USAF - Gitlab Premium & Ultimate - MRAS

The General Services Administration (GSA), on behalf of the United States Air Force (USAF), is conducting market research to assess the availability and capabilities of software solutions that can support Platform One's (P1) Development Security Operations (DevSecOps). This initiative aligns with the USAF's broader goal of enhancing its software development processes and ensuring secure, compliant code through a robust DevSecOps environment. GitLab has been identified as a critical component in this architecture, providing an end-to-end solution that integrates essential security measures within the software development lifecycle.

The work requested involves renewing licenses for GitLab Premium and Ultimate editions, which are essential for P1's daily operations. The scope includes providing 1500 GitLab Premium licenses and 300 GitLab Ultimate licenses, all compliant with Department of Defense (DoD) regulatory guidelines. These licenses will facilitate advanced Source Code Management, Continuous Integration/Continuous Development (CI/CD) pipelines, and embedded security features designed to prevent vulnerabilities such as broken authentication and SQL injection within web applications. Additionally, the contract requires dynamic application security testing capabilities to ensure continuous compliance with Zero Trust standards.

GitLab is deeply integrated into P1's existing infrastructure, including its Party Bus and Iron Bank Value Streams. The platform supports various DoD customers by streamlining software development processes through expedited code reviews and efficient deployment management as assessed by the DevOps Research and Assessment team (DORA). The research also seeks alternative solutions that offer equal or superior value compared to GitLab to ensure optimal performance for P1's developmental environment.

The performance period for this contract spans from March 2024 to March 2025 at Platform One/HNCX in San Antonio, Texas. To facilitate effective coordination throughout this period, the contractor is required to provide a single Point of Contact (POC) who will liaise with the Program/Acquisition Manager and Procurement Contracting Officer. This role includes managing license keys, addressing issues promptly, communicating updates effectively, and ensuring compliance with all regulatory requirements.