SonarQube Notice of Brand Name /Sole Source Determination

The Oregon Health Authority (OHA) is seeking to renew its annual subscription for SonarQube Enterprise Edition software, a non-proprietary static code analysis tool used to measure and analyze source code quality across multiple programming languages. This procurement is being conducted as a Sole Source Determination and Brand Name Specification, with the primary objective of continuing software support for code quality analysis across OIS-supported agencies. The software enables seamless integration with DevOps pipelines and has been proven effective in accelerating business value delivery since its initial purchase in 2020. The procurement is being posted on OregonBuys with a seven-day public notice period, with the due date for potential protests set for September 8, 2023. SonarQube is specifically valued for its comprehensive coverage of coding languages, including legacy code, and its unique ability to provide advanced static code analysis capabilities that are not available from other vendors.

The contract will be awarded to SHI, Inc. as the sole source vendor, with no specific set-aside designations or restrictions on vendor qualifications mentioned in the documentation. The procurement allows for potential additional renewals and related goods or services, with a maximum total spend authorized at $330,000. This represents a continuation of existing software licensing that began in 2020, with previous renewals executed in 2021 and 2022. The procurement process involves a public notice period during which potential vendors or stakeholders can file protests, though no specific alternative vendors are identified. The software will be procured through the state's existing Software Value-Added Reseller (SVAR) price agreement, ensuring competitive pricing and streamlined acquisition. If no protests are received during the seven-day notice period, OHA will proceed with awarding the contract to SHI, Inc. for the 2023-2024 term.