Basic Information

Reference Number

0000186534

Issuing Organization

Business Development Bank of Canada

Solicitation Type

RFP - Request for Proposal (Formal)

Solicitation Number

RFP-0000186534

Title

Software Composition Analysis Solution

Source ID

PP.CO.QC.981867.C100263

Agreement Type

Canadian Free Trade Agreement (CFTA)

Details

Location

Canada, All of Canada, All of Canada

Description

Today, organizations such as BDC are more exposed to experiencing computer security breaches and software intrusions, which can result in the exposure of confidential and sensitive information. As such, the InfoSec Team launched a program that addresses the different security components within the development of Continuous Integrations / Continuous Delivery (“CI/CD”) in order to introduce a Secure Software Development Life Cycle (“SSDLC”) practice.

As such, BDC is in search for a unique Software Composition Analysis (“SCA”) solution that can effectively:

Manage artifacts in a repository including container images and Open-Source libraries;
Scan open source libraries for missing security patches and licensing issues;
Manage the life cycle of the libraries;
Add security policies to prohibit downloads of vulnerable artifacts.

Dates

Publication

2020/11/09 08:42:58 AM EST

Bid Intent

Not Available

Question Acceptance Deadline

2020/11/23 03:00:00 PM EST

Questions are submitted online

Closing Date

2020/12/14 03:00:00 PM EST

Contact Information

Liana Gitto

514-283-5284

Liana.gitto@bdc.ca

Bid Submission Process

Bid Submission Type

Physical Bid Submission

© MERX - All rights reserved. No part of the information on this Web Site may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or otherwise without the prior permission of MERX and the Minister of the participating government department (if applicable). MERX, the Minister nor the Contracting Authority will assume responsibility or liability for the accuracy of the information contained in the publication.