code quality (static analysis, coverage, style, etc.) 2. Package the code only once – use the same packages throughout the pipeline 3. Captures the history of events for a build, test results, environments pre-configured VM, containers, etc. 3. Automate deployment & configuration of middleware 4. Copying packages to production servers 5. Restarting VMs, containers, applications, etc. 6. Generating configuration manual steps and handoffs f. INTEGRATE CODE DEPLOYMENT INTO THE DEPLOYMENT PIPELINE i. Ensures packages created by CI are suitable for deployment ii. Shows readiness of production environments at a glance

one-time up front activity o In lieu of CDDs and CPDs, programs can develop Requirements Definition Packages (RDPs) to capture a subset of the IS ICD scope and/or Capability Drop (CD) documents for smaller

all contributors should have their own key and sign all commits to version control. All created packages should be signed and hash recorded for auditing h. ENSURE SECURITY OF OUR SOFTWARE SUPPLY CHAIN

for approval or oversight. In lieu of CDDs and CPDs, programs can develop Requirements Definition Packages (RDPs) to capture a subset of the IS ICD scope and/or Capability Drop (CD) documents for smaller