Trusted Development Network

Storage, Versioning, and Reporting

Nexus Repository for already-approved/secure Python packages and Docker Containers

MinIO S3 Scalable, access controlled, storage for datasets and machine learning models

Gitea Open-source, GitHub-compliant, alternative for repositories, versioning, and automated CI/CD pipelines for all software, packages, artifacts, containers, and helms.

Security, Compliance, and Quality Assurance

Trivy Automated security scans against third-party software (e.g., python packages, docker containers), verifies compliance with third-party licensing agreements, checks for sensitive information, and generates a Software Bill of Materials (SBOM)

SonarQube Automated security, quality assessment, and compliance for software under development; protects git branches from being merged with bad code, provides developers real-time feedback on code improvements.

Software Development Environment

Visual Studio Code (VS Code) Remote and desktop IDE controlled by the CDE and provisioned by Coder

Jupyter Hub (Notebooks) Remote IDE for prototyping machine learning models controlled by the CDE

Machine Learning Environment

Continuous Machine Learning (CML) Automated reporting on machine learning models during code-commit

Label Studio Web-based platform for curating and labeling a machine learning dataset

test