Start Using the Software Factory

The Software Factory is the dream software development environment for Thales engineers and partners.

It is a set of tools, practices, and infrastructure designed to streamline and standardize the development , testing, deployment, and maintenance of software projects.

We improve engineering efficiency by providing a development environment as a service to build software solutions through:​

• secured, reliable and easy to use environment​
• engineering practices enhancement​
• a strong inner source community

Key Features

Source Code Management

📂 Source code management involves tracking and managing changes to code to ensure consistency and facilitate collaboration.

• Tool: GitLab in General Availability within DevSecOps Offer
• Practices:
  • SCM Best Practices
  • Merge Request
• Tutorials & How-to:
  • How to Secure your repository in GitLab
  • How to create merge request

Artefact Management

📦 Artefact management is the process of storing, managing, and tracking binary files generated during the software development lifecycle.

• Tool: JFrog Artifactory in General Availability within DevSecOps Offer
• Practices: Cleaning up your Artifactory
• Tutorials & How-to: How to Mirror Repositories

Code Quality Check

🧪 Code quality check ensures that the codebase adheres to predefined standards and is maintainable, reliable, and efficient.

• Tool: SonarQube in GA within DevSecOps Offer
• Practices: SonarQube Best Practices
• Tutorials & How-to: Tutorials for SonarQube

Continuous Integration/Continuous Deployment

🚀 CI/CD automates the process of integrating code changes, testing, and deploying applications to ensure seamless delivery.

• Tools:
  • GitLab CI in General Availability within DevSecOps Offer
  • NextGen CI/CD Available in C2 and C3 in InnerSource
• Practices:
  • CI Concept
  • GitLab Pipeline Best Practices
• Tutorials & How-to: Getting Started with GitLab CI

Security and Compliance

🔒 Security and compliance tools ensure that code meets security standards and regulatory requirements , scanning for vulnerabilities and licensing issues.

The Software Factory provide various tools for SAST, DAST and SCA :

• Tools:
  • GitLab Secure available in GA within DevSecOps Offer
  • Coverity Available in GA as Standalone offer
  • Black Duck as Standalone offer
  • JFrog Xray within DevSecOps Offer
• Practices: Security and Compliance Practices

AI Code Assistant

🤖 AI Code Assistants provide intelligent coding suggestions, error detection, and automations to enhance developer productivity.

• Tool: Code Companion 2.x as Standalone offer
• Practices: AI Code Assistant Best Practices 🚧
• Tutorials & How-to: Getting Started with Code Companion

Signing

To securely sign and verify software artifacts such as release files, container images, binaries , software bills of materials (SBOM), and other critical components.

• Tools: Cosign
• Practices: 🚧
• Tutorials & How-to: 🚧

Project Collaboration and Management

🤝 Streamlines project planning, tracking, and collaboration, ensuring teams stay aligned and productive throughout the development lifecycle.

• Tools:
  • GitLab Plan in General Availability within DevSecOps Offer
  • JIRA - Under Distributed System responsability
• Practices: 🚧
• Tutorials & How-to:
  • Use template for issues with GitLab Plan
  • Working with Kanban Using GitLab Plan: A Step-by-Step Guide