Tools and Services

The IT Centre offers the following DevSecOps-oriented tools to support developers and operators:

Infrastructure services

• API management: Gravitee API Gateway — centralized API gateway for routing, policies, authentication, rate limiting and analytics.
• Container registry: Quay.io — hosted container image registry with image storage, access controls and vulnerability scanning options.
• Secrets management: Azure Key Vault — secure storage and access control for secrets, keys and certificates.
• Certificate service — issuance and lifecycle management for internal/external TLS certificates.
• Version control: GitLab and GitHub — source code hosting, collaboration, issue tracking and CI/CD pipelines.

Testing services

• Browser and device testing for web apps: BrowserStack — cross-browser and real-device testing (manual and automated) for frontend compatibility.
• Static code analysis (SAST): SonarQube — automated code quality and security scanning to identify bugs, code smells and vulnerabilities.
• Identity/authentication testing service — test identity provider/environment for validating login flows, OIDC/SAML integrations and role-based access.

Observability and monitoring

• Dependency and SBOM management: Dependency Track — software bill-of-materials (SBOM) and dependency vulnerability tracking across projects.
• Logging and APM: Elasticsearch / Elastic APM — centralized log storage, search and application performance monitoring (traces, metrics).
• Error and performance monitoring: Sentry — real-time error reporting and performance tracing with alerting and issue aggregation.