Tech Stack Information - department-of-veterans-affairs/diffusion-marketplace GitHub Wiki

Tech Stack for Diffusion Marketplace and available TRM information for technologies used

Ancillary Technologies

Caching Service - AWS Elasticache for Redis

As of 3/13/2024, Elasticache is FedRAMP-approved.
As of 3/13/2024, there is no available TRM information

Cloud-Computing Service - AWS EC2

As of 3/13/2024, EC2 is FedRAMP approved.
As of 3/13/2024, there is no available TRM information

Cloud Database Service - AWS RDS

As of 3/13/2024, RDS (Postgres) is FedRAMP approved.
As of 3/13/2024, there is no available TRM information

Cloud Storage Service - AWS S3

As of 3/13/2024, S3 is FedRAMP approved.
As of 3/13/2024, there is no available TRM information

Continuous Integration - GitHub Actions

As of 3/2024, it is vetted and approved by VAEC DevOps
As of 3/2024, there is no available TRM information

Continuous Monitoring - AWS CloudWatch/ScienceLogic

As of 3/13/2024, SL1 is FedRAMP approved.

Email Service - VA SMTP

As of 3/13/2024, version RFC 5321 is approved in the TRM.
As of 3/13/2024, there is no vendor EOL date and vendor desupport date for version RFC 5321.

On-Demand Application Deployment - Jenkins server

As of 7/16/2024, Diffusion Marketplace is using version 2.452.1.
As of 10/17/2024, version 2.x is approved with constraints in the TRM.
As of 10/17/2024, there is no vendor EOL date and vendor desupport date for version 2.x.

Web Application Technologies

Containerization - Docker Engine and Docker CLI

As of 3/13/2024, Diffusion Marketplace is using version 20.10.25.
As of 3/13/2024, Docker Engine and Docker CLI are no longer approved in the TRM.

EC2 Instance Operating System - Amazon Linux 2

As of 3/13/2024, Diffusion Marketplace is using version 2.
As of 3/13/2024, version 2.0.x is approved with constraints in the TRM.
As of 3/13/2024, version 2.x has a vendor EOL date and vendor desupport date of 6/30/2025- https://endoflife.date/amazon-linux.

Google Analytics (via the federal Digital Analytics Program)

As of 10/17/2024, Diffusion Marketplace is using version GA4, provisioned by the federal Digital Analytics Program on public-facing pages only.
As of 10/17/2024, version GA4 is in the TRM, approved with constraints.
As of 10/17/2024, version GA4 does not have a vendor desupport EOL date. https://digital.gov/guides/dap/common-questions-about-dap/

Nginx

As of 7/16/2024, Diffusion Marketplace is using version 1.25.1.
As of 7/16/2024, version 1.25.x is approved with constraints in the TRM.
As of 7/16/2024, there is no vendor EOL date and vendor desupport date for version 1.25.x.

Node.js

As of 11/06/2024, Diffusion Marketplace is using version 22.
As of 11/06/2024, version 22.x is approved with constraints in the TRM.
As of 11/06/2024, version 22.x has a vendor EOL date and vendor desupport date of 4/30/2027 - https://endoflife.date/nodejs.

PostgreSQL

As of 11/06/2024, Diffusion Marketplace is using version 13.
As of 11/06/2024, version 13.x (RHEL Only) is approved with constraints in the TRM.
As of 11/06/2024, version 13.x has a vendor EOL date and vendor desupport date of 11/13/2025 - https://endoflife.date/postgresql.

Puma

As of 3/13/2024, there is no available TRM information

Ruby

As of 11/06/2024, Diffusion Marketplace is using version 3.3.6.
As of 11/06/2024, version 3.3.x is approved with constraints in the TRM.
As of 11/06/2024, version 3.3.x has a vendor EOL date and vendor desupport date of 3/31/2027 - https://endoflife.date/ruby.

Ruby on Rails

As of 1/9/2025, Diffusion Marketplace is using version 7.0.8.7.
As of 1/9/2025, version 7.0.x is approved with constraints in the TRM.
As of 1/9/2025, version 7.0.x has a vendor EOL date and vendor desupport date of 4/1/2025 - https://endoflife.date/rails.

Unit/Integration Testing - Rspec and Capybara w/ aXe-matchers gem

As of 3/13/2024, there is no available TRM information

U.S. Web Design Standards Framework (USWDS)

As of 3/13/2024, Diffusion Marketplace is using version 2.11.1.
As of 3/13/2024, version 2.x is no longer in the TRM, per our recommendation.
As of 3/13/2024, version 2.x has a vendor EOL date and vendor desupport date of 4/2023 - https://designsystem.digital.gov/whats-new/updates/2022/04/28/introducing-uswds-3-0/.

Monitoring and Visualizations for Servers

As of 3/13/2024, Diffusion Marketplace is using Dynatrace approved by VA