Get Access : Subscriptions and Offers

Introduction

Access to the Software Factory’s main tools (GitLab, SonarQube, Artifactory) is available through a single offer valid on all platforms: the DevSecOps offer.

This offer is valid on all managed platforms (TDP C2, TDP C3-CA, RTDP, CASTLE, R-CASTLE). You can subscribe via the Get Access to Software Solutions form on PostIT.

Additionnal offers are available to:

• Create build machines (GitLab Runner) dedicated to the project and managed by the Software Factory
• Perform advanced security analysis (Coverity and Black Duck SCA)

Elligible Users

Any Thales employee or contractor with a thalesgroup.com or thalesdigital.io address can subscribe to the service.

DevSecOps

Platform: TDP [C2, C3-CA], RTDP, CASTLE [C3]

The purpose of this offer is to provide all the features to plan, build, test, secure, package and deploy a software application. With this offer, you will be able to implement the applicable rules from the 9 cybersecurity rules.

You can subscribe via the Get Access to Software Solutions form on PostIT . It requires a TDF Account, if you don’t have one, you will need to create a TDF Account or check with your team to see if you can join an existing TDF Account .

DevSecOps offer is charged only once, even if you access to multiple Software Factory on several managed platform (TDP C2, TDP C3-CA, RTDP, CASTLE, R-CASTLE).

This offer grants access to the following capabilities:

• GitLab (with highest tier: Ultimate including SAST, SCA, DAST, Project Management)
  • TDP C2 only: Shared Runners are available for free for rapid prototyping. For production use, see the Dedicated Managed Runners offer
• SonarQube (with the highest tier: Enterprise)
• Artifactory (with the highest tier: Enterprise+)

The price includes: the cost of licenses for the tools (the deployment and infrastructure cost is sponsored in 2023 and 2024).

Shared Runners

Platform: TDP [C2]

The Shared Runners are machines capable of running CI/CD for tests and prototyping, available by default to all GitLab TDP C2 projects. They are part of the DevSecOps offer and are provided for free (costs are supported by the Software Factory).

As they are provided for free, the Service Level Agreement does not apply with this service, we do not guarantee their performance or availability. For production, projects must have their dedicated runners (self-managed or managed by the Software Factory, see the Dedicated Managed Runners offer).

Dedicated Managed Runners

Platform: TDP [C2]

The purpose of this offer is to help teams be more efficient by not having to focus on infrastructure needs for their activities. We deploy and operate GitLab Runners dedicated to your project, ensuring updates, availability, performance and security. The dedicated runners are suitable for production purpose, unlike the Shared Runners on TDP C2, as their performance and availability is guaranteed.

Runners are available for Linux and Windows operating systems. Our offers come in a range of sizes to ensure you have the resources and cost best suited to your project. You can choose between two types of runner: static or scalable. Static runners always deliver the same performance at the same cost. Scalable runners will offer performance that adapts to your use, and can go beyond the limits of static runners, but the cost of their use will also be proportional to your consumption.

Managed Dedicated Runners are currently in private Early Access: we limit the access as we conduct user experience testing. If you would like to take part in this initiative, please contact mihail.stoica@external.thalesgroup.com .

We will only charge the fixed fees in 2024 and early adopters may not see the Managed Dedicated Runners in their invoices at the time of the subscription but billing will start from the moment of subscription.

The price includes:

• for static runners: the infrastructure cost + operations cost.
• for scalable runners: the infrastructure cost + operations cost + your consumption.

Inner Source

See dedicated page on Inner Source .

Shared Responsibility Model

Definitions:

• Responsible, Accountable, Consulted, Informed
• Platform = TDP, RTDP, CASTLE
• Service = Software Factory
• Project = the project using the service Software Factory on a particular platform (it’s you)

More information

• You can have a look on the TDP FAQ
• You can also have a look at Platforms documentation