The government is now doing what private companies have been doing to make sure the software packages are secure and reliable for widespread deployment.
This is part of a trend where government is adopting a lot of the technology software companies already have.
It obviously doesn't make sense to scan something a hundred times if nobody's going to touch it between those scans.