GSA Pages ATU Documentation for the councils.gov Site

[KKAtila]

Complete the GSA Pages ATU process as it applies to the councils.gov site.

Notes

N/A

Acceptance Criteria

• - Review the existing GSA Pages ATU process
• - Identify requirements relevant to councils.gov
• - Complete the GSA Pages ATU template
• - Scans CodeQL for code (CodeQL should be enabled) - Implemented Snyk as an alternative to satisfy the static code analysis requirement.

Invicti for site (Preview and Production) scanning. While we can provide a ZAP scan, Invicti scan is required for the GSA Pages ATU and may take approximately one week. All scans are requested through ServiceNow.

• - Preview scan
• - Production site scan

• - Collect required artifacts
• - Route documentation through the approval process. The ATU requires signatures from the GSA Website Manager/Site owner, TTS Technology Operations (GSA Pages owner), ISSO, and ISSM, and approval typically takes about a week.

Councils.gov ATU: councils.gov-Site-Review-and-Approval-Form

[KKAtila]

Completed a preliminary review with the GSA Pages ISSO.
CodeQL enablement in the councils.gov repositories is listed as a GSA ATU requirement; however, it is no longer an option that can be enabled within the GSA GitHub organization. They recommend implementing Snyk as an alternative to satisfy the static code analysis requirement.

[KKAtila]

The preview scan results were reviewed and no significant issues were identified.

[KKAtila]

Code Analysis and Dependabot reports: councils.gov_snyk_issues_detail(3-2-2026