Automated developer governance system

1 . A method, comprising:

receiving, by a computing system, a data object representative of a code repository for an application, the data object being an application programming interface (API)-type code box comprising:

source code of the application; and

a plurality of API-specific code artifacts for satisfying at least one governance condition defined by an entity of the computing system, the plurality of API-specific code artifacts including a documents code portion, an environment configuration code portion that specifies one or more environments in which the application will be executed, a metadata code portion that specifies the at least one governance condition to be satisfied, and a tests code portion;

causing, by the computing system, the data object to be provided to an automation tool that builds, tests, and deploys the application;

monitoring, by the computing system, operations of the automation tool during building and testing of the application, wherein the monitoring comprises:

receiving, by a communication interface of the computing system, a network transmission including the data object;

monitoring, by a processor of the computing system, one or more memory locations corresponding to storage of third-party test results based on the data object; and

in response to the monitoring of the one or more memory locations, automatically determining whether the data object satisfies the at least one governance condition; and

in response to determining the data object satisfies the at least one governance condition, automatically deploying the application.

2 . The method of claim 1 , wherein automatically deploying the application comprises deploying the application in a target deployment environment in accordance with deployment parameters defined in the data object.

3 . The method of claim 1 , further comprising monitoring, by the computing system, locations in a file system to identify expected metadata generated by the automation tool.

4 . The method of claim 1 , wherein the documents code portion of the API-type code box defines a memory storage location of a standardized secure controls framework (SFC) compliance document for the source code.

5 . The method of claim 1 , wherein the environment configuration code portion of the API-type code box defines one or more environment configuration variables for the source code.

6 . The method of claim 1 , wherein the metadata code portion of the API-type code box defines:

a delivery process configuration for the source code; and

a memory storage location for the metadata code portion.

7 . The method of claim 1 , wherein the tests code portion of the API-type code box defines:

one or more test parameters for the source code; and

a memory storage location for test results.

8 . The method of claim 1 , further comprising generating a report that lists a compliance status of the governance condition.

9 . A system, comprising:

a memory having programming instructions stored thereon; and

a processor configured to execute the programming instructions to cause the processor to perform operations, comprising:

receiving a data object representative of a code repository for an application, the data object being an API-type code box, and comprising:

source code of the application; and

a plurality of API-specific code artifacts for satisfying at least one governance condition defined by an entity associated with the system, the plurality of API-specific code artifacts including a documents code portion, an environment configuration code portion that specifies one or more environments in which the application will be executed, a metadata code portion that specifies the at least one governance condition to be satisfied, and a tests code portion;

causing the data object to be provided to an automation tool configured to build, test, and deploy the application;

monitoring operations of the automation tool during building and testing of the application, wherein the monitoring comprises:

receiving a network transmission including the data object;

monitoring one or more memory locations corresponding to storage of third-party test results based on the data object; and

in response to the monitoring of the one or more memory locations, automatically determining whether the data object satisfies the at least one governance condition; and

in response to determining the data object satisfies the at least one governance condition, automatically deploying the application.

10 . The system of claim 9 , wherein automatically deploying the application comprises deploying the application in a target deployment environment in accordance with deployment parameters defined in the data object.

11 . The system of claim 9 , wherein the operations further comprise causing the application to be published in accordance with publication parameters defined in the data object.

12 . The system of claim 9 , wherein the operations further comprise generating, based on the monitoring of the operations of the automation tool, a report listing a compliance status of the at least one governance condition.

13 . The system of claim 12 , wherein the operations further comprise:

detecting a change to the code repository corresponding to an update to the application;

upon detecting the change, causing an updated data object with the change to be provided to the automation tool configured to build, test, and deploy the update;

monitoring additional reports generated during the building and the testing of the application, wherein the monitoring comprises checking the additional reports for compliance with the at least one governance condition; and

generating an updating report listing an updated compliance status of the at least one governance condition.

14 . The system of claim 13 , wherein the operations further comprise:

determining that the at least one governance condition has been satisfied; and

based on the determining that the at least one governance condition has been satisfied, causing the update to be deployed.

15 . A non-transitory computer readable medium having one or more sequences of instructions, which, when executed by a processor, causes a computing system to perform operations, comprising:

receiving, by the computing system, a data object representative of a code repository for an application, the data object being an API-type code box, comprising:

source code of the application; and

a plurality of API-specific code artifacts for satisfying at least one governance condition defined by an entity of the computing system, the plurality of API-specific code artifacts including a documents code portion, an environment configuration code portion that specifies one or more environments in which the application will be executed, a metadata code portion that specifies the at least one governance condition to be satisfied, and a tests code portion;

causing, by the computing system, the data object to be provided to an automation tool configured to build, test, and deploy the application;

monitoring, by the computing system, operations of the automation tool during building and testing of the application, wherein the monitoring comprises:

receiving, by a communication interface of the computing system, a network transmission including the data object;

monitoring, by the processor of the computing system, one or more memory locations corresponding to storage of third-party test results based on the data object; and

in response to the monitoring of the one or more memory locations, automatically determining whether the data object satisfies the at least one governance condition; and

in response to determining the data object satisfies the at least one governance condition, automatically deploying the application.

16 . The non-transitory computer readable medium of claim 15 , wherein automatically deploying the application comprises deploying the application in a target deployment environment in accordance with deployment parameters defined in the data object.

17 . The non-transitory computer readable medium of claim 15 , further comprising causing, by the computing system, the application to be published in accordance with publication parameters defined in the data object.

18 . The non-transitory computer readable medium of claim 15 , further comprising generating, by the computing system and based on the monitoring of the operations of the automation tool, a report listing a compliance status of the at least one governance condition.

19 . The non-transitory computer readable medium of claim 18 , further comprising:

detecting, by the computing system, a change to the code repository corresponding to an update to the application;

upon detecting the change, causing, by the computing system, an updated data object with the change to be provided to the automation tool configured to build, test, and deploy the update;

monitoring, by the computing system, additional reports generated during the building and the testing of the application, wherein the monitoring comprises checking the additional reports for compliance with the at least one governance condition; and

generating, by the computing system, an updating report listing an updated compliance status of the at least one governance condition.