DocSecOps

DocSecOps

Overview

The Naval Education and Training Command (NETC) oversees the creation and distribution of large amounts of digital documentation across multiple areas. As the products of this organization are directly responsible for national defense, the accuracy, reliability and storage of these documents are of the utmost importance as simple errors such as invalid links, misspellings or lost documentation can cause damaging misunderstandings. A similar set of problems are present in the software world, however reliable and industry standard solutions have already been developed through code and artifact repositories, build pipelines and middleware code analysis tools. The focus of this project was to create a pipeline which can handle digital documents (Word, PowerPoint, PDF, etc.) files in a manner like source code, using Jenkins pipelines, Git repositories, Artifactory artifact repositories along with customized document focused middleware processors.

Community Benefit

By creating a secure and efficient ecosystem for handling different file types, extracting metadata, storing files in Artifactory, and monitoring the process with a mirroring plugin, we significantly enhanced the development process. These improvements have made it possible to deliver high-quality products and services to the Navy's stakeholders while ensuring the security and traceability of the files used in the process.

Team Members

Sponsor

Naval Education and Training Command