the Procurement Contracting Officer (PCO). Contractor shall provide necessary licenses / license keys, timely identification of issues, root cause remedies and effective communication of all licenses updated / timelines / expiration dates.
File details come from the government source that posted it. Updated .