diff --git a/.circleci/config.yml b/.circleci/config.yml
index b6410196c4485..d04c65f66a26b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -61,15 +61,15 @@ jobs:
       - run:
           name: check go version
           command: |
-            inv -e check-go-version
+            deva inv -e check-go-version
       - run:
           name: grab go deps
           command: |
-            inv -e deps
+            deva inv -e deps
       - run:
           name: install go tooling
           command: |
-            inv -e install-tools
+            deva inv -e install-tools
       - save_cache:
           <<: *save_deps
           paths:
@@ -87,7 +87,7 @@ jobs:
       - setup_remote_docker
       - run:
           name: run integration tests
-          command: inv -e integration-tests --race --remote-docker
+          command: deva inv -e integration-tests --race --remote-docker
 
   docker_tests:
     <<: *job_template
@@ -97,10 +97,10 @@ jobs:
       - setup_remote_docker
       - run:
           name: run docker image tests
-          command: inv -e docker.test
+          command: deva inv -e docker.test
       - run:
           name: run docker image integration tests
-          command: inv -e docker.integration-tests
+          command: deva inv -e docker.integration-tests
 
 workflows:
   version: 2
diff --git a/.copyright-overrides.yml b/.copyright-overrides.yml
index 8b2abfaad8be4..39ead57ec3728 100644
--- a/.copyright-overrides.yml
+++ b/.copyright-overrides.yml
@@ -295,7 +295,7 @@ go.opentelemetry.io/otel/semconv/internal: Copyright The OpenTelemetry Authors
 go.opentelemetry.io/otel/semconv/v1.12.0: Copyright The OpenTelemetry Authors
 golang.org/x/crypto/chacha20poly1305: Copyright (c) 2009 The Go Authors. All rights reserved
 
-# Not added by inv generate-licenses but spotted by inv-e lint-licenses
+# Not added by `deva inv generate-licenses` but spotted by `deva inv -e lint-licenses`
 github.com/AdaLogics/go-fuzz-headers: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>|AdamKorcz <adam@adalogics.com>|Sebastiaan van Stijn <github@gone.nl>|AdaLogics <48351493+AdaLogics@users.noreply.github.com>|Kazuyoshi Kato <kato.kazuyoshi@gmail.com>
 github.com/AdamKorcz/go-118-fuzz-build/testing: AdamKorcz <adam@adalogics.com>|AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>|John Howard <howardjohn@google.com>|Kazuyoshi Kato <katokazu@amazon.com>|Khaled Yakdan <yakdan@code-intelligence.de>|AdamKorcz <Adam@adalogics.com>|Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
 github.com/Microsoft/go-winio/pkg/bindfilter: Copyright (c) 2015 Microsoft
@@ -389,4 +389,4 @@ github.com/transparency-dev/merkle/proof:
 - Copyright 2022 Google LLC. All Rights Reserved.
 github.com/transparency-dev/merkle/rfc6962: Copyright 2016 Google LLC. All Rights Reserved.
 
-gopkg.in/go-jose/go-jose.v2: Copyright 2014 Square Inc.
\ No newline at end of file
+gopkg.in/go-jose/go-jose.v2: Copyright 2014 Square Inc.
diff --git a/.deva/version b/.deva/version
new file mode 100644
index 0000000000000..17b2ccd9bf905
--- /dev/null
+++ b/.deva/version
@@ -0,0 +1 @@
+0.4.3
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 4a36139da9e6d..beae2f708a3bf 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -288,7 +288,7 @@
 /omnibus/config/software/snmp-traps.rb                    @DataDog/ndm-core
 /omnibus/resources/*/msi/                                 @DataDog/windows-agent
 
-# The following is managed by `inv lint-components` -- DO NOT EDIT
+# The following is managed by `deva inv lint-components` -- DO NOT EDIT
 # BEGIN COMPONENTS
 /comp @DataDog/agent-runtimes
 /comp/agent @DataDog/agent-runtimes
diff --git a/.github/actions/install-deva/action.yml b/.github/actions/install-deva/action.yml
new file mode 100644
index 0000000000000..34c7416ed5093
--- /dev/null
+++ b/.github/actions/install-deva/action.yml
@@ -0,0 +1,25 @@
+name: Install deva
+description: Installs the defined version of deva
+inputs:
+  version:
+    description: The version of deva to install
+    required: false
+    default: ""
+  features:
+    description: A space-separated list of features to install
+    required: false
+    default: ""
+
+runs:
+  using: composite
+  steps:
+  - name: Set version
+    id: set-version
+    run: echo "version=$(cat .deva/version)" >> $GITHUB_OUTPUT
+    shell: bash
+
+  - name: Install deva
+    uses: DataDog/datadog-agent-dev@5ba7488629dc306a7002cda678ea46db39e54a17
+    with:
+      version: ${{ inputs.version || steps.set-version.outputs.version }}
+      features: ${{ inputs.features }}
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index c90f579c43877..952bc2f8b63f7 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -18,7 +18,7 @@ updates:
       - dependency-name: github.com/DataDog/datadog-agent/*
       # Ignore golang.org/x/... deps to avoid noise, they are updated together, pretty regularly
       - dependency-name: golang.org/x/*
-      # OpenTelemetry collector packages need to be updated with inv rather than dependabot
+      # OpenTelemetry collector packages need to be updated with `deva inv` rather than dependabot
       - dependency-name: go.opentelemetry.io/collector/*
       - dependency-name: github.com/open-telemetry/opentelemetry-collector-contrib/*
     schedule:
@@ -53,7 +53,7 @@ updates:
       - dependency-name: github.com/mailru/easyjson
       # Ignore golang.org/x/... deps to avoid noise, they are updated together, pretty regularly
       - dependency-name: golang.org/x/*
-      # OpenTelemetry collector packages need to be updated with inv rather than dependabot
+      # OpenTelemetry collector packages need to be updated with `deva inv` rather than dependabot
       - dependency-name: go.opentelemetry.io/collector/*
       - dependency-name: github.com/open-telemetry/opentelemetry-collector-contrib/*
     schedule:
diff --git a/.github/workflows/assess_permissions.yml b/.github/workflows/assess_permissions.yml
index c3bc57e9e8fed..e1368cd2d9963 100644
--- a/.github/workflows/assess_permissions.yml
+++ b/.github/workflows/assess_permissions.yml
@@ -28,14 +28,13 @@ jobs:
                 python-version-file: .python-version
                 cache: "pip"
 
-            - name: Install Python dependencies
-              run: |
-                python -m pip install --upgrade pip
-                pip install -r requirements.txt
-                pip install -r tasks/libs/requirements-github.txt
+            - name: Install deva
+              uses: ./.github/actions/install-deva
+              with:
+                features: legacy-tasks legacy-github
 
             - name: Assess Repository Permissions
               env:
                 GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                 SLACK_DATADOG_AGENT_BOT_TOKEN: ${{ secrets.SLACK_DATADOG_AGENT_BOT_TOKEN }}
-              run: inv -e github.check-permissions --repo ${{ matrix.value }}
+              run: deva inv -e github.check-permissions --repo ${{ matrix.value }}
diff --git a/.github/workflows/assign_issue.yml b/.github/workflows/assign_issue.yml
index 18d287bc5086a..20f505811ffe7 100644
--- a/.github/workflows/assign_issue.yml
+++ b/.github/workflows/assign_issue.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   auto_assign_issue:
     runs-on: ubuntu-latest
-    container: 
+    container:
       image: ghcr.io/datadog/agent-issue-auto-assign:latest
       credentials:
         username: ${{ github.actor }}
@@ -22,10 +22,12 @@ jobs:
     - name: Install dependencies
       # Dependencies are installed at runtime. Otherwise it would create a huge image see https://hub.docker.com/r/pytorch/pytorch/tags
       run: |
-        pip install --upgrade pip && pip install --no-compile --no-cache-dir torch transformers invoke codeowners slack-sdk PyGithub python-gitlab semver
+        pip install --upgrade pip
+        pip install --no-compile --no-cache-dir torch transformers datadog-agent-dev=="$(cat .deva/version)"
+        deva self dep sync -f legacy-tasks
     - name: Assign issue
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         SLACK_DATADOG_AGENT_BOT_TOKEN : ${{ secrets.SLACK_DATADOG_AGENT_BOT_TOKEN }}
       run: |
-        inv -e issue.assign-owner -i ${{ github.event.issue.number }}
+        deva inv -e issue.assign-owner -i ${{ github.event.issue.number }}
diff --git a/.github/workflows/buildimages-update.yml b/.github/workflows/buildimages-update.yml
index 6fc97c57e5167..e38e79d176dd7 100644
--- a/.github/workflows/buildimages-update.yml
+++ b/.github/workflows/buildimages-update.yml
@@ -71,19 +71,20 @@ jobs:
           # in case it's a Go update PR
           go-version: ${{ inputs.go_version }}
 
-      - name: Install python dependencies
-        run: |
-          python3 -m pip install -r requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
 
       - name: Get current Go version
         id: current_go_version
         run: |
-          echo "GO_VERSION=$(inv go-version)" >> $GITHUB_OUTPUT
+          echo "GO_VERSION=$(deva inv go-version)" >> $GITHUB_OUTPUT
 
       - name: Get current buildimage tag
         id: current_buildimage_tag
         run: |
-            echo "BUILDIMAGE_TAG=$(inv buildimages.get-tag)" >> $GITHUB_OUTPUT
+            echo "BUILDIMAGE_TAG=$(deva inv buildimages.get-tag)" >> $GITHUB_OUTPUT
 
       - name: Update buildimages IDs and Go version
         id: update_build_images
@@ -96,10 +97,10 @@ jobs:
           IMAGES_ID: ${{ inputs.images_id }}
         run: |
           if [ "$CURRENT_GO_VERSION" = "$INPUT_GO_VERSION" ]; then
-            inv -e buildimages.update --tag "$IMAGES_ID" "$TEST_VERSION_FLAG"
+            deva inv -e buildimages.update --tag "$IMAGES_ID" "$TEST_VERSION_FLAG"
             echo "MESSAGE=Update buildimages ID to $IMAGES_ID" >> $GITHUB_OUTPUT
           else
-            inv -e update-go --image-tag "$IMAGES_ID" "$TEST_VERSION_FLAG" $INCLUDE_OTEL_MODULES -v "$INPUT_GO_VERSION"
+            deva inv -e update-go --image-tag "$IMAGES_ID" "$TEST_VERSION_FLAG" $INCLUDE_OTEL_MODULES -v "$INPUT_GO_VERSION"
             echo "MESSAGE=Update Go version to $INPUT_GO_VERSION" >> $GITHUB_OUTPUT
           fi
 
@@ -151,7 +152,7 @@ jobs:
           GITHUB_REF: ${{ github.ref }}
         run: |
           # Generate the PR description
-          inv -e buildimages.generate-pr-body \
+          deva inv -e buildimages.generate-pr-body \
           "$CURRENT_BUILDIMAGE_TAG" \
           "$IMAGES_ID" \
           "$CURRENT_GO_VERSION" \
diff --git a/.github/workflows/chase_release_managers.yml b/.github/workflows/chase_release_managers.yml
index bcbdf235ebd18..aee9a43c299bd 100644
--- a/.github/workflows/chase_release_managers.yml
+++ b/.github/workflows/chase_release_managers.yml
@@ -24,10 +24,10 @@ jobs:
       with:
         python-version-file: .python-version
         cache: "pip"
-    - name: Install Python dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install -r requirements.txt -r tasks/libs/requirements-github.txt -r tasks/requirements_release_tasks.txt
+    - name: Install deva
+      uses: ./.github/actions/install-deva
+      with:
+        features: legacy-tasks
     - name: Chase release managers
       env:
         ATLASSIAN_USERNAME : ${{ secrets.ATLASSIAN_USERNAME }}
@@ -35,4 +35,4 @@ jobs:
         SLACK_DATADOG_AGENT_BOT_TOKEN : ${{ secrets.SLACK_DATADOG_AGENT_BOT_TOKEN }}
         VERSION: ${{ github.event.inputs.version }}
       run: |
-        inv -e release.chase-release-managers --version "$VERSION"
+        deva inv -e release.chase-release-managers --version "$VERSION"
diff --git a/.github/workflows/code_review_complexity.yml b/.github/workflows/code_review_complexity.yml
index 1d371046ac55f..277ae78feb34b 100644
--- a/.github/workflows/code_review_complexity.yml
+++ b/.github/workflows/code_review_complexity.yml
@@ -29,10 +29,12 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Check code review complexity
         env:
           PR_NUMBER: ${{ github.event.pull_request.number }}
-        run: inv -e github.assign-codereview-label --pr-id="$PR_NUMBER"
+        run: deva inv -e github.assign-codereview-label --pr-id="$PR_NUMBER"
diff --git a/.github/workflows/collector-generate-and-update.yml b/.github/workflows/collector-generate-and-update.yml
index 684db0a3a9954..5680fbe80b45f 100644
--- a/.github/workflows/collector-generate-and-update.yml
+++ b/.github/workflows/collector-generate-and-update.yml
@@ -26,17 +26,17 @@ jobs:
         with:
           go-version-file: .go-version
 
-      - name: Install Dependencies
-        run: |
-          python3 -m pip install --upgrade pip
-          pip install -r requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
 
       - name: Run Collector Update Script
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          inv -e install-tools
-          inv -e collector.update
-          inv -e collector.generate
-          inv -e generate-licenses
-          inv -e collector.pull-request
+          deva inv -e install-tools
+          deva inv -e collector.update
+          deva inv -e collector.generate
+          deva inv -e generate-licenses
+          deva inv -e collector.pull-request
diff --git a/.github/workflows/create_rc_pr.yml b/.github/workflows/create_rc_pr.yml
index 6571f1937b3d7..44515841bfaa2 100644
--- a/.github/workflows/create_rc_pr.yml
+++ b/.github/workflows/create_rc_pr.yml
@@ -32,12 +32,10 @@ jobs:
                 python-version-file: .python-version
                 cache: "pip"
 
-            - name: Install Python dependencies
-              run: |
-                python -m pip install --upgrade pip
-                pip install -r requirements.txt
-                pip install -r tasks/libs/requirements-github.txt
-                pip install -r tasks/requirements_release_tasks.txt
+            - name: Install deva
+              uses: ./.github/actions/install-deva
+              with:
+                features: legacy-tasks
 
             - name: Check previous agent 6 RC status
               if: ${{ env.IS_AGENT6_RELEASE == 'true' }}
@@ -47,7 +45,7 @@ jobs:
                 DD_APP_KEY: ${{ secrets.DD_APP_KEY }}
                 SLACK_DATADOG_AGENT_CI_WEBHOOK: ${{ secrets.SLACK_DATADOG_AGENT_CI_WEBHOOK }}
               run: |
-                inv -e release.check-previous-agent6-rc
+                deva inv -e release.check-previous-agent6-rc
 
             - name: Determine the release active branches
               id: branches
@@ -55,7 +53,7 @@ jobs:
                 if ${{ env.IS_AGENT6_RELEASE == 'true' }}; then
                   echo "value=[\"$AGENT6_RELEASE_BRANCH\"]" >> $GITHUB_OUTPUT
                 else
-                  echo "value=$(inv release.get-unreleased-release-branches)" >> $GITHUB_OUTPUT
+                  echo "value=$(deva inv release.get-unreleased-release-branches)" >> $GITHUB_OUTPUT
                 fi
 
             - name: Set the warning option
@@ -86,12 +84,10 @@ jobs:
                 python-version-file: .python-version
                 cache: "pip"
 
-            - name: Install Python dependencies
-              run: |
-                python -m pip install --upgrade pip
-                pip install -r requirements.txt
-                pip install -r tasks/libs/requirements-github.txt
-                pip install -r tasks/requirements_release_tasks.txt
+            - name: Install deva
+              uses: ./.github/actions/install-deva
+              with:
+                features: legacy-tasks
 
             - name: Check for changes since last RC
               id: check_for_changes
@@ -103,9 +99,9 @@ jobs:
                 WARNING: ${{ needs.find_release_branches.outputs.warning }}
               run: |
                 if [ -n "${{ needs.find_release_branches.outputs.warning }}" ]; then
-                  echo "CHANGES=$(inv -e release.check-for-changes -r "$MATRIX" "$WARNING")" >> $GITHUB_OUTPUT
+                  echo "CHANGES=$(deva inv -e release.check-for-changes -r "$MATRIX" "$WARNING")" >> $GITHUB_OUTPUT
                 else
-                  echo "CHANGES=$(inv -e release.check-for-changes -r "$MATRIX")" >> $GITHUB_OUTPUT
+                  echo "CHANGES=$(deva inv -e release.check-for-changes -r "$MATRIX")" >> $GITHUB_OUTPUT
                 fi
 
             - name: Check if agent 6 is in qualification phase
@@ -123,7 +119,7 @@ jobs:
                 MATRIX: ${{ matrix.value }}
               run: |
                 if ${{ env.IS_AGENT6_RELEASE == 'true' }}; then
-                  inv -e release.create-rc -r "$MATRIX" --slack-webhook=${{ secrets.AGENT6_RELEASE_SLACK_WEBHOOK }} --patch-version
+                  deva inv -e release.create-rc -r "$MATRIX" --slack-webhook=${{ secrets.AGENT6_RELEASE_SLACK_WEBHOOK }} --patch-version
                 else
-                  inv -e release.create-rc -r "$MATRIX" --slack-webhook=${{ secrets.AGENT_RELEASE_SYNC_SLACK_WEBHOOK }}
+                  deva inv -e release.create-rc -r "$MATRIX" --slack-webhook=${{ secrets.AGENT_RELEASE_SYNC_SLACK_WEBHOOK }}
                 fi
diff --git a/.github/workflows/create_release_schedule.yml b/.github/workflows/create_release_schedule.yml
index c8bcc356d0387..69765db35ec44 100644
--- a/.github/workflows/create_release_schedule.yml
+++ b/.github/workflows/create_release_schedule.yml
@@ -29,10 +29,10 @@ jobs:
       with:
         python-version-file: .python-version
         cache: "pip"
-    - name: Install Python dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install -r requirements.txt -r tasks/libs/requirements-github.txt -r tasks/requirements_release_tasks.txt
+    - name: Install deva
+      uses: ./.github/actions/install-deva
+      with:
+        features: legacy-tasks
     - name: Create release schedule
       env:
         ATLASSIAN_USERNAME : ${{ secrets.ATLASSIAN_USERNAME }}
@@ -40,4 +40,4 @@ jobs:
         INPUT_VERSION: ${{ github.event.inputs.version }}
         CUTOFF_DATE: ${{ github.event.inputs.cutoff_date }}
       run: |
-        inv -e release.create-schedule --version "$INPUT_VERSION" --cutoff-date "$CUTOFF_DATE"
+        deva inv -e release.create-schedule --version "$INPUT_VERSION" --cutoff-date "$CUTOFF_DATE"
diff --git a/.github/workflows/cws-btfhub-sync.yml b/.github/workflows/cws-btfhub-sync.yml
index 49d9d6c02811b..00d26c8f25f81 100644
--- a/.github/workflows/cws-btfhub-sync.yml
+++ b/.github/workflows/cws-btfhub-sync.yml
@@ -65,7 +65,10 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-      - run: pip install -r requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
 
       - name: Install go
         uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
@@ -81,7 +84,7 @@ jobs:
         env:
           ARTIFACT_NAME: ${{ steps.artifact-name.outputs.ARTIFACT_NAME }}
         run: |
-          inv -e security-agent.generate-btfhub-constants --archive-path=./dev/dist/archive --output-path=./"$ARTIFACT_NAME".json
+          deva inv -e security-agent.generate-btfhub-constants --archive-path=./dev/dist/archive --output-path=./"$ARTIFACT_NAME".json
 
       - name: Upload artifact
         uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
@@ -106,7 +109,10 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-      - run: pip install -r requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
 
       - name: Install go
         uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
@@ -122,8 +128,8 @@ jobs:
 
       - name: Combine constants
         run: |
-          inv -e security-agent.combine-btfhub-constants --archive-path=./dev/dist/constants
-          inv -e security-agent.split-btfhub-constants
+          deva inv -e security-agent.combine-btfhub-constants --archive-path=./dev/dist/constants
+          deva inv -e security-agent.split-btfhub-constants
 
       - name: Compute branch name
         id: branch-name
diff --git a/.github/workflows/docs-dev.yml b/.github/workflows/docs-dev.yml
index 2e115c89e08ff..bc8567d3d6e23 100644
--- a/.github/workflows/docs-dev.yml
+++ b/.github/workflows/docs-dev.yml
@@ -36,8 +36,10 @@ jobs:
       with:
         python-version-file: .python-version
 
-    - name: Install dependencies
-      run: pip install -r tasks/requirements.txt
+    - name: Install deva
+      uses: ./.github/actions/install-deva
+      with:
+        features: legacy-tasks
 
     - name: Configure Git for GitHub Actions bot
       run: |
@@ -45,10 +47,10 @@ jobs:
         git config --local user.email 'github-actions[bot]@users.noreply.github.com'
 
     - name: Validate documentation
-      run: invoke docs.build --validate
+      run: deva inv docs.build --validate
 
     - name: Build documentation
-      run: invoke docs.build
+      run: deva inv docs.build
 
     - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
diff --git a/.github/workflows/external-contributor.yml b/.github/workflows/external-contributor.yml
index 88e6aec370cd9..002fb10d0d352 100644
--- a/.github/workflows/external-contributor.yml
+++ b/.github/workflows/external-contributor.yml
@@ -27,12 +27,14 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Set label on external contributor PRs
         run: |
-          inv -e github.handle-community-pr --repo="$GH_REPO" --pr-id="$NUMBER" --labels="$LABELS"
+          deva inv -e github.handle-community-pr --repo="$GH_REPO" --pr-id="$NUMBER" --labels="$LABELS"
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/go_mod_tidy.yml b/.github/workflows/go_mod_tidy.yml
index 5cf95e13d5070..c226ec22ce38d 100644
--- a/.github/workflows/go_mod_tidy.yml
+++ b/.github/workflows/go_mod_tidy.yml
@@ -23,18 +23,20 @@ jobs:
         with:
           python-version-file: .python-version
           cache: "pip"
-      - name: Install python requirements.txt
-        run: python3 -m pip install -r requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Go mod tidy
-        run: inv -e tidy
+        run: deva inv -e tidy
       - name: Update LICENSE-3rdparty.csv
         if: ${{ !contains(github.event.pull_request.labels.*.name, 'dependencies-go-tools') }}
         run: |
-          inv -e install-tools
-          inv -e generate-licenses
+          deva inv -e install-tools
+          deva inv -e generate-licenses
       - name: Update mocks
         if: ${{ !contains(github.event.pull_request.labels.*.name, 'dependencies-go-tools') }}
-        run: inv -e security-agent.gen-mocks # generate both security agent and process mocks
+        run: deva inv -e security-agent.gen-mocks # generate both security agent and process mocks
       - uses: stefanzweifel/git-auto-commit-action@e348103e9026cc0eee72ae06630dbe30c8bf7a79 # v5.1.0
         id: autocommit
         with:
diff --git a/.github/workflows/label-analysis.yml b/.github/workflows/label-analysis.yml
index 50a88ddcbdf76..68eaaf7cd9b7b 100644
--- a/.github/workflows/label-analysis.yml
+++ b/.github/workflows/label-analysis.yml
@@ -31,13 +31,15 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Auto assign team label
         env:
           PR_ID: ${{ github.event.pull_request.number }}
-        run: inv -e github.assign-team-label --pr-id="$PR_ID"
+        run: deva inv -e github.assign-team-label --pr-id="$PR_ID"
   release-note-check:
     if: github.triggering_actor != 'dd-devflow[bot]'
     runs-on: ubuntu-latest
@@ -52,14 +54,16 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Check release note
         env:
           BRANCH_NAME: ${{ github.head_ref }}
           PR_ID: ${{ github.event.pull_request.number }}
-        run: inv -e linter.releasenote
+        run: deva inv -e linter.releasenote
   fetch-labels:
     needs: assign-team-label
     if: github.triggering_actor != 'dd-devflow[bot]'
@@ -111,14 +115,16 @@ jobs:
         with:
           python-version-file: .python-version
           cache: "pip"
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install python dependencies
-        run: pip3 install -r requirements.txt
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Check qa/[done|no-code-change] labels are not set together
         env:
           LABELS: ${{ needs.fetch-labels.outputs.LABELS}}
         run: |
-          inv -e github.check-qa-labels --labels "${LABELS[@]}"
+          deva inv -e github.check-qa-labels --labels "${LABELS[@]}"
 
   agenttelemetry-list-change-ack-check:
     if: github.triggering_actor != 'dd-devflow[bot]'
@@ -133,11 +139,13 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Check agent telemetry metric list
-        run: inv -e github.agenttelemetry-list-change-ack-check --pr-id=${{ github.event.pull_request.number }}
+        run: deva inv -e github.agenttelemetry-list-change-ack-check --pr-id=${{ github.event.pull_request.number }}
 
   ask-reviews:
     if: github.triggering_actor != 'dd-devflow[bot]' && github.event.action == 'labeled' && github.event.label.name == 'ask-review'
@@ -152,10 +160,12 @@ jobs:
         with:
           python-version-file: .python-version
           cache: 'pip'
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt --break-system-packages
+          cache-dependency-path: '.deva/version'
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Ask for code reviews
         env:
           SLACK_DATADOG_AGENT_BOT_TOKEN : ${{ secrets.SLACK_DATADOG_AGENT_BOT_TOKEN }}
-        run: inv -e issue.ask-reviews -p ${{ github.event.pull_request.number }}
+        run: deva inv -e issue.ask-reviews -p ${{ github.event.pull_request.number }}
diff --git a/.github/workflows/report-merged-pr.yml b/.github/workflows/report-merged-pr.yml
index bb6e1b2197a94..90008a967a484 100644
--- a/.github/workflows/report-merged-pr.yml
+++ b/.github/workflows/report-merged-pr.yml
@@ -29,13 +29,15 @@ jobs:
         with:
           python-version-file: .python-version
           cache: "pip"
-          cache-dependency-path: '**/requirements*.txt'
+          cache-dependency-path: '.deva/version'
 
-      - name: Install python dependencies
-        run: pip3 install -r requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
 
       - name: Send merge event to Datadog
         env:
           PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
-          invoke -e github.pr-merge-dd-event-sender -p "$PR_NUMBER"
+          deva inv -e github.pr-merge-dd-event-sender -p "$PR_NUMBER"
diff --git a/.github/workflows/update_dependencies.yml b/.github/workflows/update_dependencies.yml
index a5546d9bf4ec7..d20a7c5ab5e97 100644
--- a/.github/workflows/update_dependencies.yml
+++ b/.github/workflows/update_dependencies.yml
@@ -33,8 +33,10 @@ jobs:
       - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
         with:
           cache: "pip"
-      - name: Install dependencies
-        run: pip install -r requirements.txt -r tasks/requirements.txt
+      - name: Install deva
+        uses: ./.github/actions/install-deva
+        with:
+          features: legacy-tasks
       - name: Update every golang.org/x/... package
         run: |
           go get -u golang.org/x/arch golang.org/x/crypto \
@@ -46,8 +48,8 @@ jobs:
                     golang.org/x/exp
           # run tidy twice because the first one doesn't always clean everything
           # depending on module order
-          inv -e tidy
-          inv -e tidy
+          deva inv -e tidy
+          deva inv -e tidy
       - uses: stefanzweifel/git-auto-commit-action@e348103e9026cc0eee72ae06630dbe30c8bf7a79 # v5.1.0
         id: autocommit
         with:
diff --git a/.gitlab/.pre/cancel-prev-pipelines.yml b/.gitlab/.pre/cancel-prev-pipelines.yml
index ab2f55afd4596..e5b30d2c237e0 100644
--- a/.gitlab/.pre/cancel-prev-pipelines.yml
+++ b/.gitlab/.pre/cancel-prev-pipelines.yml
@@ -15,4 +15,4 @@ cancel-prev-pipelines:
     - when: on_success
   script:
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN write_api) || exit $?; export GITLAB_TOKEN
-    - inv pipeline.auto-cancel-previous-pipelines
+    - deva inv pipeline.auto-cancel-previous-pipelines
diff --git a/.gitlab/.pre/create_release_qa_cards.yml b/.gitlab/.pre/create_release_qa_cards.yml
index 5bc59073212a2..c6b4ef0c178db 100644
--- a/.gitlab/.pre/create_release_qa_cards.yml
+++ b/.gitlab/.pre/create_release_qa_cards.yml
@@ -10,8 +10,8 @@ create_release_qa_cards:
     - ATLASSIAN_PASSWORD=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $ATLASSIAN_WRITE token) || exit $?; export ATLASSIAN_PASSWORD
     - ATLASSIAN_USERNAME=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $ATLASSIAN_WRITE user) || exit $?; export ATLASSIAN_USERNAME
     # Python 3.12 changes default behavior how packages are installed.
-    # In particular, --break-system-packages command line option is 
+    # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
     - pip install ddqa --break-system-packages
-    - inv release.create-qa-cards -t ${CI_COMMIT_REF_NAME}
+    - deva inv release.create-qa-cards -t ${CI_COMMIT_REF_NAME}
   allow_failure: true
diff --git a/.gitlab/.pre/gitlab_configuration.yml b/.gitlab/.pre/gitlab_configuration.yml
index 10ea5a2d3817c..ea210df11ee92 100644
--- a/.gitlab/.pre/gitlab_configuration.yml
+++ b/.gitlab/.pre/gitlab_configuration.yml
@@ -7,10 +7,10 @@ test_gitlab_configuration:
     - !reference [.on_gitlab_changes]
   script:
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN write_api) || exit $?; export GITLAB_TOKEN
-    - inv -e linter.gitlab-ci
-    - inv -e linter.job-change-path
-    - inv -e linter.gitlab-change-paths
-    - inv -e linter.ssm-parameters
+    - deva inv -e linter.gitlab-ci
+    - deva inv -e linter.job-change-path
+    - deva inv -e linter.gitlab-change-paths
+    - deva inv -e linter.ssm-parameters
 
 test_gitlab_compare_to:
   stage: .pre
@@ -25,8 +25,9 @@ test_gitlab_compare_to:
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - pip install -r tasks/requirements.txt --break-system-packages
-    - inv pipeline.compare-to-itself
+    - pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - deva self dep sync -f legacy-tasks
+    - deva inv pipeline.compare-to-itself
 
 # Computes and uploads the GitLab CI configuration diff as an artifact
 compute_gitlab_ci_config:
@@ -42,7 +43,7 @@ compute_gitlab_ci_config:
   script:
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN write_api) || exit $?; export GITLAB_TOKEN
     - mkdir -p artifacts
-    - inv -e gitlab.compute-gitlab-ci-config --before-file artifacts/before.gitlab-ci.yml --after-file artifacts/after.gitlab-ci.yml --diff-file artifacts/diff.gitlab-ci.yml
+    - deva inv -e gitlab.compute-gitlab-ci-config --before-file artifacts/before.gitlab-ci.yml --after-file artifacts/after.gitlab-ci.yml --diff-file artifacts/diff.gitlab-ci.yml
   artifacts:
     when: always
     paths:
@@ -56,8 +57,8 @@ lint_gitlab_ci:
   needs: [compute_gitlab_ci_config]
   script:
     - status=0
-    - inv -e linter.gitlab-ci-jobs-needs-rules --config-file artifacts/after.gitlab-ci.yml || status=1
-    - inv -e linter.gitlab-ci-jobs-owners --config-file artifacts/after.gitlab-ci.yml || status=1
+    - deva inv -e linter.gitlab-ci-jobs-needs-rules --config-file artifacts/after.gitlab-ci.yml || status=1
+    - deva inv -e linter.gitlab-ci-jobs-owners --config-file artifacts/after.gitlab-ci.yml || status=1
     - |
       if [ $status != 0 ]; then
         echo "At least one linter failed, exiting..." >& 2
@@ -70,4 +71,4 @@ lint_gitlab_ci_jobs_codeowners:
   tags: ["arch:arm64"]
   needs: []
   script:
-    - inv -e linter.gitlab-ci-jobs-codeowners --all-files
+    - deva inv -e linter.gitlab-ci-jobs-codeowners --all-files
diff --git a/.gitlab/benchmarks/benchmarks.yml b/.gitlab/benchmarks/benchmarks.yml
index f93c20016900d..3b4323c1aaebb 100644
--- a/.gitlab/benchmarks/benchmarks.yml
+++ b/.gitlab/benchmarks/benchmarks.yml
@@ -10,7 +10,8 @@ benchmark:
   tags: ["team:apm-k8s-tweaked-metal-datadog-agent", "specific:true"]
   script:
     - export ARTIFACTS_DIR="$(pwd)/artifacts" && mkdir -p $ARTIFACTS_DIR
-    - pip install -r requirements.txt
+    - pip install datadog-agent-dev=="$(cat .deva/version)"
+    - deva self dep sync -f legacy-tasks
     - ./test/benchmarks/apm_scripts/capture-hardware-software-info.sh
     - ./test/benchmarks/apm_scripts/run-benchmarks.sh
     - ./test/benchmarks/apm_scripts/analyze-results.sh
diff --git a/.gitlab/binary_build/cluster_agent.yml b/.gitlab/binary_build/cluster_agent.yml
index 8362d1e6e72a1..77223d3be087f 100644
--- a/.gitlab/binary_build/cluster_agent.yml
+++ b/.gitlab/binary_build/cluster_agent.yml
@@ -7,8 +7,8 @@
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e cluster-agent.build --release-version "$RELEASE_VERSION_7"
+    - deva inv check-go-version
+    - deva inv -e cluster-agent.build --release-version "$RELEASE_VERSION_7"
   artifacts:
     paths:
       - $CLUSTER_AGENT_BINARIES_DIR/datadog-cluster-agent
diff --git a/.gitlab/binary_build/cluster_agent_cloudfoundry.yml b/.gitlab/binary_build/cluster_agent_cloudfoundry.yml
index 1bfce1afa4923..4de39de475c87 100644
--- a/.gitlab/binary_build/cluster_agent_cloudfoundry.yml
+++ b/.gitlab/binary_build/cluster_agent_cloudfoundry.yml
@@ -17,9 +17,9 @@ cluster_agent_cloudfoundry-build_amd64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e cluster-agent-cloudfoundry.build
+    - deva inv check-go-version
+    - deva inv -e cluster-agent-cloudfoundry.build
     - cd $CI_PROJECT_DIR/$CLUSTER_AGENT_CLOUDFOUNDRY_BINARIES_DIR
     - mkdir -p $OMNIBUS_PACKAGE_DIR
-    - PACKAGE_VERSION=$(inv agent.version --url-safe) || exit $?
+    - PACKAGE_VERSION=$(deva inv agent.version --url-safe) || exit $?
     - tar cf $OMNIBUS_PACKAGE_DIR/datadog-cluster-agent-cloudfoundry-$PACKAGE_VERSION-$ARCH.tar.xz datadog-cluster-agent-cloudfoundry
diff --git a/.gitlab/binary_build/cws_instrumentation.yml b/.gitlab/binary_build/cws_instrumentation.yml
index 40a89abaab900..aeb7bba4480d1 100644
--- a/.gitlab/binary_build/cws_instrumentation.yml
+++ b/.gitlab/binary_build/cws_instrumentation.yml
@@ -3,8 +3,8 @@
   stage: binary_build
   needs: ["go_mod_tidy_check"]
   script:
-    - inv check-go-version
-    - inv -e cws-instrumentation.build --arch-suffix
+    - deva inv check-go-version
+    - deva inv -e cws-instrumentation.build --arch-suffix
   artifacts:
     paths:
       - $CWS_INSTRUMENTATION_BINARIES_DIR/cws-instrumentation.$ARCH
diff --git a/.gitlab/binary_build/fakeintake.yml b/.gitlab/binary_build/fakeintake.yml
index 01f751199274d..fe9fb4e0f1796 100644
--- a/.gitlab/binary_build/fakeintake.yml
+++ b/.gitlab/binary_build/fakeintake.yml
@@ -8,5 +8,4 @@ build_fakeintake:
   image: registry.ddbuild.io/ci/datadog-agent-buildimages/deb_x64$DATADOG_AGENT_BUILDIMAGES_SUFFIX:$DATADOG_AGENT_BUILDIMAGES
   tags: ["arch:amd64"]
   script:
-    - inv fakeintake.build
-
+    - deva inv fakeintake.build
diff --git a/.gitlab/binary_build/linux.yml b/.gitlab/binary_build/linux.yml
index 6973d6b9d4517..5cb7752ccec79 100644
--- a/.gitlab/binary_build/linux.yml
+++ b/.gitlab/binary_build/linux.yml
@@ -9,8 +9,8 @@ build_dogstatsd_static-binary_x64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e dogstatsd.build --static
+    - deva inv check-go-version
+    - deva inv -e dogstatsd.build --static
     - $S3_CP_CMD $CI_PROJECT_DIR/$STATIC_BINARIES_DIR/dogstatsd $S3_ARTIFACTS_URI/static/dogstatsd.$ARCH
 
 build_dogstatsd_static-binary_arm64:
@@ -26,8 +26,8 @@ build_dogstatsd_static-binary_arm64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e dogstatsd.build --static
+    - deva inv check-go-version
+    - deva inv -e dogstatsd.build --static
     - $S3_CP_CMD $CI_PROJECT_DIR/$STATIC_BINARIES_DIR/dogstatsd $S3_ARTIFACTS_URI/static/dogstatsd.$ARCH
 
 build_dogstatsd-binary_x64:
@@ -41,8 +41,8 @@ build_dogstatsd-binary_x64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e dogstatsd.build
+    - deva inv check-go-version
+    - deva inv -e dogstatsd.build
     - $S3_CP_CMD $CI_PROJECT_DIR/$DOGSTATSD_BINARIES_DIR/dogstatsd $S3_ARTIFACTS_URI/dogstatsd/dogstatsd
 
 build_dogstatsd-binary_arm64:
@@ -58,8 +58,8 @@ build_dogstatsd-binary_arm64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e dogstatsd.build
+    - deva inv check-go-version
+    - deva inv -e dogstatsd.build
     - $S3_CP_CMD $CI_PROJECT_DIR/$DOGSTATSD_BINARIES_DIR/dogstatsd $S3_ARTIFACTS_URI/dogstatsd/dogstatsd.$ARCH
 
 # IoT Agent builds to make sure the build is not broken because of build flags
@@ -76,8 +76,8 @@ build_iot_agent-binary_x64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e agent.build --flavor iot
+    - deva inv check-go-version
+    - deva inv -e agent.build --flavor iot
     - $S3_CP_CMD $CI_PROJECT_DIR/$AGENT_BINARIES_DIR/agent $S3_ARTIFACTS_URI/iot/agent
 
 build_iot_agent-binary_arm64:
@@ -92,6 +92,5 @@ build_iot_agent-binary_arm64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
-    - inv -e agent.build --flavor iot
-
+    - deva inv check-go-version
+    - deva inv -e agent.build --flavor iot
diff --git a/.gitlab/binary_build/otel_agent.yml b/.gitlab/binary_build/otel_agent.yml
index ca44c46fd78c7..0d7e3acf19721 100644
--- a/.gitlab/binary_build/otel_agent.yml
+++ b/.gitlab/binary_build/otel_agent.yml
@@ -7,7 +7,7 @@
     - when: on_success
   script:
     - !reference [.retrieve_linux_go_deps]
-    - inv -e otel-agent.build
+    - deva inv -e otel-agent.build
   needs: ["go_deps"]
   variables:
     KUBERNETES_MEMORY_REQUEST: "16Gi"
diff --git a/.gitlab/binary_build/serverless.yml b/.gitlab/binary_build/serverless.yml
index 392d20d94b45f..3291c6b51db4d 100644
--- a/.gitlab/binary_build/serverless.yml
+++ b/.gitlab/binary_build/serverless.yml
@@ -7,7 +7,7 @@
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv check-go-version
+    - deva inv check-go-version
     - cd cmd/serverless && go build -ldflags="-w -s" -a -v -tags "serverless otlp" -o $BINARY_NAME
 
 build_serverless-deb_x64:
diff --git a/.gitlab/binary_build/system_probe.yml b/.gitlab/binary_build/system_probe.yml
index dc7ffc511b4aa..97b238ea22ab3 100644
--- a/.gitlab/binary_build/system_probe.yml
+++ b/.gitlab/binary_build/system_probe.yml
@@ -11,9 +11,9 @@
     - find "$CI_BUILDS_DIR" ! -path '*DataDog/datadog-agent*' -depth  # -delete implies -depth
     - find "$CI_BUILDS_DIR" ! -path '*DataDog/datadog-agent*' -delete || true  # Allow failure, we can't remove parent folders of datadog-agent
   script:
-    - inv check-go-version
-    - inv -e system-probe.build-object-files --strip-object-files
-    - inv -e system-probe.save-build-outputs $CI_PROJECT_DIR/sysprobe-build-outputs.tar.xz
+    - deva inv check-go-version
+    - deva inv -e system-probe.build-object-files --strip-object-files
+    - deva inv -e system-probe.save-build-outputs $CI_PROJECT_DIR/sysprobe-build-outputs.tar.xz
   variables:
     KUBERNETES_MEMORY_REQUEST: "6Gi"
     KUBERNETES_MEMORY_LIMIT: "12Gi"
diff --git a/.gitlab/check_merge/do_not_merge.yml b/.gitlab/check_merge/do_not_merge.yml
index 214e051a7d00e..579140d993aef 100644
--- a/.gitlab/check_merge/do_not_merge.yml
+++ b/.gitlab/check_merge/do_not_merge.yml
@@ -22,5 +22,5 @@ do-not-merge:
             echo "This workflow fails so that the pull request cannot be merged"
             exit 1
           fi
-      - inv -e release.check-omnibus-branches --no-worktree || exit 1
+      - deva inv -e release.check-omnibus-branches --no-worktree || exit 1
       - exit 0
diff --git a/.gitlab/common/container_publish_job_templates.yml b/.gitlab/common/container_publish_job_templates.yml
index 600b32655894b..cc1ec39a46d13 100644
--- a/.gitlab/common/container_publish_job_templates.yml
+++ b/.gitlab/common/container_publish_job_templates.yml
@@ -22,7 +22,7 @@
       fi
     - IMG_VARIABLES="$(sed -E "s#(${SRC_AGENT}|${SRC_DSD}|${SRC_DCA}|${SRC_CWS_INSTRUMENTATION})#\1${ECR_RELEASE_SUFFIX}#g" <<<"$IMG_VARIABLES")"
     - IMG_SOURCES="$(sed -E "s#(${SRC_AGENT}|${SRC_DSD}|${SRC_DCA}|${SRC_CWS_INSTRUMENTATION})#\1${ECR_RELEASE_SUFFIX}#g" <<<"$IMG_SOURCES")"
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/public-images --git-ref main --timeout 1800
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/public-images --git-ref main --timeout 1800
       --variable IMG_VARIABLES
       --variable IMG_REGISTRIES
       --variable IMG_SOURCES
diff --git a/.gitlab/common/macos.yml b/.gitlab/common/macos.yml
index 5dcf60ab2e130..6abed6f0edc08 100644
--- a/.gitlab/common/macos.yml
+++ b/.gitlab/common/macos.yml
@@ -53,8 +53,9 @@
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r requirements.txt -r tasks/libs/requirements-github.txt --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     - pyenv rehash
-    - inv -e rtloader.make
-    - inv -e rtloader.install
-    - inv -e install-tools
+    - deva inv -e rtloader.make
+    - deva inv -e rtloader.install
+    - deva inv -e install-tools
diff --git a/.gitlab/common/test_infra_version.yml b/.gitlab/common/test_infra_version.yml
index e0d98900b6340..2b59a012c3017 100644
--- a/.gitlab/common/test_infra_version.yml
+++ b/.gitlab/common/test_infra_version.yml
@@ -1,6 +1,6 @@
-# File generated by inv buildimages.update-test-infra-definitions
+# File generated by deva inv buildimages.update-test-infra-definitions
 # Please do not edit this file manually
-# To update the test-infra-definitions version, run `inv buildimages.update-test-infra-definitions --commit-sha <commit_sha>` [--is-dev-image]
+# To update the test-infra-definitions version, run `deva inv buildimages.update-test-infra-definitions --commit-sha <commit_sha>` [--is-dev-image]
 
 
 ---
diff --git a/.gitlab/container_build/docker_linux.yml b/.gitlab/container_build/docker_linux.yml
index e42f7c10d16cb..8abe95c18e061 100644
--- a/.gitlab/container_build/docker_linux.yml
+++ b/.gitlab/container_build/docker_linux.yml
@@ -16,7 +16,7 @@
     - $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $DOCKER_REGISTRY_RO token | docker login --username "$DOCKER_LOGIN" --password-stdin "$DOCKER_REGISTRY_URL"
     - EXIT="${PIPESTATUS[0]}"; if [ $EXIT -ne 0 ]; then echo "Unable to locate credentials needs gitlab runner restart"; exit $EXIT; fi
     # Build image, use target none label to avoid replication
-    - docker buildx build --no-cache --push --pull --platform linux/$ARCH --build-arg CIBUILD=true --build-arg GENERAL_ARTIFACTS_CACHE_BUCKET_URL=${GENERAL_ARTIFACTS_CACHE_BUCKET_URL} $BUILD_ARG --build-arg DD_GIT_REPOSITORY_URL=https://github.com/DataDog/datadog-agent --build-arg DD_GIT_COMMIT_SHA=${CI_COMMIT_SHA} --file $BUILD_CONTEXT/Dockerfile --tag ${TARGET_TAG} --label "org.opencontainers.image.created=$(date --rfc-3339=seconds)" --label "org.opencontainers.image.authors=Datadog <package@datadoghq.com>" --label "org.opencontainers.image.source=https://github.com/DataDog/datadog-agent" --label "org.opencontainers.image.version=$(inv agent.version)" --label "org.opencontainers.image.revision=${CI_COMMIT_SHA}" --label "org.opencontainers.image.vendor=Datadog, Inc." --label "target=none" $BUILD_CONTEXT
+    - docker buildx build --no-cache --push --pull --platform linux/$ARCH --build-arg CIBUILD=true --build-arg GENERAL_ARTIFACTS_CACHE_BUCKET_URL=${GENERAL_ARTIFACTS_CACHE_BUCKET_URL} $BUILD_ARG --build-arg DD_GIT_REPOSITORY_URL=https://github.com/DataDog/datadog-agent --build-arg DD_GIT_COMMIT_SHA=${CI_COMMIT_SHA} --file $BUILD_CONTEXT/Dockerfile --tag ${TARGET_TAG} --label "org.opencontainers.image.created=$(date --rfc-3339=seconds)" --label "org.opencontainers.image.authors=Datadog <package@datadoghq.com>" --label "org.opencontainers.image.source=https://github.com/DataDog/datadog-agent" --label "org.opencontainers.image.version=$(deva inv agent.version)" --label "org.opencontainers.image.revision=${CI_COMMIT_SHA}" --label "org.opencontainers.image.vendor=Datadog, Inc." --label "target=none" $BUILD_CONTEXT
     # Squash image
     - crane flatten -t ${TARGET_TAG} ${TARGET_TAG}
   # Workaround for temporary network failures
diff --git a/.gitlab/deploy_containers/deploy_containers_a7.yml b/.gitlab/deploy_containers/deploy_containers_a7.yml
index a2601485e5e25..7c79a14f47a8b 100644
--- a/.gitlab/deploy_containers/deploy_containers_a7.yml
+++ b/.gitlab/deploy_containers/deploy_containers_a7.yml
@@ -25,7 +25,7 @@ include:
   stage: deploy_containers
   dependencies: []
   before_script:
-    - if [[ "$VERSION" == "" ]]; then VERSION="$(inv agent.version --url-safe --pipeline-id $PARENT_PIPELINE_ID)" || exit $?; fi
+    - if [[ "$VERSION" == "" ]]; then VERSION="$(deva inv agent.version --url-safe --pipeline-id $PARENT_PIPELINE_ID)" || exit $?; fi
     - export IMG_BASE_SRC="${SRC_AGENT}:v${PARENT_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}"
     - export IMG_LINUX_SOURCES="${IMG_BASE_SRC}-7${JMX}-amd64,${IMG_BASE_SRC}-7${JMX}-arm64"
     - export IMG_WINDOWS_SOURCES="${IMG_BASE_SRC}-7${JMX}-win1809${FLAVOR}-amd64,${IMG_BASE_SRC}-7${JMX}-winltsc2022${FLAVOR}-amd64"
@@ -39,7 +39,7 @@ include:
   before_script:
     - OS=$(echo $OS_LTSC_MAPPING | cut -d ':' -f 1)
     - LTSC_VERSION=$(echo $OS_LTSC_MAPPING | cut -d ':' -f 2)
-    - if [[ "$VERSION" == "" ]]; then VERSION="$(inv agent.version --major-version 7 --url-safe --pipeline-id $PARENT_PIPELINE_ID)" || exit $?; fi
+    - if [[ "$VERSION" == "" ]]; then VERSION="$(deva inv agent.version --major-version 7 --url-safe --pipeline-id $PARENT_PIPELINE_ID)" || exit $?; fi
     - IMG_BASE_SRC="${SRC_AGENT}:v${PARENT_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}"
     - export IMG_SOURCES="${IMG_BASE_SRC}-7${JMX}-win${OS}${FLAVOR}-amd64"
     - export IMG_DESTINATIONS="${AGENT_REPOSITORY}:${VERSION}${FLAVOR}-ltsc${LTSC_VERSION}${JMX}"
@@ -75,7 +75,7 @@ include:
   stage: deploy_containers
   dependencies: []
   before_script:
-    - if [[ "$VERSION" == "" ]]; then VERSION="$(inv agent.version --url-safe --pipeline-id $PARENT_PIPELINE_ID)-ot-beta" || exit $?; fi
+    - if [[ "$VERSION" == "" ]]; then VERSION="$(deva inv agent.version --url-safe --pipeline-id $PARENT_PIPELINE_ID)-ot-beta" || exit $?; fi
     - export IMG_SOURCES="${SRC_AGENT}:v${PARENT_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}-7-ot-beta${JMX}-amd64,${SRC_AGENT}:v${PARENT_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}-7-ot-beta${JMX}-arm64"
     - export IMG_DESTINATIONS="${AGENT_REPOSITORY}:${VERSION}${JMX}"
 
@@ -163,7 +163,7 @@ deploy_containers-dogstatsd:
     !reference [.manual_on_deploy_auto_on_rc]
   dependencies: []
   before_script:
-    - VERSION="$(inv agent.version --url-safe --pipeline-id $PARENT_PIPELINE_ID)" || exit $?
+    - VERSION="$(deva inv agent.version --url-safe --pipeline-id $PARENT_PIPELINE_ID)" || exit $?
     - export IMG_SOURCES="${SRC_DSD}:v${PARENT_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}-amd64,${SRC_DSD}:v${PARENT_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}-arm64"
     - export IMG_DESTINATIONS="${DSD_REPOSITORY}:${VERSION}"
 
@@ -314,4 +314,3 @@ deploy_containers_latest-a7-fips:
       - JMX:
           - ""
           - "-jmx"
-
diff --git a/.gitlab/deploy_cws_instrumentation/deploy_cws_instrumentation.yml b/.gitlab/deploy_cws_instrumentation/deploy_cws_instrumentation.yml
index 71c74a817b347..fac976a593f8c 100644
--- a/.gitlab/deploy_cws_instrumentation/deploy_cws_instrumentation.yml
+++ b/.gitlab/deploy_cws_instrumentation/deploy_cws_instrumentation.yml
@@ -15,7 +15,7 @@ include:
     - job: "docker_build_cws_instrumentation_arm64"
       artifacts: false
   before_script:
-    - if [[ "$VERSION" == "" ]]; then VERSION="$(inv agent.version --url-safe)" || exit $?; fi
+    - if [[ "$VERSION" == "" ]]; then VERSION="$(deva inv agent.version --url-safe)" || exit $?; fi
     - if [[ "$CWS_INSTRUMENTATION_REPOSITORY" == "" ]]; then export CWS_INSTRUMENTATION_REPOSITORY="cws-instrumentation"; fi
     - export IMG_BASE_SRC="${SRC_CWS_INSTRUMENTATION}:v${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}"
     - export IMG_SOURCES="${IMG_BASE_SRC}-amd64,${IMG_BASE_SRC}-arm64"
diff --git a/.gitlab/deploy_dca/deploy_dca.yml b/.gitlab/deploy_dca/deploy_dca.yml
index ab02012e6092d..512e7d07c354b 100644
--- a/.gitlab/deploy_dca/deploy_dca.yml
+++ b/.gitlab/deploy_dca/deploy_dca.yml
@@ -15,7 +15,7 @@ include:
     - job: "docker_build_cluster_agent_arm64"
       artifacts: false
   before_script:
-    - if [[ "$VERSION" == "" ]]; then VERSION="$(inv agent.version --url-safe)" || exit $?; fi
+    - if [[ "$VERSION" == "" ]]; then VERSION="$(deva inv agent.version --url-safe)" || exit $?; fi
     - if [[ "$CLUSTER_AGENT_REPOSITORY" == "" ]]; then export CLUSTER_AGENT_REPOSITORY="cluster-agent"; fi
     - export IMG_BASE_SRC="${SRC_DCA}:v${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}"
     - export IMG_SOURCES="${IMG_BASE_SRC}-amd64,${IMG_BASE_SRC}-arm64"
diff --git a/.gitlab/deploy_packages/nix.yml b/.gitlab/deploy_packages/nix.yml
index 314fcb4961fe7..1ea9c095fbc55 100644
--- a/.gitlab/deploy_packages/nix.yml
+++ b/.gitlab/deploy_packages/nix.yml
@@ -168,7 +168,7 @@ deploy_staging_dsd:
   needs: ["build_dogstatsd-binary_x64"]
   script:
     - $S3_CP_CMD $S3_ARTIFACTS_URI/dogstatsd/dogstatsd ./dogstatsd
-    - PACKAGE_VERSION=$(inv agent.version --url-safe) || exit $?
+    - PACKAGE_VERSION=$(deva inv agent.version --url-safe) || exit $?
     - $S3_CP_CMD ./dogstatsd $S3_DSD6_URI/linux/dogstatsd-$PACKAGE_VERSION --grants read=uri=http://acs.amazonaws.com/groups/global/AllUsers full=id=3a6e02b08553fd157ae3fb918945dd1eaae5a1aa818940381ef07a430cf25732
 
 # deploy iot-agent x64 binary to staging bucket
@@ -181,7 +181,7 @@ deploy_staging_iot_agent:
   needs: ["build_iot_agent-binary_x64"]
   script:
     - $S3_CP_CMD $S3_ARTIFACTS_URI/iot/agent ./agent
-    - PACKAGE_VERSION=$(inv agent.version --url-safe) || exit $?
+    - PACKAGE_VERSION=$(deva inv agent.version --url-safe) || exit $?
     - $S3_CP_CMD ./agent $S3_DSD6_URI/linux/iot/agent-$PACKAGE_VERSION --grants read=uri=http://acs.amazonaws.com/groups/global/AllUsers full=id=3a6e02b08553fd157ae3fb918945dd1eaae5a1aa818940381ef07a430cf25732
 
 # Datadog Installer
diff --git a/.gitlab/deploy_packages/oci.yml b/.gitlab/deploy_packages/oci.yml
index 4d8ecadebfdff..9c75a0b59255c 100644
--- a/.gitlab/deploy_packages/oci.yml
+++ b/.gitlab/deploy_packages/oci.yml
@@ -16,7 +16,7 @@ include:
   script:
     - set +x
     - !reference [.retrieve_linux_go_tools_deps]
-    - VERSION="$(inv agent.version --url-safe)-1" || exit $?
+    - VERSION="$(deva inv agent.version --url-safe)-1" || exit $?
     - git config --global url."https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.ddbuild.io/DataDog/".insteadOf "https://github.com/DataDog/"
     - go env -w GOPRIVATE="github.com/DataDog/*"
     - export PATH=$PATH:$(go env GOPATH)/bin
@@ -28,7 +28,7 @@ include:
     - datadog-package replicate-s3 registry.ddbuild.io/ci/remote-updates/${OCI_PRODUCT}:pipeline-${CI_PIPELINE_ID} us-east-1 ${INSTALLER_TESTING_S3_BUCKET} ${S3_PACKAGE} ${VERSION}
     - datadog-package replicate-s3 registry.ddbuild.io/ci/remote-updates/${OCI_PRODUCT}:pipeline-${CI_PIPELINE_ID} us-east-1 ${INSTALLER_TESTING_S3_BUCKET} ${S3_PACKAGE} ${CI_COMMIT_SHA}
     - datadog-package replicate-s3 registry.ddbuild.io/ci/remote-updates/${OCI_PRODUCT}:pipeline-${CI_PIPELINE_ID} us-east-1 ${INSTALLER_TESTING_S3_BUCKET} ${S3_PACKAGE} pipeline-${CI_PIPELINE_ID}
-    # necessary for ddstaging until we deprecate `-dev` packaging 
+    # necessary for ddstaging until we deprecate `-dev` packaging
     - datadog-package replicate-s3 registry.ddbuild.io/ci/remote-updates/${OCI_PRODUCT}:pipeline-${CI_PIPELINE_ID} us-east-1 ${INSTALLER_TESTING_S3_BUCKET} ${S3_STAGING_PACKAGE} ${VERSION}
     - datadog-package replicate-s3 registry.ddbuild.io/ci/remote-updates/${OCI_PRODUCT}:pipeline-${CI_PIPELINE_ID} us-east-1 ${INSTALLER_TESTING_S3_BUCKET} ${S3_STAGING_PACKAGE} ${CI_COMMIT_SHA}
     - datadog-package replicate-s3 registry.ddbuild.io/ci/remote-updates/${OCI_PRODUCT}:pipeline-${CI_PIPELINE_ID} us-east-1 ${INSTALLER_TESTING_S3_BUCKET} ${S3_STAGING_PACKAGE} pipeline-${CI_PIPELINE_ID}
diff --git a/.gitlab/deps_build/deps_build.yml b/.gitlab/deps_build/deps_build.yml
index 0a1722882fa57..31cf6a35c7088 100644
--- a/.gitlab/deps_build/deps_build.yml
+++ b/.gitlab/deps_build/deps_build.yml
@@ -91,6 +91,6 @@ build_processed_btfhub_archive:
   variables:
     KUBERNETES_CPU_REQUEST: 32
   script:
-    - inv -e system-probe.process-btfhub-archive --branch $BTFHUB_ARCHIVE_BRANCH
+    - deva inv -e system-probe.process-btfhub-archive --branch $BTFHUB_ARCHIVE_BRANCH
     - $S3_CP_CMD btfs-x86_64.tar $S3_DD_AGENT_OMNIBUS_BTFS_URI/$BTFHUB_ARCHIVE_BRANCH/btfs-x86_64.tar --grants read=uri=http://acs.amazonaws.com/groups/global/AllUsers
     - $S3_CP_CMD btfs-arm64.tar $S3_DD_AGENT_OMNIBUS_BTFS_URI/$BTFHUB_ARCHIVE_BRANCH/btfs-arm64.tar --grants read=uri=http://acs.amazonaws.com/groups/global/AllUsers
diff --git a/.gitlab/deps_fetch/deps_fetch.yml b/.gitlab/deps_fetch/deps_fetch.yml
index 89c38920434d0..b4ff5436ba04e 100644
--- a/.gitlab/deps_fetch/deps_fetch.yml
+++ b/.gitlab/deps_fetch/deps_fetch.yml
@@ -41,8 +41,8 @@ go_deps:
     # If the cache already contains the dependencies, don't redownload them
     # but still provide the artifact that's expected for the other jobs to run
     - if [ -f modcache.tar.xz  ]; then exit 0; fi
-    - inv -e deps --verbose
-    - inv -e install-tools
+    - deva inv -e deps --verbose
+    - deva inv -e install-tools
     - cd $GOPATH/pkg/mod/cache/ && tar c -I "pxz -T${KUBERNETES_CPU_REQUEST}" -f $CI_PROJECT_DIR/modcache.tar.xz .
   artifacts:
     expire_in: 1 day
@@ -68,7 +68,7 @@ go_tools_deps:
   extends: .cache
   script:
     - if [ -f modcache_tools.tar.xz  ]; then exit 0; fi
-    - inv -e install-tools
+    - deva inv -e install-tools
     # Partial mitigation for #incident-30779. It will cache datadog-packages , but if the upstream version is updated without the key cache changing, the cache will not work until the key cache changes.
     # Long term solution will be to provide the datadog-packages as a binary hosted internally
     - git config --global url."https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.ddbuild.io/DataDog/".insteadOf "https://github.com/DataDog/"
@@ -92,7 +92,7 @@ go_e2e_deps:
   extends: .cache
   script:
     - if [ -f modcache_e2e.tar.xz  ]; then exit 0; fi
-    - inv -e new-e2e-tests.deps
+    - deva inv -e new-e2e-tests.deps
     - cd $GOPATH/pkg/mod/cache/ && tar c -I "pxz -T${KUBERNETES_CPU_REQUEST}" -f $CI_PROJECT_DIR/modcache_e2e.tar.xz .
   artifacts:
     expire_in: 1 day
diff --git a/.gitlab/e2e/e2e.yml b/.gitlab/e2e/e2e.yml
index 93d7dd84b6394..b695cefef3b0d 100644
--- a/.gitlab/e2e/e2e.yml
+++ b/.gitlab/e2e/e2e.yml
@@ -37,7 +37,7 @@
     - $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $E2E_GCP credentials_json > ~/gcp-credentials.json || exit $?
     - export GOOGLE_APPLICATION_CREDENTIALS=~/gcp-credentials.json
     # Generate external links to CI VISIBILITY, used by artifacts:reports:annotations
-    - inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
+    - deva inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
   variables:
     SHOULD_RUN_IN_FLAKES_FINDER: "true"
     KUBERNETES_MEMORY_REQUEST: 12Gi
@@ -59,7 +59,7 @@
     EXTERNAL_LINKS_PATH: external_links_$CI_JOB_ID.json
     E2E_LOGS_PROCESSING_TEST_DEPTH: 1
   script:
-    - inv -e new-e2e-tests.run --targets $TARGETS -c ddagent:imagePullRegistry=669783387624.dkr.ecr.us-east-1.amazonaws.com -c ddagent:imagePullUsername=AWS -c ddagent:imagePullPassword=$(aws ecr get-login-password) --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS} --test-washer --logs-folder=$E2E_OUTPUT_DIR/logs --logs-post-processing --logs-post-processing-test-depth=$E2E_LOGS_PROCESSING_TEST_DEPTH
+    - deva inv -e new-e2e-tests.run --targets $TARGETS -c ddagent:imagePullRegistry=669783387624.dkr.ecr.us-east-1.amazonaws.com -c ddagent:imagePullUsername=AWS -c ddagent:imagePullPassword=$(aws ecr get-login-password) --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS} --test-washer --logs-folder=$E2E_OUTPUT_DIR/logs --logs-post-processing --logs-post-processing-test-depth=$E2E_LOGS_PROCESSING_TEST_DEPTH
   after_script:
     - $CI_PROJECT_DIR/tools/ci/junit_upload.sh
   artifacts:
@@ -502,7 +502,7 @@ new-e2e-installer-windows:
     # Must run before new_e2e_template changes the aws profile
     # Note: this is similar to the WINDOWS_AGENT_VERSION in new-e2e_windows_msi but this job is running cross platforms
     # Note 2: new_e2e_template does not define AGENT_MAJOR_VERSION, so define it as 7 below.
-    - CURRENT_AGENT_VERSION=$(invoke agent.version) || exit $?; export CURRENT_AGENT_VERSION
+    - CURRENT_AGENT_VERSION=$(deva inv agent.version) || exit $?; export CURRENT_AGENT_VERSION
     - export STABLE_AGENT_VERSION_PACKAGE=$(curl --retry 10 --retry-all-errors -sS https://hub.docker.com/v2/namespaces/datadog/repositories/agent-package/tags | jq -r '.results[] | .name' | sort | tail -n 2 | head -n 1)
     - export STABLE_INSTALLER_VERSION_PACKAGE=$(curl --retry 10 --retry-all-errors -sS https://hub.docker.com/v2/namespaces/datadog/repositories/installer-package/tags | jq -r '.results[] | .name' | sort | tail -n 2 | head -n 1)
     - !reference [.new_e2e_template, before_script]
@@ -741,7 +741,7 @@ generate-flakes-finder-pipeline:
     - tests_windows_sysprobe_x64
   tags: ["arch:amd64"]
   script:
-    - inv -e testwasher.generate-flake-finder-pipeline
+    - deva inv -e testwasher.generate-flake-finder-pipeline
   artifacts:
     paths:
       - $CI_PROJECT_DIR/flake-finder-gitlab-ci.yml
@@ -779,7 +779,7 @@ new-e2e-eks-cleanup-on-failure:
     # Use S3 backend
     - PULUMI_CONFIG_PASSPHRASE=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_QA_E2E pulumi_passphrase) || exit $?; export PULUMI_CONFIG_PASSPHRASE
     - pulumi login "s3://dd-pulumi-state?region=us-east-1&awssdk=v2&profile=$AWS_PROFILE"
-    - inv -e new-e2e-tests.cleanup-remote-stacks --stack-regex "ci-init-$CI_PIPELINE_ID.*eks.*" --pulumi-backend=dd-pulumi-state
+    - deva inv -e new-e2e-tests.cleanup-remote-stacks --stack-regex "ci-init-$CI_PIPELINE_ID.*eks.*" --pulumi-backend=dd-pulumi-state
   variables:
     E2E_PUBLIC_KEY_PATH: /tmp/agent-qa-ssh-key.pub
     E2E_PRIVATE_KEY_PATH: /tmp/agent-qa-ssh-key
diff --git a/.gitlab/e2e_install_packages/common.yml b/.gitlab/e2e_install_packages/common.yml
index 965f5c67ce6f8..177c196a2438d 100644
--- a/.gitlab/e2e_install_packages/common.yml
+++ b/.gitlab/e2e_install_packages/common.yml
@@ -32,7 +32,7 @@
         END_MAJOR_VERSION: [7]
   script:
     - DATADOG_AGENT_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $INSTALL_SCRIPT_API_KEY_ORG2 token ) || exit $?; export DATADOG_AGENT_API_KEY
-    - inv -e new-e2e-tests.run --targets $TARGETS --junit-tar "junit-${CI_JOB_ID}.tgz" ${EXTRA_PARAMS} --src-agent-version $START_MAJOR_VERSION --dest-agent-version $END_MAJOR_VERSION --test-washer
+    - deva inv -e new-e2e-tests.run --targets $TARGETS --junit-tar "junit-${CI_JOB_ID}.tgz" ${EXTRA_PARAMS} --src-agent-version $START_MAJOR_VERSION --dest-agent-version $END_MAJOR_VERSION --test-washer
 
 .new-e2e_script_upgrade_persisting_integrations:
   stage: e2e_install_packages
@@ -43,7 +43,7 @@
     E2E_LOGS_PROCESSING_TEST_DEPTH: 2 # We use a single test suite and run all the platforms test as subtest
   script:
     - DATADOG_AGENT_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $INSTALL_SCRIPT_API_KEY_ORG2 token) || exit $?; export DATADOG_AGENT_API_KEY
-    - inv -e new-e2e-tests.run --targets $TARGETS --junit-tar "junit-${CI_JOB_ID}.tgz" ${EXTRA_PARAMS} --src-agent-version 7 --test-washer
+    - deva inv -e new-e2e-tests.run --targets $TARGETS --junit-tar "junit-${CI_JOB_ID}.tgz" ${EXTRA_PARAMS} --src-agent-version 7 --test-washer
 
 .new-e2e_rpm:
   stage: e2e_install_packages
@@ -54,4 +54,4 @@
     E2E_LOGS_PROCESSING_TEST_DEPTH: 2 # We use a single test suite and run all the platforms test as subtest
   script:
     - DATADOG_AGENT_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $INSTALL_SCRIPT_API_KEY_ORG2 token) || exit $?; export DATADOG_AGENT_API_KEY
-    - inv -e new-e2e-tests.run --targets $TARGETS --junit-tar "junit-${CI_JOB_ID}.tgz" ${EXTRA_PARAMS} --test-washer
+    - deva inv -e new-e2e-tests.run --targets $TARGETS --junit-tar "junit-${CI_JOB_ID}.tgz" ${EXTRA_PARAMS} --test-washer
diff --git a/.gitlab/e2e_install_packages/windows.yml b/.gitlab/e2e_install_packages/windows.yml
index a911d61abbfc1..0d24b51b7ac05 100644
--- a/.gitlab/e2e_install_packages/windows.yml
+++ b/.gitlab/e2e_install_packages/windows.yml
@@ -9,11 +9,11 @@
   before_script:
     # WINDOWS_AGENT_VERSION is used to verify the installed agent version
     # Must run before new_e2e_template changes the aws profile
-    - WINDOWS_AGENT_VERSION=$(invoke agent.version) || exit $?; export WINDOWS_AGENT_VERSION
+    - WINDOWS_AGENT_VERSION=$(deva inv agent.version) || exit $?; export WINDOWS_AGENT_VERSION
     - !reference [.new_e2e_template, before_script]
   script:
     # LAST_STABLE_VERSION is used for upgrade test
-    - export LAST_STABLE_VERSION=$(invoke release.get-release-json-value "last_stable::7" --no-worktree)
+    - export LAST_STABLE_VERSION=$(deva inv release.get-release-json-value "last_stable::7" --no-worktree)
     - !reference [.new_e2e_template, script]
 
 .new-e2e_windows_msi:
diff --git a/.gitlab/e2e_pre_test/e2e_pre_test.yml b/.gitlab/e2e_pre_test/e2e_pre_test.yml
index 35af4a004bebe..1f56b4934f00c 100644
--- a/.gitlab/e2e_pre_test/e2e_pre_test.yml
+++ b/.gitlab/e2e_pre_test/e2e_pre_test.yml
@@ -10,7 +10,7 @@ e2e_pre_test:
     - job: publish_fakeintake
       optional: true
   script:
-    - inv -e new-e2e-tests.run --targets ./test-infra-definition --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS} --test-washer
+    - deva inv -e new-e2e-tests.run --targets ./test-infra-definition --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS} --test-washer
   after_script:
     - $CI_PROJECT_DIR/tools/ci/junit_upload.sh
   variables:
diff --git a/.gitlab/functional_test/oracle.yml b/.gitlab/functional_test/oracle.yml
index 571564b4b3e22..299b1b51040ee 100644
--- a/.gitlab/functional_test/oracle.yml
+++ b/.gitlab/functional_test/oracle.yml
@@ -19,4 +19,4 @@ oracle:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv oracle.test
\ No newline at end of file
+    - deva inv oracle.test
diff --git a/.gitlab/functional_test/regression_detector.yml b/.gitlab/functional_test/regression_detector.yml
index e41014c56de96..31ed02eb67448 100644
--- a/.gitlab/functional_test/regression_detector.yml
+++ b/.gitlab/functional_test/regression_detector.yml
@@ -37,7 +37,7 @@ single-machine-performance-regression_detector:
     - mkdir outputs # Also needed for smp job sync step
     # Compute merge base of current commit and `main`
     - git fetch origin
-    - SMP_BASE_BRANCH=$(inv release.get-release-json-value base_branch --no-worktree)
+    - SMP_BASE_BRANCH=$(deva inv release.get-release-json-value base_branch --no-worktree)
     - echo "Looking for merge base for branch ${SMP_BASE_BRANCH}"
     - SMP_MERGE_BASE=$(git merge-base ${CI_COMMIT_SHA} origin/${SMP_BASE_BRANCH})
     - echo "Merge base is ${SMP_MERGE_BASE}"
diff --git a/.gitlab/install_script_testing/install_script_testing.yml b/.gitlab/install_script_testing/install_script_testing.yml
index a05c75e5f5d1c..9c85b83ca1dd4 100644
--- a/.gitlab/install_script_testing/install_script_testing.yml
+++ b/.gitlab/install_script_testing/install_script_testing.yml
@@ -9,7 +9,7 @@ test_install_script:
     - export TESTING_APT_URL=$DEB_TESTING_S3_BUCKET
     - export TESTING_YUM_URL=$RPM_TESTING_S3_BUCKET
     - export TEST_PIPELINE_ID=$CI_PIPELINE_ID
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/agent-linux-install-script --git-ref main --timeout 5400
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/agent-linux-install-script --git-ref main --timeout 5400
       --variable TESTING_APT_URL
       --variable TESTING_YUM_URL
       --variable TEST_PIPELINE_ID"
@@ -17,4 +17,3 @@ test_install_script:
   rules:
     - !reference [.except_no_a7]
     - !reference [.on_deploy]
-
diff --git a/.gitlab/integration_test/dogstatsd.yml b/.gitlab/integration_test/dogstatsd.yml
index d8b7ef4470419..4ebd5477c000e 100644
--- a/.gitlab/integration_test/dogstatsd.yml
+++ b/.gitlab/integration_test/dogstatsd.yml
@@ -11,4 +11,4 @@ dogstatsd_x64_size_test:
     - mkdir -p $STATIC_BINARIES_DIR
     - $S3_CP_CMD $S3_ARTIFACTS_URI/static/dogstatsd.amd64 $STATIC_BINARIES_DIR/dogstatsd
   script:
-    - inv -e dogstatsd.size-test --skip-build
+    - deva inv -e dogstatsd.size-test --skip-build
diff --git a/.gitlab/integration_test/linux.yml b/.gitlab/integration_test/linux.yml
index bbd009004f0a2..6372640c095af 100644
--- a/.gitlab/integration_test/linux.yml
+++ b/.gitlab/integration_test/linux.yml
@@ -25,7 +25,7 @@ agent_integration_tests:
     - export DOCKER_REGISTRY_URL
     # DockerHub login not to be rate-limited during the docker compose
     - echo "$DOCKER_TOKEN" | docker login --username "$DOCKER_USER" --password-stdin "$DOCKER_REGISTRY_URL"
-    - inv -e integration-tests --race --remote-docker
+    - deva inv -e integration-tests --race --remote-docker
 
 docker_integration_tests:
   extends: .integration_tests_deb
@@ -33,8 +33,8 @@ docker_integration_tests:
   # This job is not stable yet because of rate limit issues and micro vms beta status.
   allow_failure: true
   script:
-    - inv -e docker.test
-    - inv -e docker.integration-tests
+    - deva inv -e docker.test
+    - deva inv -e docker.integration-tests
 
 trace_agent_integration_tests:
   extends: .integration_tests_deb
@@ -42,4 +42,4 @@ trace_agent_integration_tests:
   timeout: 50m
   retry: 2
   script:
-    - inv -e integration-tests --race --only="Trace Agent"
+    - deva inv -e integration-tests --race --only="Trace Agent"
diff --git a/.gitlab/integration_test/otel.yml b/.gitlab/integration_test/otel.yml
index 4aaef3d4a6132..e9902544cf055 100644
--- a/.gitlab/integration_test/otel.yml
+++ b/.gitlab/integration_test/otel.yml
@@ -9,9 +9,9 @@ integration_tests_otel:
   needs: ["go_deps"]
   script:
     - !reference [.retrieve_linux_go_deps]
-    - inv check-otel-build
-    - inv check-otel-module-versions
-    - inv otel-agent.integration-test
+    - deva inv check-otel-build
+    - deva inv check-otel-module-versions
+    - deva inv otel-agent.integration-test
   rules:
     - if: $CI_PIPELINE_SOURCE =~ /^schedule.*$/
       when: never
diff --git a/.gitlab/internal_image_deploy/internal_image_deploy.yml b/.gitlab/internal_image_deploy/internal_image_deploy.yml
index 3418e7cb872d5..44588fcb37f7e 100644
--- a/.gitlab/internal_image_deploy/internal_image_deploy.yml
+++ b/.gitlab/internal_image_deploy/internal_image_deploy.yml
@@ -30,7 +30,7 @@ docker_trigger_internal:
         TMPL_SRC_REPO="${TMPL_SRC_REPO}-nightly"
       fi
     - if [ "$BUCKET_BRANCH" = "dev" ]; then RELEASE_TAG="dev-${RELEASE_TAG}-${CI_COMMIT_SHORT_SHA}"; fi
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
       --variable IMAGE_VERSION
       --variable IMAGE_NAME
       --variable RELEASE_TAG
@@ -76,7 +76,7 @@ docker_trigger_internal-fips:
         TMPL_SRC_REPO="${TMPL_SRC_REPO}-nightly"
       fi
     - if [ "$BUCKET_BRANCH" = "dev" ]; then RELEASE_TAG="dev-${RELEASE_TAG}-${CI_COMMIT_SHORT_SHA}"; fi
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
       --variable IMAGE_VERSION
       --variable IMAGE_NAME
       --variable RELEASE_TAG
@@ -122,7 +122,7 @@ docker_trigger_internal-ot:
         TMPL_SRC_REPO="${TMPL_SRC_REPO}-nightly"
       fi
     - if [ "$BUCKET_BRANCH" = "dev" ]; then RELEASE_TAG="dev-${RELEASE_TAG}-${CI_COMMIT_SHORT_SHA}"; fi
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
       --variable IMAGE_VERSION
       --variable IMAGE_NAME
       --variable RELEASE_TAG
@@ -169,7 +169,7 @@ docker_trigger_cluster_agent_internal:
         TMPL_SRC_REPO="${TMPL_SRC_REPO}-nightly"
       fi
     - if [ "$BUCKET_BRANCH" = "dev" ]; then RELEASE_TAG="dev-${RELEASE_TAG}-${CI_COMMIT_SHORT_SHA}"; fi
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/images --git-ref master --timeout 3600
       --variable IMAGE_VERSION
       --variable IMAGE_NAME
       --variable RELEASE_TAG
diff --git a/.gitlab/internal_kubernetes_deploy/internal_kubernetes_deploy.yml b/.gitlab/internal_kubernetes_deploy/internal_kubernetes_deploy.yml
index d50af13dc029c..f13a994d0cfaa 100644
--- a/.gitlab/internal_kubernetes_deploy/internal_kubernetes_deploy.yml
+++ b/.gitlab/internal_kubernetes_deploy/internal_kubernetes_deploy.yml
@@ -50,7 +50,7 @@ internal_kubernetes_deploy_experimental:
     BUNDLE_VERSION_OVERRIDE: "v${CI_PIPELINE_ID}-${CI_COMMIT_SHORT_SHA}"
   script:
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN write_api) || exit $?; export GITLAB_TOKEN
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/k8s-datadog-agent-ops --git-ref main
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/k8s-datadog-agent-ops --git-ref main
         --variable OPTION_AUTOMATIC_ROLLOUT
         --variable EXPLICIT_WORKFLOWS
         --variable OPTION_PRE_SCRIPT
@@ -80,6 +80,7 @@ notify-slack:
   needs: ["internal_kubernetes_deploy_experimental"]
   script:
     - export SDM_JWT=$(vault read -field=token identity/oidc/token/sdm)
-    - python3 -m pip install -r tasks/requirements.txt -r tasks/libs/requirements-notifications.txt
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)"
+    - deva self dep sync -f legacy-tasks -f legacy-notifications
     - SLACK_DATADOG_AGENT_BOT_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $SLACK_AGENT token) || exit $?; export SLACK_DATADOG_AGENT_BOT_TOKEN
-    - inv pipeline.changelog ${CI_COMMIT_SHORT_SHA} || exit $?
+    - deva inv pipeline.changelog ${CI_COMMIT_SHORT_SHA} || exit $?
diff --git a/.gitlab/internal_kubernetes_deploy/rc_kubernetes_deploy.yml b/.gitlab/internal_kubernetes_deploy/rc_kubernetes_deploy.yml
index 14d861983fe24..6817c58afbbeb 100644
--- a/.gitlab/internal_kubernetes_deploy/rc_kubernetes_deploy.yml
+++ b/.gitlab/internal_kubernetes_deploy/rc_kubernetes_deploy.yml
@@ -26,7 +26,7 @@ rc_kubernetes_deploy:
     AGENT_IMAGE_TAG: $CI_COMMIT_REF_NAME
   script:
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN write_api) || exit $?; export GITLAB_TOKEN
-    - "inv pipeline.trigger-child-pipeline --project-name DataDog/k8s-datadog-agent-ops --git-ref main
+    - "deva inv pipeline.trigger-child-pipeline --project-name DataDog/k8s-datadog-agent-ops --git-ref main
       --variable OPTION_AUTOMATIC_ROLLOUT
       --variable EXPLICIT_WORKFLOWS
       --variable OPTION_PRE_SCRIPT
diff --git a/.gitlab/kernel_matrix_testing/common.yml b/.gitlab/kernel_matrix_testing/common.yml
index b3ac2f1379654..aee0242965815 100644
--- a/.gitlab/kernel_matrix_testing/common.yml
+++ b/.gitlab/kernel_matrix_testing/common.yml
@@ -100,7 +100,7 @@
 # - In KMT we change the AWS_PROFILE environment variable, and that might cause the ssm wrapper to fail getting the keys. Export
 #   the DD_API_KEY variable before changing the AWS_PROFILE variable.
 .tag_kmt_ci_job:
-  - inv -e kmt.tag-ci-job
+  - deva inv -e kmt.tag-ci-job
 
 # -- Test dependencies
 
@@ -156,14 +156,14 @@
     - !reference [.retrieve_linux_go_deps]
     - !reference [.kmt_new_profile]
     - !reference [.write_ssh_key_file]
-    - inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH || true
+    - deva inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH || true
   script:
     - echo "s3://dd-pulumi-state?region=us-east-1&awssdk=v2&profile=$AWS_PROFILE" > $STACK_DIR
     - pulumi login $(cat $STACK_DIR | tr -d '\n')
       # Each VM gets 12GB of memory. We have set 8GB as base for the system, and upto 4GB can be used
       # by a ram backed filesystem holding the system-probe test packages
-    - inv -e kmt.gen-config --ci --arch=$ARCH --output-file=$VMCONFIG_FILE --vmconfig-template=$TEST_COMPONENT --memory=12288
-    - inv -e system-probe.start-microvms --provision-instance --provision-microvms --vmconfig=$VMCONFIG_FILE $INSTANCE_TYPE_ARG $AMI_ID_ARG --ssh-key-name=$AWS_EC2_SSH_KEY_NAME --ssh-key-path=$AWS_EC2_SSH_KEY_FILE --infra-env=$INFRA_ENV --stack-name=kernel-matrix-testing-${TEST_COMPONENT}-${ARCH}-${CI_PIPELINE_ID} --run-agent
+    - deva inv -e kmt.gen-config --ci --arch=$ARCH --output-file=$VMCONFIG_FILE --vmconfig-template=$TEST_COMPONENT --memory=12288
+    - deva inv -e system-probe.start-microvms --provision-instance --provision-microvms --vmconfig=$VMCONFIG_FILE $INSTANCE_TYPE_ARG $AMI_ID_ARG --ssh-key-name=$AWS_EC2_SSH_KEY_NAME --ssh-key-path=$AWS_EC2_SSH_KEY_FILE --infra-env=$INFRA_ENV --stack-name=kernel-matrix-testing-${TEST_COMPONENT}-${ARCH}-${CI_PIPELINE_ID} --run-agent
     - jq "." $CI_PROJECT_DIR/stack.output
     - pulumi logout
   after_script:
@@ -216,7 +216,7 @@
     # and Gitlab thinks it can simplify the dependency graph. This leads to a problem where, if any other dependency of the run test
     # jobs fail (e.g., building the system probe tests), the run tests will be skipped, and the cleanup job will run even though the
     # setup_env job hasn't finished. This causes instances to be leftover for more time than necessary.
-    - inv kmt.wait-for-setup-job --pipeline-id $CI_PIPELINE_ID --arch $ARCH --component $TEST_COMPONENT
+    - deva inv kmt.wait-for-setup-job --pipeline-id $CI_PIPELINE_ID --arch $ARCH --component $TEST_COMPONENT
     - aws ec2 describe-instances --filters $FILTER_TEAM $FILTER_MANAGED $FILTER_PIPELINE $FILTER_ARCH $FILTER_INSTANCE_TYPE $FILTER_TEST_COMPONENT --output json --query $QUERY_INSTANCE_IDS | tee -a instance.json
     - cat instance.json | jq -r 'map(.[]) | .[]' | grep -v "null" | xargs --no-run-if-empty -n 1 -t aws ec2 terminate-instances --instance-ids
   after_script:
@@ -257,7 +257,7 @@
     - echo "CI_JOB_ID=${CI_JOB_ID}" >> $DD_AGENT_TESTING_DIR/job_env.txt
     - echo "CI_JOB_NAME=${CI_JOB_NAME}" >> $DD_AGENT_TESTING_DIR/job_env.txt
     - echo "CI_JOB_STAGE=${CI_JOB_STAGE}" >> $DD_AGENT_TESTING_DIR/job_env.txt
-    - inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
+    - deva inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
     - !reference [.define_if_collect_complexity]
   script:
     - INSTANCE_IP=$(jq --exit-status --arg ARCH $ARCH -r '.[$ARCH].ip' $CI_PROJECT_DIR/stack.output)
@@ -270,7 +270,7 @@
       fi
     - MICRO_VM_IP=$(jq --exit-status --arg TAG $TAG --arg ARCH $ARCH --arg TEST_SET $TEST_SET -r '.[$ARCH].microvms | map(select(."vmset-tags"| index($TEST_SET))) | map(select(.tag==$TAG)) | .[].ip' $CI_PROJECT_DIR/stack.output)
     - MICRO_VM_NAME=$(jq --exit-status --arg TAG $TAG --arg ARCH $ARCH --arg TEST_SET $TEST_SET -r '.[$ARCH].microvms | map(select(."vmset-tags"| index($TEST_SET))) | map(select(.tag==$TAG)) | .[].id' $CI_PROJECT_DIR/stack.output)
-    - GO_VERSION=$(inv go-version)
+    - GO_VERSION=$(deva inv go-version)
     - !reference [.setup_ssh_config]
     # ssh into each micro-vm and run initialization script. This script will also run the tests.
     - scp "$DD_AGENT_TESTING_DIR/job_env.txt" "metal_instance:/home/ubuntu/job_env-${ARCH}-${TAG}-${TEST_SET}.txt"
@@ -337,9 +337,12 @@ notify_ebpf_complexity_changes:
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r tasks/kernel_matrix_testing/requirements-ci.txt --break-system-packages # Required for printing the tables
-    - python3 -m pip install -r tasks/libs/requirements-github.txt --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    # TODO: Remove this override once the standard build image supports building system probe
+    - echo "libvirt-python; sys_platform == 'never'" >> /tmp/uv-overrides.txt
+    - export UV_OVERRIDE=/tmp/uv-overrides.txt
+    - python3 -m deva self dep sync -f legacy-tasks -f legacy-kernel-matrix-testing
     - !reference [.setup_agent_github_app]
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN read_api) || exit $?; export GITLAB_TOKEN
   script:
-    - inv -e ebpf.generate-complexity-summary-for-pr
+    - deva inv -e ebpf.generate-complexity-summary-for-pr
diff --git a/.gitlab/kernel_matrix_testing/system_probe.yml b/.gitlab/kernel_matrix_testing/system_probe.yml
index 39f3fe8f3c7b1..c65fdbf9795a9 100644
--- a/.gitlab/kernel_matrix_testing/system_probe.yml
+++ b/.gitlab/kernel_matrix_testing/system_probe.yml
@@ -33,7 +33,7 @@ upload_dependencies_sysprobe_arm64:
     - EXIT="${PIPESTATUS[0]}"; if [ $EXIT -ne 0 ]; then echo "Unable to locate credentials needs gitlab runner restart"; exit $EXIT; fi
     # Pull base images
     - mkdir $KMT_DOCKERS
-    - inv -e system-probe.save-test-dockers --use-crane --output-dir $KMT_DOCKERS --arch $ARCH
+    - deva inv -e system-probe.save-test-dockers --use-crane --output-dir $KMT_DOCKERS --arch $ARCH
   after_script:
     - DD_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_API_KEY_ORG2 token) || exit $?; export DD_API_KEY
     - !reference [.tag_kmt_ci_job]
diff --git a/.gitlab/lint/linux.yml b/.gitlab/lint/linux.yml
index 802e430b468db..84e617a1d3fa4 100644
--- a/.gitlab/lint/linux.yml
+++ b/.gitlab/lint/linux.yml
@@ -10,10 +10,10 @@
   script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e rtloader.make --install-prefix=$CI_PROJECT_DIR/dev
-    - inv -e rtloader.install
-    - inv -e install-tools
-    - inv -e linter.go --cpus $KUBERNETES_CPU_REQUEST --debug $FLAVORS $EXTRA_OPTS
+    - deva inv -e rtloader.make --install-prefix=$CI_PROJECT_DIR/dev
+    - deva inv -e rtloader.install
+    - deva inv -e install-tools
+    - deva inv -e linter.go --cpus $KUBERNETES_CPU_REQUEST --debug $FLAVORS $EXTRA_OPTS
 
 .linux_x64:
   image: registry.ddbuild.io/ci/datadog-agent-buildimages/deb_x64$DATADOG_AGENT_BUILDIMAGES_SUFFIX:$DATADOG_AGENT_BUILDIMAGES
@@ -53,4 +53,3 @@ lint_flavor_heroku_linux-x64:
     - .linux_x64
   variables:
     FLAVORS: '--flavor heroku'
-
diff --git a/.gitlab/lint/macos.yml b/.gitlab/lint/macos.yml
index d4da06b2a518d..eb9d06ae1a70a 100644
--- a/.gitlab/lint/macos.yml
+++ b/.gitlab/lint/macos.yml
@@ -9,7 +9,7 @@ include:
   script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e linter.go --cpus 12 --debug --timeout 60
+    - deva inv -e linter.go --cpus 12 --debug --timeout 60
 
 lint_macos_gitlab_amd64:
   extends: .lint_macos_gitlab
diff --git a/.gitlab/lint/technical_linters.yml b/.gitlab/lint/technical_linters.yml
index b84b1ece24671..8f3185fcd13e8 100644
--- a/.gitlab/lint/technical_linters.yml
+++ b/.gitlab/lint/technical_linters.yml
@@ -10,14 +10,14 @@ lint_licenses:
   script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e install-tools
-    - inv -e lint-licenses
+    - deva inv -e install-tools
+    - deva inv -e lint-licenses
   needs: ["go_tools_deps", "go_deps"]
 
 lint_shell:
   extends: .lint
   script:
-    - inv -e install-shellcheck
+    - deva inv -e install-shellcheck
     - shellcheck --version
     #Excludes:
     #SC2028: echo may not expand escape sequences. Use printf.
@@ -27,36 +27,36 @@ lint_shell:
 lint_filename:
   extends: .lint
   script:
-    - inv -e linter.filenames
+    - deva inv -e linter.filenames
 
 lint_copyrights:
   extends: .lint
   script:
-    - inv -e linter.copyrights
+    - deva inv -e linter.copyrights
 
 lint_codeowners:
   extends: .lint
   script:
-    - inv -e github.lint-codeowner
+    - deva inv -e github.lint-codeowner
 
 lint_components:
   extends: .lint
   script:
-    - inv -e lint-components lint-fxutil-oneshot-test
+    - deva inv -e lint-components lint-fxutil-oneshot-test
 
 
 lint_python:
   extends: .lint
   script:
-    - inv -e linter.python
+    - deva inv -e linter.python
 
 lint_update_go:
   extends: .lint
   script:
-    - inv -e linter.update-go
+    - deva inv -e linter.update-go
 
 validate_modules:
   extends: .lint
   script:
-    - inv -e modules.validate
-    - inv -e modules.validate-used-by-otel
+    - deva inv -e modules.validate
+    - deva inv -e modules.validate-used-by-otel
diff --git a/.gitlab/lint/windows.yml b/.gitlab/lint/windows.yml
index f532e79e2feb6..da31fda47af2c 100644
--- a/.gitlab/lint/windows.yml
+++ b/.gitlab/lint/windows.yml
@@ -20,6 +20,7 @@
       -e CI_PIPELINE_ID=${CI_PIPELINE_ID}
       -e CI_PROJECT_NAME=${CI_PROJECT_NAME}
       -e GOMODCACHE="c:\modcache"
+      -e RUST_LOG="uv=trace"
       ${WINBUILDIMAGE}
       powershell.exe -c "c:\mnt\tasks\winbuildscripts\Invoke-Linters.ps1 -BuildOutOfSource 1 -CheckGoVersion 1 -InstallDeps 1"
     - If ($lastExitCode -ne "0") { throw "Previous command returned $lastExitCode" }
diff --git a/.gitlab/notify/notify.yml b/.gitlab/notify/notify.yml
index 7e456a0330a91..885d2c9a5f4ec 100644
--- a/.gitlab/notify/notify.yml
+++ b/.gitlab/notify/notify.yml
@@ -6,7 +6,8 @@
   - SLACK_DATADOG_AGENT_BOT_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $SLACK_AGENT token) || exit $?; export SLACK_DATADOG_AGENT_BOT_TOKEN
   - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN read_api) || exit $?; export GITLAB_TOKEN
   - DD_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_API_KEY_ORG2 token) || exit $?; export DD_API_KEY
-  - python3 -m pip install -r requirements.txt -r tasks/libs/requirements-notifications.txt
+  - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)"
+  - deva self dep sync -f legacy-tasks -f legacy-notifications
 
 # Notify jobs are allowed to fail but are monitored by https://app.datadoghq.com/monitors/132367692
 .notify-job:
@@ -23,9 +24,10 @@ notify-on-tagged-success:
   script: |
     MESSAGE_TEXT=":host-green: Tagged build <$CI_PIPELINE_URL|$CI_PIPELINE_ID> succeeded.
     *$CI_COMMIT_REF_NAME* is available in the staging repositories."
-    python3 -m pip install -r requirements.txt -r tasks/libs/requirements-notifications.txt
+    python3 -m pip install datadog-agent-dev=="$(cat .deva/version)"
+    deva self dep sync -f legacy-tasks -f legacy-notifications
     SLACK_DATADOG_AGENT_BOT_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $SLACK_AGENT token) || exit $?; export SLACK_DATADOG_AGENT_BOT_TOKEN
-    invoke notify.post-message -c "#agent-release-sync" -m "$MESSAGE_TEXT"
+    deva inv notify.post-message -c "#agent-release-sync" -m "$MESSAGE_TEXT"
 
 notify:
   extends: .notify-job
@@ -38,8 +40,8 @@ notify:
   timeout: 15 minutes # Added to prevent a stuck job blocking the resource_group defined above
   script:
     - !reference [.notify_setup]
-    - invoke -e notify.send-message -p $CI_PIPELINE_ID
-    - invoke -e notify.check-consistent-failures -p $CI_PIPELINE_ID
+    - deva inv -e notify.send-message -p $CI_PIPELINE_ID
+    - deva inv -e notify.check-consistent-failures -p $CI_PIPELINE_ID
 
 send_pipeline_stats:
   extends: .notify-job
@@ -49,7 +51,7 @@ send_pipeline_stats:
   dependencies: []
   script:
     - !reference [.notify_setup]
-    - invoke -e notify.send-stats
+    - deva inv -e notify.send-stats
 
 notify_github:
   extends: .notify-job
@@ -75,14 +77,15 @@ notify_github:
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r tasks/libs/requirements-github.txt --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     - messagefile="$(mktemp)"
     - echo "Use this command from [test-infra-definitions](https://github.com/DataDog/test-infra-definitions) to manually test this PR changes on a VM:" >> "$messagefile"
     - echo '```sh' >> "$messagefile"
-    - echo "inv aws.create-vm --pipeline-id=$CI_PIPELINE_ID --os-family=ubuntu" >> "$messagefile"
+    - echo "deva inv aws.create-vm --pipeline-id=$CI_PIPELINE_ID --os-family=ubuntu" >> "$messagefile"
     - echo '```' >> "$messagefile"
     - 'echo "Note: This applies to commit **$CI_COMMIT_SHORT_SHA**" >> "$messagefile"'
-    - inv -e github.pr-commenter --title "Test changes on VM" --body "$(cat "$messagefile")" --echo
+    - deva inv -e github.pr-commenter --title "Test changes on VM" --body "$(cat "$messagefile")" --echo
     - rm "$messagefile"
 
 notify_gitlab_ci_changes:
@@ -101,9 +104,10 @@ notify_gitlab_ci_changes:
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r tasks/libs/requirements-github.txt --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     - !reference [.setup_agent_github_app]
-    - inv -e notify.gitlab-ci-diff --from-diff artifacts/diff.gitlab-ci.yml --pr-comment
+    - deva inv -e notify.gitlab-ci-diff --from-diff artifacts/diff.gitlab-ci.yml --pr-comment
 
 .failure_summary_job:
   image: registry.ddbuild.io/ci/datadog-agent-buildimages/deb_x64$DATADOG_AGENT_BUILDIMAGES_SUFFIX:$DATADOG_AGENT_BUILDIMAGES
@@ -123,7 +127,7 @@ notify_failure_summary_on_pipeline:
     - !reference [.on_main_always]
   script:
     - !reference [.notify_setup]
-    - inv -e notify.failure-summary-upload-pipeline-data
+    - deva inv -e notify.failure-summary-upload-pipeline-data
 
 # Send failure summary notifications daily and weekly
 notify_failure_summary_daily:
@@ -141,12 +145,12 @@ notify_failure_summary_daily:
         exit
       fi
     # Daily
-    - inv -e notify.failure-summary-send-notifications --daily-summary
+    - deva inv -e notify.failure-summary-send-notifications --daily-summary
     # Send weekly if necessary (note that this workflow is usually triggered early in the morning)
     - |
       if [ "$weekday" = "Friday" ]; then
         echo 'Sending weekly summary'
-        inv -e notify.failure-summary-send-notifications --weekly-summary
+        deva inv -e notify.failure-summary-send-notifications --weekly-summary
       fi
 
 close_failing_tests_stale_issues:
@@ -171,5 +175,6 @@ close_failing_tests_stale_issues:
     - DD_APP_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_APP_KEY_ORG2 token) || exit $?; export DD_APP_KEY
     - ATLASSIAN_PASSWORD=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $ATLASSIAN_WRITE token) || exit $?; export ATLASSIAN_PASSWORD
     - ATLASSIAN_USERNAME=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $ATLASSIAN_WRITE user) || exit $?; export ATLASSIAN_USERNAME
-    - python3 -m pip install -r requirements.txt -r tasks/requirements_release_tasks.txt --break-system-packages # For Atlassian / Jira dependencies
-    - inv -e notify.close-failing-tests-stale-issues
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
+    - deva inv -e notify.close-failing-tests-stale-issues
diff --git a/.gitlab/package_build/dmg.yml b/.gitlab/package_build/dmg.yml
index fd800a910ab65..9bd00e9a03882 100644
--- a/.gitlab/package_build/dmg.yml
+++ b/.gitlab/package_build/dmg.yml
@@ -8,8 +8,9 @@
     - !reference [.setup_macos_github_app]
     - $S3_CP_CMD $S3_ARTIFACTS_URI/agent-version.cache .
     - export VERSION_CACHE_CONTENT=$(cat agent-version.cache | base64 -)
-    - python3 -m pip install -r tasks/libs/requirements-github.txt
-    - inv -e github.trigger-macos --workflow-type "build" --datadog-agent-ref "$CI_COMMIT_SHA" --release-version "$RELEASE_VERSION" --destination "$OMNIBUS_PACKAGE_DIR" --version-cache "$VERSION_CACHE_CONTENT" --integrations-core-ref "$INTEGRATIONS_CORE_VERSION"
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)"
+    - python3 -m deva self dep sync -f legacy-tasks
+    - deva inv -e github.trigger-macos --workflow-type "build" --datadog-agent-ref "$CI_COMMIT_SHA" --release-version "$RELEASE_VERSION" --destination "$OMNIBUS_PACKAGE_DIR" --version-cache "$VERSION_CACHE_CONTENT" --integrations-core-ref "$INTEGRATIONS_CORE_VERSION"
     - !reference [.upload_sbom_artifacts]
   timeout: 3h # MacOS builds can take 1h~2h, increase the timeout to avoid timeout flakes
   artifacts:
diff --git a/.gitlab/package_build/heroku.yml b/.gitlab/package_build/heroku.yml
index 07fa1ad5c77b5..6f2399e839260 100644
--- a/.gitlab/package_build/heroku.yml
+++ b/.gitlab/package_build/heroku.yml
@@ -28,7 +28,7 @@
     - $S3_CP_CMD $S3_PERMANENT_ARTIFACTS_URI/llc-$CLANG_LLVM_VER.${PACKAGE_ARCH} /tmp/system-probe/llc-bpf
     - cp $CI_PROJECT_DIR/minimized-btfs.tar.xz /tmp/system-probe/minimized-btfs.tar.xz
     - chmod 0744 /tmp/system-probe/clang-bpf /tmp/system-probe/llc-bpf
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --flavor heroku
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --flavor heroku
     - ls -la $OMNIBUS_PACKAGE_DIR
     - !reference [.lint_linux_packages]
     - !reference [.upload_sbom_artifacts]
diff --git a/.gitlab/package_build/installer.yml b/.gitlab/package_build/installer.yml
index 5210e76f41957..804b5315f783b 100644
--- a/.gitlab/package_build/installer.yml
+++ b/.gitlab/package_build/installer.yml
@@ -5,7 +5,7 @@
 .common_build_oci:
   script:
     - echo "About to build for $RELEASE_VERSION"
-    - AGENT_VERSION="$(inv agent.version -u)-1" || exit $?
+    - AGENT_VERSION="$(deva inv agent.version -u)-1" || exit $?
     - export INSTALL_DIR=/opt/datadog-packages/datadog-agent/"$AGENT_VERSION"
     - !reference [.retrieve_linux_go_deps]
     - !reference [.cache_omnibus_ruby_deps, setup]
@@ -21,7 +21,7 @@
     - chmod 0744 /tmp/system-probe/clang-bpf /tmp/system-probe/llc-bpf
     # NOTE: for now, we consider "ociru" to be a "redhat_target" in omnibus/lib/ostools.rb
     # if we ever start building on a different platform, that might need to change
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR  ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --host-distribution=ociru --install-directory="$INSTALL_DIR"
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR  ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --host-distribution=ociru --install-directory="$INSTALL_DIR"
     - ls -la $OMNIBUS_PACKAGE_DIR
     - !reference [.upload_sbom_artifacts]
   variables:
@@ -101,13 +101,13 @@ installer-install-scripts:
     RELEASE_VERSION: "$RELEASE_VERSION_7"
   script:
     - !reference [.retrieve_linux_go_deps]
-    - VERSION="$(inv agent.version --url-safe)-1" || exit $?
+    - VERSION="$(deva inv agent.version --url-safe)-1" || exit $?
     - echo "About to build for $VERSION"
     - mkdir -p $OMNIBUS_PACKAGE_DIR
-    - inv -e installer.build-linux-script "default" "$VERSION"
-    - inv -e installer.build-linux-script "databricks" "$VERSION"
-    - inv -e installer.build-linux-script "emr" "$VERSION"
-    - inv -e installer.build-linux-script "dataproc" "$VERSION"
+    - deva inv -e installer.build-linux-script "default" "$VERSION"
+    - deva inv -e installer.build-linux-script "databricks" "$VERSION"
+    - deva inv -e installer.build-linux-script "emr" "$VERSION"
+    - deva inv -e installer.build-linux-script "dataproc" "$VERSION"
     - mv ./bin/installer/install*.sh $OMNIBUS_PACKAGE_DIR/
     - ls -la $OMNIBUS_PACKAGE_DIR
   artifacts:
@@ -148,7 +148,7 @@ powershell_script_signing:
     - rm -rf $OMNIBUS_PACKAGE_DIR/*
     # Artifacts and cache must live within project directory but we run omnibus in a neutral directory.
     # Thus, we move the artifacts at the end in a gitlab-friendly dir.
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --target-project="installer" ${INSTALL_DIR_PARAM}
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --target-project="installer" ${INSTALL_DIR_PARAM}
     - ls -la $OMNIBUS_PACKAGE_DIR
     - !reference [.upload_sbom_artifacts]
   variables:
@@ -202,7 +202,7 @@ installer-amd64-oci:
   variables:
     DESTINATION_FILE: "datadog-updater_7-amd64-oci.tar.xz"
   before_script:
-    - AGENT_VERSION="$(inv agent.version -u)-1" || exit $?
+    - AGENT_VERSION="$(deva inv agent.version -u)-1" || exit $?
     - export INSTALL_DIR=/opt/datadog-packages/datadog-installer/"$AGENT_VERSION"
     - export INSTALL_DIR_PARAM="--install-directory=$INSTALL_DIR"
 
@@ -211,7 +211,7 @@ installer-arm64-oci:
   variables:
     DESTINATION_FILE: "datadog-updater_7-arm64-oci.tar.xz"
   before_script:
-    - AGENT_VERSION="$(inv agent.version -u)-1" || exit $?
+    - AGENT_VERSION="$(deva inv agent.version -u)-1" || exit $?
     - export INSTALL_DIR=/opt/datadog-packages/datadog-installer/"$AGENT_VERSION"
     - export INSTALL_DIR_PARAM="--install-directory=$INSTALL_DIR"
 
diff --git a/.gitlab/package_build/linux.yml b/.gitlab/package_build/linux.yml
index cb7cf752ebb5a..d517f4bd02664 100644
--- a/.gitlab/package_build/linux.yml
+++ b/.gitlab/package_build/linux.yml
@@ -12,7 +12,7 @@
   - $S3_CP_CMD $S3_PERMANENT_ARTIFACTS_URI/llc-$CLANG_LLVM_VER.${PACKAGE_ARCH} /tmp/system-probe/llc-bpf
   - cp $CI_PROJECT_DIR/minimized-btfs.tar.xz /tmp/system-probe/minimized-btfs.tar.xz
   - chmod 0744 /tmp/system-probe/clang-bpf /tmp/system-probe/llc-bpf
-  - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR  ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --flavor "$FLAVOR" --config-directory "$CONFIG_DIR" --install-directory "$INSTALL_DIR"
+  - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR  ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --flavor "$FLAVOR" --config-directory "$CONFIG_DIR" --install-directory "$INSTALL_DIR"
   - ls -la $OMNIBUS_PACKAGE_DIR
   - !reference [.upload_sbom_artifacts]
 
@@ -106,7 +106,7 @@ datadog-agent-7-arm64-fips:
     - !reference [.cache_omnibus_ruby_deps, setup]
     # remove artifacts from previous pipelines that may come from the cache
     - rm -rf $OMNIBUS_PACKAGE_DIR/*
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --flavor iot
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --system-probe-bin=/tmp/system-probe --flavor iot
     - ls -la $OMNIBUS_PACKAGE_DIR
     - !reference [.upload_sbom_artifacts]
   before_script:
@@ -151,7 +151,7 @@ iot-agent-armhf:
     - !reference [.cache_omnibus_ruby_deps, setup]
     # remove artifacts from previous pipelines that may come from the cache
     - rm -rf $OMNIBUS_PACKAGE_DIR/*
-    - inv -e omnibus.build --release-version $RELEASE_VERSION_7 --base-dir $OMNIBUS_BASE_DIR  ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --target-project dogstatsd
+    - deva inv -e omnibus.build --release-version $RELEASE_VERSION_7 --base-dir $OMNIBUS_BASE_DIR  ${USE_S3_CACHING} --skip-deps --go-mod-cache="$GOPATH/pkg/mod" --target-project dogstatsd
     - ls -la $OMNIBUS_PACKAGE_DIR
     - !reference [.upload_sbom_artifacts]
   variables:
diff --git a/.gitlab/package_deps_build/package_deps_build.yml b/.gitlab/package_deps_build/package_deps_build.yml
index 218efb9d8d62e..18dad6a3ec07d 100644
--- a/.gitlab/package_deps_build/package_deps_build.yml
+++ b/.gitlab/package_deps_build/package_deps_build.yml
@@ -27,7 +27,7 @@
     - $S3_CP_CMD $S3_DD_AGENT_OMNIBUS_BTFS_URI/$BTFHUB_ARCHIVE_BRANCH/btfs-$ARCH.tar .
     - tar -xf btfs-$ARCH.tar
     - tar -xf sysprobe-build-outputs.tar.xz
-    - inv -e system-probe.generate-minimized-btfs --source-dir "$CI_PROJECT_DIR/btfs-$ARCH" --output-dir "$CI_PROJECT_DIR/minimized-btfs" --bpf-programs "$CI_PROJECT_DIR/pkg/ebpf/bytecode/build/${ARCH}/co-re"
+    - deva inv -e system-probe.generate-minimized-btfs --source-dir "$CI_PROJECT_DIR/btfs-$ARCH" --output-dir "$CI_PROJECT_DIR/minimized-btfs" --bpf-programs "$CI_PROJECT_DIR/pkg/ebpf/bytecode/build/${ARCH}/co-re"
     - cd minimized-btfs
     - tar -cJf $CI_PROJECT_DIR/minimized-btfs.tar.xz *
     - $S3_CP_CMD $CI_PROJECT_DIR/minimized-btfs.tar.xz $S3_PROJECT_ARTIFACTS_URI/btfs/$MIN_BTFS_FILENAME
diff --git a/.gitlab/packaging/deb.yml b/.gitlab/packaging/deb.yml
index 277897c6060f6..b1e19114ad6f1 100644
--- a/.gitlab/packaging/deb.yml
+++ b/.gitlab/packaging/deb.yml
@@ -5,7 +5,7 @@
     - !reference [.cache_omnibus_ruby_deps, setup]
     - echo "About to package for $RELEASE_VERSION"
     - !reference [.setup_deb_signing_key]
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --target-project ${DD_PROJECT} ${OMNIBUS_EXTRA_ARGS}
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --target-project ${DD_PROJECT} ${OMNIBUS_EXTRA_ARGS}
     - !reference [.lint_linux_packages]
   artifacts:
     expire_in: 2 weeks
@@ -82,7 +82,7 @@ agent_deb-arm64-a7-fips:
     - !reference [.cache_omnibus_ruby_deps, setup]
     - echo "About to package for $RELEASE_VERSION"
     - !reference [.setup_deb_signing_key]
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --target-project ${DD_PROJECT} --flavor ot ${OMNIBUS_EXTRA_ARGS}
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --target-project ${DD_PROJECT} --flavor ot ${OMNIBUS_EXTRA_ARGS}
     - !reference [.lint_linux_packages]
 
 ot_agent_deb-x64-a7:
@@ -135,7 +135,7 @@ installer_deb-arm64:
     - !reference [.cache_omnibus_ruby_deps, setup]
     - echo "About to package for $RELEASE_VERSION"
     - !reference [.setup_deb_signing_key]
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --flavor iot
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --flavor iot
     - !reference [.lint_linux_packages]
   artifacts:
     expire_in: 2 weeks
@@ -187,4 +187,3 @@ dogstatsd_deb-arm64:
   variables:
     DD_PROJECT: dogstatsd
     PACKAGE_REQUIRED_FILES_LIST: "test/required_files/dogstatsd-deb.txt"
-
diff --git a/.gitlab/packaging/oci.yml b/.gitlab/packaging/oci.yml
index e96ece68316fc..2163afe04dea1 100644
--- a/.gitlab/packaging/oci.yml
+++ b/.gitlab/packaging/oci.yml
@@ -6,7 +6,7 @@
   image: registry.ddbuild.io/ci/datadog-agent-buildimages/deb_x64$DATADOG_AGENT_BUILDIMAGES_SUFFIX:$DATADOG_AGENT_BUILDIMAGES
   tags: ["arch:amd64"]
   before_script:
-    - PACKAGE_VERSION="$(inv agent.version --url-safe)-1" || exit $?
+    - PACKAGE_VERSION="$(deva inv agent.version --url-safe)-1" || exit $?
     - export INSTALL_DIR=/opt/datadog-packages/${OCI_PRODUCT}/${PACKAGE_VERSION}
   variables:
     KUBERNETES_CPU_REQUEST: 16
@@ -19,7 +19,8 @@
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r tasks/libs/requirements-github.txt --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     - set +x
     - git config --global url."https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.ddbuild.io/DataDog/".insteadOf "https://github.com/DataDog/"
     - go env -w GOPRIVATE="github.com/DataDog/*"
diff --git a/.gitlab/packaging/rpm.yml b/.gitlab/packaging/rpm.yml
index 2bb7a0bb32015..41d6e6e1451ca 100644
--- a/.gitlab/packaging/rpm.yml
+++ b/.gitlab/packaging/rpm.yml
@@ -11,7 +11,7 @@
     - printf -- "$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $RPM_GPG_KEY)" | gpg --import --batch
     - EXIT="${PIPESTATUS[0]}"; if [ $EXIT -ne 0 ]; then echo "Unable to locate credentials needs gitlab runner restart"; exit $EXIT; fi
     - RPM_SIGNING_PASSPHRASE=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $RPM_SIGNING_PASSPHRASE) || exit $?; export RPM_SIGNING_PASSPHRASE
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --target-project=${DD_PROJECT} ${OMNIBUS_EXTRA_ARGS}
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --target-project=${DD_PROJECT} ${OMNIBUS_EXTRA_ARGS}
     - ls -la $OMNIBUS_PACKAGE_DIR/
     - !reference [.lint_linux_packages]
   stage: packaging
@@ -152,7 +152,7 @@ installer_suse_rpm-arm64:
     - printf -- "$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $RPM_GPG_KEY)" | gpg --import --batch
     - EXIT="${PIPESTATUS[0]}"; if [ $EXIT -ne 0 ]; then echo "Unable to locate credentials needs gitlab runner restart"; exit $EXIT; fi
     - RPM_SIGNING_PASSPHRASE=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $RPM_SIGNING_PASSPHRASE) || exit $?; export RPM_SIGNING_PASSPHRASE
-    - inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --flavor=iot ${OMNIBUS_EXTRA_ARGS}
+    - deva inv -e omnibus.build --release-version "$RELEASE_VERSION" --base-dir $OMNIBUS_BASE_DIR --skip-deps --flavor=iot ${OMNIBUS_EXTRA_ARGS}
     - ls -la $OMNIBUS_PACKAGE_DIR/
     - !reference [.lint_linux_packages]
   stage: packaging
diff --git a/.gitlab/pkg_metrics/pkg_metrics.yml b/.gitlab/pkg_metrics/pkg_metrics.yml
index 5e0e78ee5527f..96a2084e16a3b 100644
--- a/.gitlab/pkg_metrics/pkg_metrics.yml
+++ b/.gitlab/pkg_metrics/pkg_metrics.yml
@@ -54,27 +54,27 @@ send_pkg_size:
     - ls -l $OMNIBUS_PACKAGE_DIR_SUSE
 
     # Agent 7
-    - inv package.send-size --flavor "agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "iot-agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "dogstatsd" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-dogstatsd_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "heroku-agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-heroku-agent_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "iot-agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "dogstatsd" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-dogstatsd_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "heroku-agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-heroku-agent_7*_amd64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
 
-    - inv package.send-size --flavor "agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent_7*_arm64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
-    - inv package.send-size --flavor "iot-agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent_7*_arm64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
-    - inv package.send-size --flavor "dogstatsd" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-dogstatsd_7*_arm64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
+    - deva inv package.send-size --flavor "agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent_7*_arm64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
+    - deva inv package.send-size --flavor "iot-agent" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent_7*_arm64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
+    - deva inv package.send-size --flavor "dogstatsd" --package-os "debian" --package-path $OMNIBUS_PACKAGE_DIR/datadog-dogstatsd_7*_arm64.deb --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
 
-    - inv package.send-size --flavor "agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "iot-agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "dogstatsd" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-dogstatsd-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "iot-agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "dogstatsd" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-dogstatsd-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
 
-    - inv package.send-size --flavor "agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent-7.*.aarch64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
-    - inv package.send-size --flavor "iot-agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent-7.*.aarch64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
+    - deva inv package.send-size --flavor "agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-agent-7.*.aarch64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
+    - deva inv package.send-size --flavor "iot-agent" --package-os "centos" --package-path $OMNIBUS_PACKAGE_DIR/datadog-iot-agent-7.*.aarch64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
 
-    - inv package.send-size --flavor "agent" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "iot-agent" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-iot-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
-    - inv package.send-size --flavor "dogstatsd" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-dogstatsd-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "agent" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "iot-agent" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-iot-agent-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
+    - deva inv package.send-size --flavor "dogstatsd" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-dogstatsd-7.*.x86_64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch amd64
 
-    - inv package.send-size --flavor "agent" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-agent-7.*.aarch64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
+    - deva inv package.send-size --flavor "agent" --package-os "suse" --package-path $OMNIBUS_PACKAGE_DIR_SUSE/datadog-agent-7.*.aarch64.rpm --major-version "7" --git-ref "${CI_COMMIT_REF_SLUG}" --bucket-branch "${BUCKET_BRANCH}" --arch arm64
 
 
 check_pkg_size:
@@ -106,4 +106,4 @@ check_pkg_size:
     - iot_agent_rpm-arm64
   script:
     - !reference [.setup_agent_github_app]
-    - inv package.check-size
+    - deva inv package.check-size
diff --git a/.gitlab/post_rc_build/post_rc_tasks.yml b/.gitlab/post_rc_build/post_rc_tasks.yml
index 2522d4e48dd56..946be1ba8049b 100644
--- a/.gitlab/post_rc_build/post_rc_tasks.yml
+++ b/.gitlab/post_rc_build/post_rc_tasks.yml
@@ -15,8 +15,9 @@ update_rc_build_links:
     - ATLASSIAN_USERNAME=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $ATLASSIAN_WRITE user) || exit $?; export ATLASSIAN_USERNAME
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
-    # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615    
-    - python3 -m pip install -r tasks/requirements_release_tasks.txt --break-system-packages
+    # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     - PATCH=$(echo "$CI_COMMIT_REF_NAME" | cut -d'.' -f3 | cut -c1)
     - if [[ "$PATCH" == "0" ]]; then PATCH_OPTION=""; else PATCH_OPTION="-p"; fi
-    - inv -e release.update-build-links ${CI_COMMIT_REF_NAME} ${PATCH_OPTION}
+    - deva inv -e release.update-build-links ${CI_COMMIT_REF_NAME} ${PATCH_OPTION}
diff --git a/.gitlab/setup/setup.yml b/.gitlab/setup/setup.yml
index 023d0add7e1c1..086a597af5781 100644
--- a/.gitlab/setup/setup.yml
+++ b/.gitlab/setup/setup.yml
@@ -4,7 +4,7 @@ setup_agent_version:
   image: registry.ddbuild.io/ci/datadog-agent-buildimages/deb_x64$DATADOG_AGENT_BUILDIMAGES_SUFFIX:$DATADOG_AGENT_BUILDIMAGES
   tags: ["arch:amd64"]
   script:
-    - inv -e agent.version --cache-version || exit $?
+    - deva inv -e agent.version --cache-version || exit $?
     - $S3_CP_CMD $CI_PROJECT_DIR/agent-version.cache $S3_ARTIFACTS_URI/agent-version.cache
   needs: []
 
@@ -19,17 +19,18 @@ github_rate_limit_info:
     # Python 3.12 changes default behavior how packages are installed.
     # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r tasks/libs/requirements-github.txt datadog_api_client --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     # Send stats for app 1
     - GITHUB_KEY_B64=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $MACOS_GITHUB_APP_1 key_b64) || exit $?; export GITHUB_KEY_B64
     - GITHUB_APP_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $MACOS_GITHUB_APP_1 app_id) || exit $?; export GITHUB_APP_ID
     - GITHUB_INSTALLATION_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $MACOS_GITHUB_APP_1 installation_id) || exit $?; export GITHUB_INSTALLATION_ID
     - DD_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_API_KEY_ORG2 token) || exit $?; export DD_API_KEY
-    - inv github.send-rate-limit-info-datadog --pipeline-id $CI_PIPELINE_ID --app-instance 1
+    - deva inv github.send-rate-limit-info-datadog --pipeline-id $CI_PIPELINE_ID --app-instance 1
     # Send stats for app 2
     - GITHUB_KEY_B64=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $MACOS_GITHUB_APP_2 key_b64) || exit $?; export GITHUB_KEY_B64
     - GITHUB_APP_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $MACOS_GITHUB_APP_2 app_id) || exit $?; export GITHUB_APP_ID
     - GITHUB_INSTALLATION_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $MACOS_GITHUB_APP_2 installation_id) || exit $?; export GITHUB_INSTALLATION_ID
     - DD_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_API_KEY_ORG2 token) || exit $?; export DD_API_KEY
-    - inv github.send-rate-limit-info-datadog --pipeline-id $CI_PIPELINE_ID --app-instance 2
+    - deva inv github.send-rate-limit-info-datadog --pipeline-id $CI_PIPELINE_ID --app-instance 2
   allow_failure: true
diff --git a/.gitlab/source_test/common.yml b/.gitlab/source_test/common.yml
index 35ad4187c3333..f41d29093f5c7 100644
--- a/.gitlab/source_test/common.yml
+++ b/.gitlab/source_test/common.yml
@@ -5,4 +5,4 @@
 .upload_coverage:
   # Upload coverage files to Codecov. Never fail on coverage upload.
   - CODECOV_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $CODECOV token) || exit $?; export CODECOV_TOKEN
-  - inv -e coverage.upload-to-codecov $COVERAGE_CACHE_FLAG || true
+  - deva inv -e coverage.upload-to-codecov $COVERAGE_CACHE_FLAG || true
diff --git a/.gitlab/source_test/ebpf.yml b/.gitlab/source_test/ebpf.yml
index 4637997de80a3..8f08a4822d327 100644
--- a/.gitlab/source_test/ebpf.yml
+++ b/.gitlab/source_test/ebpf.yml
@@ -17,11 +17,11 @@
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
   script:
-    - inv -e install-tools
-    - inv -e system-probe.object-files
-    - invoke -e linter.go --build system-probe-unit-tests --cpus 4 --targets ./pkg
-    - invoke -e security-agent.run-ebpf-unit-tests --verbose
-    - invoke -e linter.go --targets=./pkg/security/tests --cpus 4 --build-tags="functionaltests stresstests trivy containerd linux_bpf ebpf_bindata"
+    - deva inv -e install-tools
+    - deva inv -e system-probe.object-files
+    - deva inv -e linter.go --build system-probe-unit-tests --cpus 4 --targets ./pkg
+    - deva inv -e security-agent.run-ebpf-unit-tests --verbose
+    - deva inv -e linter.go --targets=./pkg/security/tests --cpus 4 --build-tags="functionaltests stresstests trivy containerd linux_bpf ebpf_bindata"
 
 tests_ebpf_x64:
   extends: .tests_linux_ebpf
@@ -54,10 +54,10 @@ tests_ebpf_arm64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e install-tools
+    - deva inv -e install-tools
     - !reference [.retrieve_sysprobe_deps]
   script:
-    - inv -e kmt.prepare --ci --component="system-probe"
+    - deva inv -e kmt.prepare --ci --component="system-probe"
 
 prepare_sysprobe_ebpf_functional_tests_arm64:
   extends: .prepare_sysprobe_ebpf_functional_tests
@@ -86,10 +86,10 @@ prepare_sysprobe_ebpf_functional_tests_x64:
   before_script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e install-tools
+    - deva inv -e install-tools
     - !reference [.retrieve_sysprobe_deps]
   script:
-    - inv -e kmt.prepare --ci --component="security-agent"
+    - deva inv -e kmt.prepare --ci --component="security-agent"
     - mkdir -p /opt/datadog-agent/embedded/bin
     - cp /tmp/clang-bpf /opt/datadog-agent/embedded/bin/clang-bpf
     - cp /tmp/llc-bpf /opt/datadog-agent/embedded/bin/llc-bpf
diff --git a/.gitlab/source_test/go_generate_check.yml b/.gitlab/source_test/go_generate_check.yml
index 7dd7ada2f2292..85dc790173af0 100644
--- a/.gitlab/source_test/go_generate_check.yml
+++ b/.gitlab/source_test/go_generate_check.yml
@@ -10,8 +10,9 @@ security_go_generate_check:
   before_script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - pip3 install wheel
+    - pip3 install wheel datadog-agent-dev=="$(cat .deva/version)"
     - pip3 install -r docs/cloud-workload-security/scripts/requirements-docs.txt
-    - inv -e install-tools
+    - deva self dep sync -f legacy-tasks
+    - deva inv -e install-tools
   script:
-    - inv -e security-agent.go-generate-check
+    - deva inv -e security-agent.go-generate-check
diff --git a/.gitlab/source_test/golang_deps_diff.yml b/.gitlab/source_test/golang_deps_diff.yml
index 3454f19a58476..61856c8553264 100644
--- a/.gitlab/source_test/golang_deps_diff.yml
+++ b/.gitlab/source_test/golang_deps_diff.yml
@@ -16,7 +16,7 @@ golang_deps_diff:
   script:
      # Get API key to send metrics
     - DD_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_API_KEY_ORG2 token) || exit $?; export DD_API_KEY
-    - inv -e diff.go-deps --report-file=deps-report.md --report-metrics --git-ref "${CI_COMMIT_REF_NAME}"
+    - deva inv -e diff.go-deps --report-file=deps-report.md --report-metrics --git-ref "${CI_COMMIT_REF_NAME}"
   artifacts:
     paths:
       - deps-report.md
@@ -65,4 +65,4 @@ golang_deps_send_count_metrics:
   script:
     # Get API key to send metrics
     - DD_API_KEY=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_API_KEY_ORG2 token) || exit $?; export DD_API_KEY
-    - inv -e go-deps.send-count-metrics --git-sha "${CI_COMMIT_SHA}" --git-ref "${CI_COMMIT_REF_NAME}"
+    - deva inv -e go-deps.send-count-metrics --git-sha "${CI_COMMIT_SHA}" --git-ref "${CI_COMMIT_REF_NAME}"
diff --git a/.gitlab/source_test/linux.yml b/.gitlab/source_test/linux.yml
index aed975dccc481..3e4137ac2b449 100644
--- a/.gitlab/source_test/linux.yml
+++ b/.gitlab/source_test/linux.yml
@@ -5,10 +5,10 @@
   before_script:
     - source /root/.bashrc && conda activate $CONDA_ENV
     - !reference [.retrieve_linux_go_deps]
-    - inv -e rtloader.make --install-prefix=$CI_PROJECT_DIR/dev
-    - inv -e rtloader.install
-    - inv -e rtloader.format --raise-if-changed
-    - inv -e rtloader.test
+    - deva inv -e rtloader.make --install-prefix=$CI_PROJECT_DIR/dev
+    - deva inv -e rtloader.install
+    - deva inv -e rtloader.format --raise-if-changed
+    - deva inv -e rtloader.test
   # Placeholder script, overridden by .linux_tests when running all go tests
   script: ["# Skipping go tests"]
 
@@ -27,13 +27,13 @@
     EXTERNAL_LINKS_PATH: external_links_$CI_JOB_ID.json
   script:
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e install-tools
-    - inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
+    - deva inv -e install-tools
+    - deva inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
     - FAST_TESTS_FLAG=""
     - if [[ "$FAST_TESTS" == "true" ]]; then FAST_TESTS_FLAG="--only-impacted-packages"; fi
-    - inv -e sds.build-library
-    - inv -e agent.build
-    - inv -e test $FLAVORS --include-sds --race --profile --rerun-fails=2 --coverage --cpus $KUBERNETES_CPU_REQUEST $EXTRA_OPTS --save-result-json $TEST_OUTPUT_FILE --junit-tar "junit-${CI_JOB_NAME}.tgz" --build-stdlib $FAST_TESTS_FLAG --test-washer
+    - deva inv -e sds.build-library
+    - deva inv -e agent.build
+    - deva inv -e test $FLAVORS --include-sds --race --profile --rerun-fails=2 --coverage --cpus $KUBERNETES_CPU_REQUEST $EXTRA_OPTS --save-result-json $TEST_OUTPUT_FILE --junit-tar "junit-${CI_JOB_NAME}.tgz" --build-stdlib $FAST_TESTS_FLAG --test-washer
   artifacts:
     expire_in: 2 weeks
     when: always
@@ -138,8 +138,8 @@ go_mod_tidy_check:
   before_script:
     - !reference [.retrieve_linux_go_deps]
   script:
-    - inv -e check-mod-tidy
-    - inv -e check-go-mod-replaces
+    - deva inv -e check-mod-tidy
+    - deva inv -e check-go-mod-replaces
   variables:
     KUBERNETES_MEMORY_REQUEST: "16Gi"
     KUBERNETES_MEMORY_LIMIT: "16Gi"
@@ -164,8 +164,8 @@ new-e2e-unit-tests:
     # Use S3 backend
     - pulumi login "s3://dd-pulumi-state?region=us-east-1&awssdk=v2&profile=$AWS_PROFILE"
   script:
-    - inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
-    - inv -e new-e2e-tests.run --targets ./pkg/utils --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS}
+    - deva inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
+    - deva inv -e new-e2e-tests.run --targets ./pkg/utils --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS}
   after_script:
     - !reference [.upload_junit_source]
   variables:
diff --git a/.gitlab/source_test/macos.yml b/.gitlab/source_test/macos.yml
index 0da65270b98fb..1998672a91ffb 100644
--- a/.gitlab/source_test/macos.yml
+++ b/.gitlab/source_test/macos.yml
@@ -13,11 +13,11 @@ include:
   script:
     - !reference [.retrieve_linux_go_deps]
     - !reference [.retrieve_linux_go_tools_deps]
-    - inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
+    - deva inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
     - FAST_TESTS_FLAG=""
     - if [[ "$FAST_TESTS" == "true" ]]; then FAST_TESTS_FLAG="--only-impacted-packages"; fi
-    - inv -e test --rerun-fails=2 --race --profile --cpus 12 --save-result-json $TEST_OUTPUT_FILE --junit-tar "junit-${CI_JOB_NAME}.tgz" $FAST_TESTS_FLAG --test-washer --coverage
-    - inv -e invoke-unit-tests
+    - deva inv -e test --rerun-fails=2 --race --profile --cpus 12 --save-result-json $TEST_OUTPUT_FILE --junit-tar "junit-${CI_JOB_NAME}.tgz" $FAST_TESTS_FLAG --test-washer --coverage
+    - deva inv -e invoke-unit-tests
   artifacts:
     expire_in: 2 weeks
     when: always
diff --git a/.gitlab/source_test/notify.yml b/.gitlab/source_test/notify.yml
index 05fc53bc0829e..85f4ba502dc1a 100644
--- a/.gitlab/source_test/notify.yml
+++ b/.gitlab/source_test/notify.yml
@@ -8,11 +8,12 @@ unit_tests_notify:
     - when: always
   script:
     # Python 3.12 changes default behavior how packages are installed.
-    # In particular, --break-system-packages command line option is 
+    # In particular, --break-system-packages command line option is
     # required to use the old behavior or use a virtual env. https://github.com/actions/runner-images/issues/8615
-    - python3 -m pip install -r tasks/libs/requirements-github.txt --break-system-packages
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
     - !reference [.setup_agent_github_app]
-    - inv notify.unit-tests --pipeline-id $CI_PIPELINE_ID --pipeline-url $CI_PIPELINE_URL --branch-name $CI_COMMIT_REF_NAME
+    - deva inv notify.unit-tests --pipeline-id $CI_PIPELINE_ID --pipeline-url $CI_PIPELINE_URL --branch-name $CI_COMMIT_REF_NAME
   needs:
     - tests_deb-x64-py3
     - tests_deb-arm64-py3
diff --git a/.gitlab/source_test/protobuf.yml b/.gitlab/source_test/protobuf.yml
index 2353f8dd66576..143d6b848e1ec 100644
--- a/.gitlab/source_test/protobuf.yml
+++ b/.gitlab/source_test/protobuf.yml
@@ -4,5 +4,5 @@ protobuf_test:
   tags: ["arch:amd64"]
   needs: []
   script:
-    - inv install-tools
-    - inv -e protobuf.generate
+    - deva inv install-tools
+    - deva inv -e protobuf.generate
diff --git a/.gitlab/source_test/slack.yml b/.gitlab/source_test/slack.yml
index 0912810a05c57..58e82038b43a8 100644
--- a/.gitlab/source_test/slack.yml
+++ b/.gitlab/source_test/slack.yml
@@ -9,4 +9,4 @@ slack_teams_channels_check:
     - !reference [.except_mergequeue]
     - when: on_success
   script:
-    - inv -e notify.check-teams
+    - deva inv -e notify.check-teams
diff --git a/.gitlab/source_test/tooling_unit_tests.yml b/.gitlab/source_test/tooling_unit_tests.yml
index 80c164d53550b..e8eacb1d871c9 100644
--- a/.gitlab/source_test/tooling_unit_tests.yml
+++ b/.gitlab/source_test/tooling_unit_tests.yml
@@ -8,5 +8,6 @@ invoke_unit_tests:
   rules:
     - !reference [.on_invoke_tasks_changes]
   script:
-    - python3 -m pip install -r tasks/libs/requirements-github.txt --break-system-packages
-    - inv -e invoke-unit-tests.run
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)" --break-system-packages
+    - python3 -m deva self dep sync -f legacy-tasks
+    - deva inv -e invoke-unit-tests.run
diff --git a/.gitlab/trigger_release/trigger_release.yml b/.gitlab/trigger_release/trigger_release.yml
index 0cdb00f5a64ff..23307dfbffcbe 100644
--- a/.gitlab/trigger_release/trigger_release.yml
+++ b/.gitlab/trigger_release/trigger_release.yml
@@ -18,9 +18,9 @@
   script:
     # agent-release-management creates pipeline for both Agent 6 and Agent 7
     # when triggered with major version 7
-    - RELEASE_VERSION="$(inv agent.version --url-safe --omnibus-format)-1" || exit $?; export RELEASE_VERSION
+    - RELEASE_VERSION="$(deva inv agent.version --url-safe --omnibus-format)-1" || exit $?; export RELEASE_VERSION
     - GITLAB_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $GITLAB_TOKEN write_api) || exit $?; export GITLAB_TOKEN
-    - 'inv pipeline.trigger-child-pipeline --project-name "DataDog/agent-release-management" --git-ref "main"
+    - 'deva inv pipeline.trigger-child-pipeline --project-name "DataDog/agent-release-management" --git-ref "main"
       --variable ACTION
       --variable AUTO_RELEASE
       --variable BUILD_PIPELINE_ID
@@ -100,10 +100,11 @@ generate_windows_gitlab_runner_bump_pr:
   script:
     # We are using the agent platform auto PR github app to access the buildenv repository (already used for macOS builds)
     - !reference [.setup_github_app_agent_platform_auto_pr]
-    - python3 -m pip install -r requirements.txt -r tasks/libs/requirements-notifications.txt
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)"
+    - python3 -m deva self dep sync -f legacy-tasks
     - $S3_CP_CMD $S3_ARTIFACTS_URI/agent-version.cache .
     - SLACK_DATADOG_AGENT_BOT_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $SLACK_AGENT token) || exit $?; export SLACK_DATADOG_AGENT_BOT_TOKEN
-    - inv -e github.update-windows-runner-version
+    - deva inv -e github.update-windows-runner-version
 
 # Manual job to generate the gitlab bump pr on buildenv if trigger_auto_staging_release fails
 generate_windows_gitlab_runner_bump_pr_manual:
@@ -121,7 +122,8 @@ generate_windows_gitlab_runner_bump_pr_manual:
   script:
     # We are using the agent platform auto PR github app to access the buildenv repository (already used for macOS builds)
     - !reference [.setup_github_app_agent_platform_auto_pr]
-    - python3 -m pip install -r requirements.txt -r tasks/libs/requirements-notifications.txt
+    - python3 -m pip install datadog-agent-dev=="$(cat .deva/version)"
+    - python3 -m deva self dep sync -f legacy-tasks
     - $S3_CP_CMD $S3_ARTIFACTS_URI/agent-version.cache .
     - SLACK_DATADOG_AGENT_BOT_TOKEN=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $SLACK_AGENT token) || exit $?; export SLACK_DATADOG_AGENT_BOT_TOKEN
-    - inv -e github.update-windows-runner-version
+    - deva inv -e github.update-windows-runner-version
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 7c5e547faae66..519b8e2a42fc0 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -54,14 +54,14 @@ repos:
     - id: protected-branches
       name: protected-branches
       description: checks that the commit isn't created on a protected branch
-      entry: 'inv git.check-protected-branch'
+      entry: 'deva inv git.check-protected-branch'
       language: system
       pass_filenames: false
       stages: [pre-commit, pre-push]
     - id: copyright
       name: copyright
       description: copyright headers
-      entry: 'inv linter.copyrights --only-staged-files'
+      entry: 'deva inv linter.copyrights --only-staged-files'
       language: system
       require_serial: true
       files: \.go$
@@ -69,7 +69,7 @@ repos:
     - id: win-clang-format
       name: win-clang-format
       description: clang-format
-      entry: 'inv pre-commit.check-winclang-format'
+      entry: 'deva inv pre-commit.check-winclang-format'
       language: system
       types_or: [c, c++]
       pass_filenames: false
@@ -84,7 +84,7 @@ repos:
     - id: go-mod-tidy
       name: go-mod-tidy
       description: check that all go.mod files are tidy
-      entry: 'inv tidy'
+      entry: 'deva inv tidy'
       language: system
       require_serial: true
       files: (\.go|^go\.mod|^go\.sum)$
@@ -93,7 +93,7 @@ repos:
     - id: go-test
       name: go-test
       description: run go test on modified packages
-      entry: 'inv test --only-modified-packages'
+      entry: 'deva inv test --only-modified-packages'
       language: system
       require_serial: true
       always_run: true
@@ -102,7 +102,7 @@ repos:
     - id: go-linter
       name: go-linter
       description: run go linter on modified packages
-      entry: 'inv linter.go --only-modified-packages'
+      entry: 'deva inv linter.go --only-modified-packages'
       language: system
       require_serial: true
       always_run: true
@@ -111,7 +111,7 @@ repos:
     - id: shell-check-no-set-x
       name: shell-check-no-set-x
       description: check that no `set -x` is set within github / gitlab workflows
-      entry: 'inv pre-commit.check-set-x'
+      entry: 'deva inv pre-commit.check-set-x'
       language: system
       require_serial: true
       files: (\.yaml|\.yml|\.sh|Dockerfile)$
@@ -119,7 +119,7 @@ repos:
     - id: gitlab-configuration
       name: gitlab-configuration
       description: test the gitlab configuration on main
-      entry: 'inv linter.gitlab-ci -t main'
+      entry: 'deva inv linter.gitlab-ci -t main'
       language: system
       require_serial: true
       files: .*gitlab.*\.yml$
@@ -128,7 +128,7 @@ repos:
     - id: gitlab-lint-jobs-codeowners
       name: gitlab-lint-jobs-codeowners
       description: lint the gitlab configuration to verify jobs codeowners
-      entry: 'inv linter.gitlab-ci-jobs-codeowners'
+      entry: 'deva inv linter.gitlab-ci-jobs-codeowners'
       language: system
       require_serial: true
       files: .*gitlab.*\.yml$
@@ -136,20 +136,20 @@ repos:
     - id: update-go
       name: update-go
       description: test formatting of files will allow go update
-      entry: 'inv linter.update-go'
+      entry: 'deva inv linter.update-go'
       language: system
       pass_filenames: false
     - id: check-go-modules-in-python
       name: check-go-modules-in-python
       description: Validate all go modules are declared in Invoke tasks
-      entry: 'inv modules.validate --fix-format'
+      entry: 'deva inv modules.validate --fix-format'
       language: system
       pass_filenames: false
       files: (.*go\.mod|modules\.yml|.*gomodules\.py|.*modules\.py)$
     - id: protocol-buffer
       name: validate-protocol-buffer-generated-files
       description: Validate that the generated protocol buffer files are up to date
-      entry: 'inv protobuf.generate --no-do-mockgen'
+      entry: 'deva inv protobuf.generate --no-do-mockgen'
       language: system
       pass_filenames: false
       files: (.*go\.mod|modules\.yml|.*gomodules\.py|.*modules\.py|.*.proto)$
diff --git a/.run/Build agent.run.xml b/.run/Build agent.run.xml
index 66434c2aac5b7..ffd013c68d467 100644
--- a/.run/Build agent.run.xml	
+++ b/.run/Build agent.run.xml	
@@ -13,7 +13,7 @@
     <option name="EXECUTE_SCRIPT_FILE" value="true" />
     <envs>
       <env name="SCRIPT_TO_RUN" value=".run/build.sh" />
-      <env name="BUILD_COMMAND" value="invoke agent.build" />
+      <env name="BUILD_COMMAND" value="deva inv agent.build" />
     </envs>
     <method v="2" />
   </configuration>
diff --git a/.run/Build process-agent.run.xml b/.run/Build process-agent.run.xml
index 86a692091e442..5c0410fc46738 100644
--- a/.run/Build process-agent.run.xml	
+++ b/.run/Build process-agent.run.xml	
@@ -12,7 +12,7 @@
     <option name="EXECUTE_IN_TERMINAL" value="true" />
     <option name="EXECUTE_SCRIPT_FILE" value="true" />
     <envs>
-      <env name="BUILD_COMMAND" value="inv process-agent.build --build-exclude=systemd" />
+      <env name="BUILD_COMMAND" value="deva inv process-agent.build --build-exclude=systemd" />
       <env name="SCRIPT_TO_RUN" value=".run/build.sh" />
     </envs>
     <method v="2" />
diff --git a/.run/Build system-probe.run.xml b/.run/Build system-probe.run.xml
index 253f0746744ff..e449e9368c0d2 100644
--- a/.run/Build system-probe.run.xml	
+++ b/.run/Build system-probe.run.xml	
@@ -13,7 +13,7 @@
     <option name="EXECUTE_SCRIPT_FILE" value="true" />
     <envs>
       <env name="SCRIPT_TO_RUN" value=".run/build.sh" />
-      <env name="BUILD_COMMAND" value="invoke system-probe.build" />
+      <env name="BUILD_COMMAND" value="deva inv system-probe.build" />
     </envs>
     <method v="2" />
   </configuration>
diff --git a/.run/build.sh b/.run/build.sh
index fc318c85108b8..5c2af207f0750 100644
--- a/.run/build.sh
+++ b/.run/build.sh
@@ -18,7 +18,7 @@ fi
 
 pushd "${AGENT_ROOT_DIRECTORY}"
 
-BUILD_COMMAND=${BUILD_COMMAND:-"invoke agent.build --build-exclude=systemd"}
+BUILD_COMMAND=${BUILD_COMMAND:-"deva inv agent.build --build-exclude=systemd"}
 echo "The following build command was given: ${BUILD_COMMAND}"
 
 DELVE=1 eval "${BUILD_COMMAND}"
diff --git a/.run/deploy_image.sh b/.run/deploy_image.sh
index eedeb5c5e7df0..c999258c4c880 100644
--- a/.run/deploy_image.sh
+++ b/.run/deploy_image.sh
@@ -23,6 +23,6 @@ REPOSITORY_NAME="usm-agent"
 echo $AWS_ECR_LOGIN_PASSWORD | docker login --username AWS --password-stdin "$AWS_ACCOUNT_ID.dkr.ecr.$REGION.amazonaws.com"
 
 # Build and push the Docker image
-inv -e process-agent.build-dev-image \
+deva inv -e process-agent.build-dev-image \
   --image "$AWS_ACCOUNT_ID.dkr.ecr.$REGION.amazonaws.com/$REPOSITORY_NAME/$IMAGE_NAME:$IMAGE_VERSION" \
   --base-image datadog/agent-dev:master-py3 --push
diff --git a/.run/docker/Run linter.run.xml b/.run/docker/Run linter.run.xml
index d8c3e823fedc8..9c5835a2dd3a1 100644
--- a/.run/docker/Run linter.run.xml	
+++ b/.run/docker/Run linter.run.xml	
@@ -3,7 +3,7 @@
     <deployment type="docker-image">
       <settings>
         <option name="imageTag" value="486234852809.dkr.ecr.us-east-1.amazonaws.com/ci/datadog-agent-devenv:1-arm64" />
-        <option name="command" value="invoke linter.go" />
+        <option name="command" value="deva inv linter.go" />
         <option name="containerName" value="datadog-agent-lint-go" />
         <option name="commandLineOptions" value="-w /home/datadog/go/src/github.com/DataDog/datadog-agent" />
         <option name="showCommandPreview" value="true" />
@@ -19,4 +19,4 @@
     </deployment>
     <method v="2" />
   </configuration>
-</component>
\ No newline at end of file
+</component>
diff --git a/.run/docker/Run unit tests.run.xml b/.run/docker/Run unit tests.run.xml
index 757e398fef4f7..e6ca9a5006e2f 100644
--- a/.run/docker/Run unit tests.run.xml	
+++ b/.run/docker/Run unit tests.run.xml	
@@ -3,7 +3,7 @@
     <deployment type="docker-image">
       <settings>
         <option name="imageTag" value="486234852809.dkr.ecr.us-east-1.amazonaws.com/ci/datadog-agent-devenv:1-arm64" />
-        <option name="command" value="invoke test" />
+        <option name="command" value="deva inv test" />
         <option name="containerName" value="datadog-agent-test" />
         <option name="commandLineOptions" value="-w /home/datadog/go/src/github.com/DataDog/datadog-agent" />
         <option name="showCommandPreview" value="true" />
@@ -19,4 +19,4 @@
     </deployment>
     <method v="2" />
   </configuration>
-</component>
\ No newline at end of file
+</component>
diff --git a/.vscode/tasks.json.template b/.vscode/tasks.json.template
index 0e3f1a844f6c7..f6a51baedec26 100644
--- a/.vscode/tasks.json.template
+++ b/.vscode/tasks.json.template
@@ -3,7 +3,7 @@
     "tasks": [
         {
             "label": "build agent",
-            "command": "invoke -e agent.build",
+            "command": "deva inv -e agent.build",
             "args": [],
             "type": "shell",
             "group": {
@@ -14,35 +14,35 @@
         },
         {
             "label": "clean",
-            "command": "invoke -e agent.clean",
+            "command": "deva inv -e agent.clean",
             "args": [],
             "type": "shell",
             "problemMatcher": []
         },
         {
             "label": "install dependencies",
-            "command": "invoke -e deps",
+            "command": "deva inv -e deps",
             "args": [],
             "type": "shell",
             "problemMatcher": []
         },
         {
             "label": "go linters",
-            "command": "invoke -e linter.go",
+            "command": "deva inv -e linter.go",
             "args": [],
             "type": "shell",
             "problemMatcher": []
         },
         {
             "label": "go tests",
-            "command": "invoke -e test",
+            "command": "deva inv -e test",
             "args": [],
             "type": "shell",
             "problemMatcher": []
         },
         {
             "label": "go linters and tests",
-            "command": "invoke -e test",
+            "command": "deva inv -e test",
             "args": [],
             "type": "shell",
             "problemMatcher": []
diff --git a/Dockerfiles/agent-ot/Dockerfile.agent-otel b/Dockerfiles/agent-ot/Dockerfile.agent-otel
index 49ea309af7019..9088021035515 100644
--- a/Dockerfiles/agent-ot/Dockerfile.agent-otel
+++ b/Dockerfiles/agent-ot/Dockerfile.agent-otel
@@ -67,16 +67,17 @@ RUN go version && \
 RUN python3 -m venv venv && \
     . venv/bin/activate && \
     pip install --upgrade pip && \
-    pip install -r requirements.txt
+    pip install datadog-agent-dev && \
+    deva self dep sync -f legacy-tasks
 
 # Copy the manifest file
 COPY manifest.yaml /workspace/datadog-agent-${AGENT_VERSION}/comp/otelcol/collector-contrib/impl/manifest.yaml
 
 # Generate the files
-RUN . venv/bin/activate && invoke collector.generate
+RUN . venv/bin/activate && deva inv collector.generate
 
 # Build the OTel agent
-RUN . venv/bin/activate && invoke otel-agent.build
+RUN . venv/bin/activate && deva inv otel-agent.build
 
 # Use the final Datadog agent image
 FROM datadog/agent:${AGENT_VERSION}
diff --git a/Dockerfiles/dogstatsd/alpine/README.md b/Dockerfiles/dogstatsd/alpine/README.md
index cea4b5b7a845c..04cdea494906d 100644
--- a/Dockerfiles/dogstatsd/alpine/README.md
+++ b/Dockerfiles/dogstatsd/alpine/README.md
@@ -39,7 +39,7 @@ spec:
           - name: DD_DOGSTATSD_SOCKET
             value: "/socket/statsd.socket"
           - name: DD_SEND_HOST_METADATA
-            # Legacy option name, keep as `false` when running alongside another Agent 
+            # Legacy option name, keep as `false` when running alongside another Agent
             value: "false"
           - name: DD_ENABLE_METADATA_COLLECTION
             value: "false"
@@ -85,7 +85,7 @@ spec:
           - name: DD_API_KEY
             value: ___value___
           - name: DD_SEND_HOST_METADATA
-            # Legacy option name, keep as `false` when running alongside another Agent 
+            # Legacy option name, keep as `false` when running alongside another Agent
             value: "false"
           - name: DD_ENABLE_METADATA_COLLECTION
             value: "false"
@@ -97,4 +97,4 @@ spec:
 
 ## How to build it
 
-You can use `inv dogstatsd.image-build` to build your own dogstatsd image
+You can use `deva inv dogstatsd.image-build` to build your own dogstatsd image
diff --git a/README.md b/README.md
index 09efbd5a380a4..50d634eb91826 100644
--- a/README.md
+++ b/README.md
@@ -21,42 +21,40 @@ and development, is located under [the docs directory](docs) of the present repo
 To build the Agent you need:
  * [Go](https://golang.org/doc/install) 1.23 or later. You'll also need to set your `$GOPATH` and have `$GOPATH/bin` in your path.
  * Python 3.11+ along with development libraries for tooling. You will also need Python 2.7 if you are building the Agent with Python 2 support.
- * Python dependencies. You may install these with `pip install -r requirements.txt`
-   This will also pull in [Invoke](http://www.pyinvoke.org) if not yet installed.
+ * Python dependencies. You may install these with `pip install datadog-agent-dev`.
  * CMake version 3.12 or later and a C++ compiler
 
 **Note:** you may want to use a python virtual environment to avoid polluting your
       system-wide python environment with the agent build/dev dependencies. You can
-      create a virtual environment using `virtualenv` and then use the `invoke agent.build`
+      create a virtual environment using `virtualenv` and then use the `deva inv agent.build`
       parameters `--python-home-3=<venv_path>` to use the virtual environment's
-      interpreter and libraries. By default, this environment is only used for dev dependencies
-      listed in `requirements.txt`.
+      interpreter and libraries. By default, this environment is only used for dev dependencies.
 
 **Note:** You may have previously installed `invoke` via brew on MacOS, or `pip` in
       any other platform. We recommend you use the version pinned in the requirements
       file for a smooth development/build experience.
 
 **Note:** You can enable auto completion for invoke tasks. Use the command below to add the appropriate line to your `.zshrc` file.
-      `echo "source <(inv --print-completion-script zsh)" >> ~/.zshrc`
+      `echo "source <(deva inv --print-completion-script zsh)" >> ~/.zshrc`
 
-Builds and tests are orchestrated with `invoke`, type `invoke --list` on a shell
+Builds and tests are orchestrated with `invoke`, type `deva inv --list` on a shell
 to see the available tasks.
 
 To start working on the Agent, you can build the `main` branch:
 
 1. Checkout the repo: `git clone https://github.com/DataDog/datadog-agent.git $GOPATH/src/github.com/DataDog/datadog-agent`.
 2. cd into the project folder: `cd $GOPATH/src/github.com/DataDog/datadog-agent`.
-3. Install go tools: `invoke install-tools` (if you have a timeout error, you might need to prepend the `GOPROXY=https://proxy.golang.org,https://goproxy.io,direct` env var to the command).
+3. Install go tools: `deva inv install-tools` (if you have a timeout error, you might need to prepend the `GOPROXY=https://proxy.golang.org,https://goproxy.io,direct` env var to the command).
 4. Create a development `datadog.yaml` configuration file in `dev/dist/datadog.yaml`, containing a valid API key: `api_key: <API_KEY>`. You can either start with an empty one or use the full one generated by the Agent build from Step 5 (located in `cmd/agent/dist/datadog.yaml` after the build finishes).
-5. Build the agent with `invoke agent.build --build-exclude=systemd`.
+5. Build the agent with `deva inv agent.build --build-exclude=systemd`.
 
      You can specify a custom Python location for the agent (useful when using
      virtualenvs):
 
-       invoke agent.build \
+       deva inv agent.build \
          --python-home-3=$GOPATH/src/github.com/DataDog/datadog-agent/venv3
 
-    Running `invoke agent.build`:
+    Running `deva inv agent.build`:
 
      * Discards any changes done in `bin/agent/dist`.
      * Builds the Agent and writes the binary to `bin/agent/agent`.
@@ -73,20 +71,20 @@ on setting up a windows dev environment, refer to [Windows Dev Env](devenv).
 
 ## Testing
 
-Run unit tests using `invoke test`.
+Run unit tests using `deva inv test`.
 ```
-invoke test --targets=./pkg/aggregator
+deva inv test --targets=./pkg/aggregator
 ```
 
-You can also use `invoke linter.go` to run just the go linters.
+You can also use `deva inv linter.go` to run just the go linters.
 ```
-invoke linter.go
+deva inv linter.go
 ```
 
 When testing code that depends on [rtloader](/rtloader), build and install it first.
 ```
-invoke rtloader.make && invoke rtloader.install
-invoke test --targets=./pkg/collector/python
+deva inv rtloader.make && deva inv rtloader.install
+deva inv test --targets=./pkg/collector/python
 ```
 
 ## Run
@@ -96,7 +94,7 @@ You can run the agent with:
 ./bin/agent/agent run -c bin/agent/dist/datadog.yaml
 ```
 
-The file `bin/agent/dist/datadog.yaml` is copied from `dev/dist/datadog.yaml` by `invoke agent.build` and must contain a valid api key.
+The file `bin/agent/dist/datadog.yaml` is copied from `dev/dist/datadog.yaml` by `deva inv agent.build` and must contain a valid api key.
 
 ### Run a JMX check
 In order to run a JMX based check locally, you must have:
diff --git a/cmd/process-agent/README.md b/cmd/process-agent/README.md
index f157634ae6a7b..70a8cadfc40e8 100644
--- a/cmd/process-agent/README.md
+++ b/cmd/process-agent/README.md
@@ -9,7 +9,7 @@ See the [Live Processes docs](https://docs.datadoghq.com/graphing/infrastructure
 Pre-requisites:
 
 * `go >= 1.23`
-* `invoke`
+* [deva](https://datadoghq.dev/datadog-agent/setup/#tooling)
 
 Check out the repo in your `$GOPATH`
 
@@ -24,7 +24,7 @@ Note that you must be in `$GOPATH/src/github.com/DataDog/datadog-agent`, NOT `~/
 To build the Process Agent run:
 
 ```
-inv -e process-agent.build
+deva inv -e process-agent.build
 ```
 
 You can now run the Agent on the command-line:
diff --git a/cmd/testdata/README.md b/cmd/testdata/README.md
index 79e8e2f54f5e9..fb67332bad316 100644
--- a/cmd/testdata/README.md
+++ b/cmd/testdata/README.md
@@ -1,3 +1,3 @@
 This directory contains test data for tests in the `cmd/...` packages.
 
-It is placed here to avoid filename-length issues on Windows (see `inv linter.filenames`).
+It is placed here to avoid filename-length issues on Windows (see `deva inv linter.filenames`).
diff --git a/devenv/README.md b/devenv/README.md
index 86f23163e9a57..70dcfd2df2a6a 100644
--- a/devenv/README.md
+++ b/devenv/README.md
@@ -19,7 +19,7 @@ There is a Ruby template file to generate the various Packer combinations.
 To generate the Packer file and then invoke Packer the `Invoke!` library is used.
 
 To generate the `packer.json` file (here for Windows 10):
-`inv packer.build --os=windows-10 --provider=virtualbox-iso`
+`deva inv packer.build --os=windows-10 --provider=virtualbox-iso`
 
 Where the valid `os` values are:
 
@@ -84,6 +84,6 @@ Two third party files are used and adapted:
 ## Run and debug with VSCode (Linux/Mac)
 
 1. Open the workspace in VSCode
-2. Configure VS Code using `inv vscode.setup` (this will install extensions and create the `.vscode/{tasks,launch,settings,extensions}.json` files)
+2. Configure VS Code using `deva inv vscode.setup` (this will install extensions and create the `.vscode/{tasks,launch,settings,extensions}.json` files)
 
 You can see `.vscode/*.json.template` files for example configurations.
diff --git a/devenv/tasks/packer.py b/devenv/tasks/packer.py
index cc5eb06758010..1d08aaa878470 100644
--- a/devenv/tasks/packer.py
+++ b/devenv/tasks/packer.py
@@ -18,7 +18,7 @@ def build(ctx, os="windows-10", provider="virtualbox-iso"):
     Build the Vagrant box
 
     Example invokation:
-        inv packer.build --os=windows-10
+        deva inv packer.build --os=windows-10
     """
 
     if provider not in DEFAULT_BUILDERS:
diff --git a/docs/cloud-workload-security/README.md b/docs/cloud-workload-security/README.md
index 7a5452bc952d0..df9ed32009203 100644
--- a/docs/cloud-workload-security/README.md
+++ b/docs/cloud-workload-security/README.md
@@ -107,7 +107,7 @@ The templates are written in [Jinja2](https://jinja.palletsprojects.com/en/3.0.x
 
 - Golang (see `go.mod` for the minimal version supported)
 - Python, install dependencies with:
-	- `pip install -r requirements.txt`
+	- `pip install datadog-agent-dev`
 	- `pip install -r docs/cloud-workload-security/scripts/requirements-docs.txt`
 
 
@@ -116,12 +116,12 @@ The templates are written in [Jinja2](https://jinja.palletsprojects.com/en/3.0.x
 If a `*.go` file in `pkg/security` has been edited you will first need to generate the `*.json` files.
 Please run:
 ```sh
-inv -e security-agent.cws-go-generate
+deva inv -e security-agent.cws-go-generate
 # or only the specific file
 go generate ./path/to/the/touched/file
 ```
 
 To generate the final markdown files please run:
 ```sh
-inv -e security-agent.generate-cws-documentation
+deva inv -e security-agent.generate-cws-documentation
 ```
diff --git a/docs/dev/agent_build.md b/docs/dev/agent_build.md
index 1896724f75403..894849f2b0d53 100644
--- a/docs/dev/agent_build.md
+++ b/docs/dev/agent_build.md
@@ -5,18 +5,18 @@
 You can decide at build time which components of the Agent you want to find in
 the final artifact. By default, all the components are picked up, so if you want
 to replicate the same configuration of the Agent distributed via system packages,
-all you have to do is `deva agent.build`.
+all you have to do is `deva inv agent.build`.
 
 To pick only certain components you have to invoke the task like this:
 
 ```
-deva agent.build --build-include=zstd,etcd,python
+deva inv agent.build --build-include=zstd,etcd,python
 ```
 
 Conversely, if you want to exclude something:
 
 ```
-deva agent.build --build-exclude=systemd,python
+deva inv agent.build --build-exclude=systemd,python
 ```
 
 This is the complete list of the available components:
@@ -67,13 +67,13 @@ into the Agent binary. For instance, to override the defaults and bundle only th
 and the security Agents:
 
 ```
-deva agent.build --bundle process-agent --bundle security-agent
+deva inv agent.build --bundle process-agent --bundle security-agent
 ```
 
 To disable bundling entirely:
 
 ```
-deva agent.build --bundle agent
+deva inv agent.build --bundle agent
 ```
 
 ## Testing Agent changes in containerized environments
@@ -91,7 +91,7 @@ COPY agent /opt/datadog-agent/bin/agent/agent
 
 For this to work properly, two things are important:
 - Your change needs to be done on top of the `<AGENT_VERSION>` tag from the DataDog repository.
-- You need to run the invoke task with the proper embedded path `deva -e agent.build -e /opt/datadog-agent/embedded`.
+- You need to run the invoke task with the proper embedded path `deva inv -e agent.build -e /opt/datadog-agent/embedded`.
 
 **Note**: This makes `invoke` install the build's artifacts in the `/opt/datadog-agent/embedded` folder. Make sure the folder exists and the current user has write permissions.
 
diff --git a/docs/dev/agent_omnibus.md b/docs/dev/agent_omnibus.md
index 421303cbfc173..67fb645b73c4e 100644
--- a/docs/dev/agent_omnibus.md
+++ b/docs/dev/agent_omnibus.md
@@ -1,7 +1,7 @@
 # Build the Agent packages
 
 Agent packages for all the supported platforms are built using
-[Omnibus](https://github.com/chef/omnibus), which can be run via `invoke` tasks.
+[Omnibus](https://github.com/chef/omnibus), which can be run through [deva](https://datadoghq.dev/datadog-agent/setup/#tooling) commands.
 
 Omnibus creates a package for your operating system, so you'll get a DEB
 package on Debian-based distros, an RPM package on distros that use RPM, an MSI
@@ -19,7 +19,7 @@ From the `datadog-agent` source folder, use the following command to run the
 `omnibus.build` task in a Docker container:
 
 ```
-docker run -v "$PWD:/go/src/github.com/DataDog/datadog-agent" -v "/tmp/omnibus:/omnibus" -v "/tmp/opt/datadog-agent:/opt/datadog-agent" -v"/tmp/gems:/gems" --workdir=/go/src/github.com/DataDog/datadog-agent datadog/agent-buildimages-deb_x64 inv -e omnibus.build --base-dir=/omnibus --gem-path=/gems
+docker run -v "$PWD:/go/src/github.com/DataDog/datadog-agent" -v "/tmp/omnibus:/omnibus" -v "/tmp/opt/datadog-agent:/opt/datadog-agent" -v"/tmp/gems:/gems" --workdir=/go/src/github.com/DataDog/datadog-agent datadog/agent-buildimages-deb_x64 deva inv -e omnibus.build --base-dir=/omnibus --gem-path=/gems
 ```
 
 The container will share 3 volumes with the host to avoid starting from scratch
@@ -60,20 +60,20 @@ the filesystem without disrupting anything.
 To run Omnibus and build the package, make the `/opt` folder world readable and run:
 
 ```
-deva omnibus.build --base-dir=$HOME/.omnibus
+deva inv omnibus.build --base-dir=$HOME/.omnibus
 ```
 
 On Mac, you might want to skip the signing step by running:
 
 ```
-deva omnibus.build --base-dir=$HOME/.omnibus --skip-sign
+deva inv omnibus.build --base-dir=$HOME/.omnibus --skip-sign
 ```
 
 The path you pass with the `--base-dir` option will contain the sources
 downloaded by Omnibus in the `src` folder, the binaries cached after building
 those sources in the `cache` folder and the final deb/rpm/dmg artifacts in the
 `pkg` folder. You can fine tune an Omnibus run passing more options, see
-`deva omnibus.build --help` for the list of all the available options.
+`deva inv omnibus.build --help` for the list of all the available options.
 
 **Note:** it's strongly advised to pass `--base-dir` and point to a directory
 outside the Agent repo. By default Omnibus stores packages in the project folder
diff --git a/docs/dev/modules.md b/docs/dev/modules.md
index 59d551215f840..7d8ec263967e6 100644
--- a/docs/dev/modules.md
+++ b/docs/dev/modules.md
@@ -46,7 +46,7 @@ After you have refactored, if needed, and listed the packages that you want to e
         - ./comp
     ```
 
-1. Run `inv modules.go-work` to generate the updated `go.work` file.
+1. Run `deva inv modules.go-work` to generate the updated `go.work` file.
 
 ## Go nested modules tooling
 
@@ -86,4 +86,4 @@ modules:
 `default` is for modules with default attribute values and `ignored` for ignored modules.
 To create a special configuration, the attributes of `GoModule` can be overriden. Attributes details are located within the `GoModule` class.
 
-This file is linted with `inv modules.validate [--fix-format]`.
+This file is linted with `deva inv modules.validate [--fix-format]`.
diff --git a/omnibus/config/software/datadog-agent-finalize.rb b/omnibus/config/software/datadog-agent-finalize.rb
index 59b7a38520fd0..830ca654c844a 100644
--- a/omnibus/config/software/datadog-agent-finalize.rb
+++ b/omnibus/config/software/datadog-agent-finalize.rb
@@ -184,7 +184,7 @@
             delete "#{install_dir}/etc/conf.d/docker.d"
 
             # Edit rpath from a true path to relative path for each binary
-            command "inv omnibus.rpath-edit #{install_dir} #{install_dir} --platform=macos", cwd: Dir.pwd
+            command "deva inv omnibus.rpath-edit #{install_dir} #{install_dir} --platform=macos", cwd: Dir.pwd
 
             if ENV['HARDENED_RUNTIME_MAC'] == 'true'
                 hardened_runtime = "-o runtime --entitlements #{entitlements_file} "
diff --git a/omnibus/config/software/datadog-agent-integrations-py3.rb b/omnibus/config/software/datadog-agent-integrations-py3.rb
index 73517f7568824..f6ab194d82ec3 100644
--- a/omnibus/config/software/datadog-agent-integrations-py3.rb
+++ b/omnibus/config/software/datadog-agent-integrations-py3.rb
@@ -127,15 +127,15 @@
     tasks_dir_in = windows_safe_path(Dir.pwd)
     # Collect integrations to install
     checks_to_install = (
-      shellout! "inv agent.collect-integrations #{project_dir} 3 #{os} #{excluded_folders.join(',')}",
+      shellout! "deva inv agent.collect-integrations #{project_dir} 3 #{os} #{excluded_folders.join(',')}",
                 :cwd => tasks_dir_in
     ).stdout.split()
     # Retrieving integrations from cache
     cache_bucket = ENV.fetch('INTEGRATION_WHEELS_CACHE_BUCKET', '')
-    cache_branch = (shellout! "inv release.get-release-json-value base_branch --no-worktree", cwd: File.expand_path('..', tasks_dir_in)).stdout.strip
+    cache_branch = (shellout! "deva inv release.get-release-json-value base_branch --no-worktree", cwd: File.expand_path('..', tasks_dir_in)).stdout.strip
     if cache_bucket != ''
       mkdir cached_wheels_dir
-      shellout! "inv -e agent.get-integrations-from-cache " \
+      shellout! "deva inv -e agent.get-integrations-from-cache " \
                 "--python 3 --bucket #{cache_bucket} " \
                 "--branch #{cache_branch || 'main'} " \
                 "--integrations-dir #{windows_safe_path(project_dir)} " \
@@ -183,7 +183,7 @@
         end
         shellout! "#{python} -m pip install datadog-#{check} --no-deps --no-index --find-links=#{wheel_build_dir}"
         if cache_bucket != '' && ENV.fetch('INTEGRATION_WHEELS_SKIP_CACHE_UPLOAD', '') == '' && cache_branch != nil
-          shellout! "inv -e agent.upload-integration-to-cache " \
+          shellout! "deva inv -e agent.upload-integration-to-cache " \
                     "--python 3 --bucket #{cache_bucket} " \
                     "--branch #{cache_branch} " \
                     "--integrations-dir #{windows_safe_path(project_dir)} " \
diff --git a/omnibus/config/software/datadog-agent.rb b/omnibus/config/software/datadog-agent.rb
index 2a2ef4c040fe3..4b9477595d712 100644
--- a/omnibus/config/software/datadog-agent.rb
+++ b/omnibus/config/software/datadog-agent.rb
@@ -90,25 +90,25 @@
     if not windows_arch_i386? and ENV['WINDOWS_DDNPM_DRIVER'] and not ENV['WINDOWS_DDNPM_DRIVER'].empty?
       do_windows_sysprobe = "--windows-sysprobe"
     end
-    command "inv -e rtloader.clean"
-    command "inv -e rtloader.make --install-prefix \"#{windows_safe_path(python_3_embedded)}\" --cmake-options \"-G \\\"Unix Makefiles\\\" \\\"-DPython3_EXECUTABLE=#{windows_safe_path(python_3_embedded)}\\python.exe\"\"", :env => env
+    command "deva inv -e rtloader.clean"
+    command "deva inv -e rtloader.make --install-prefix \"#{windows_safe_path(python_3_embedded)}\" --cmake-options \"-G \\\"Unix Makefiles\\\" \\\"-DPython3_EXECUTABLE=#{windows_safe_path(python_3_embedded)}\\python.exe\"\"", :env => env
     command "mv rtloader/bin/*.dll  #{install_dir}/bin/agent/"
-    command "inv -e agent.build --exclude-rtloader --major-version #{major_version_arg} --no-development --install-path=#{install_dir} --embedded-path=#{install_dir}/embedded #{do_windows_sysprobe} --flavor #{flavor_arg}", env: env
-    command "inv -e systray.build --major-version #{major_version_arg}", env: env
+    command "deva inv -e agent.build --exclude-rtloader --major-version #{major_version_arg} --no-development --install-path=#{install_dir} --embedded-path=#{install_dir}/embedded #{do_windows_sysprobe} --flavor #{flavor_arg}", env: env
+    command "deva inv -e systray.build --major-version #{major_version_arg}", env: env
   else
-    command "inv -e rtloader.clean"
-    command "inv -e rtloader.make --install-prefix \"#{install_dir}/embedded\" --cmake-options '-DCMAKE_CXX_FLAGS:=\"-D_GLIBCXX_USE_CXX11_ABI=0\" -DCMAKE_INSTALL_LIBDIR=lib -DCMAKE_FIND_FRAMEWORK:STRING=NEVER -DPython3_EXECUTABLE=#{install_dir}/embedded/bin/python3'", :env => env
-    command "inv -e rtloader.install"
+    command "deva inv -e rtloader.clean"
+    command "deva inv -e rtloader.make --install-prefix \"#{install_dir}/embedded\" --cmake-options '-DCMAKE_CXX_FLAGS:=\"-D_GLIBCXX_USE_CXX11_ABI=0\" -DCMAKE_INSTALL_LIBDIR=lib -DCMAKE_FIND_FRAMEWORK:STRING=NEVER -DPython3_EXECUTABLE=#{install_dir}/embedded/bin/python3'", :env => env
+    command "deva inv -e rtloader.install"
     bundle_arg = bundled_agents.map { |k| "--bundle #{k}" }.join(" ")
 
     include_sds = ""
     if linux_target?
         include_sds = "--include-sds" # we only support SDS on Linux targets for now
     end
-    command "inv -e agent.build --exclude-rtloader #{include_sds} --major-version #{major_version_arg} --no-development --install-path=#{install_dir} --embedded-path=#{install_dir}/embedded --flavor #{flavor_arg} #{bundle_arg}", env: env
+    command "deva inv -e agent.build --exclude-rtloader #{include_sds} --major-version #{major_version_arg} --no-development --install-path=#{install_dir} --embedded-path=#{install_dir}/embedded --flavor #{flavor_arg} #{bundle_arg}", env: env
 
     if heroku_target?
-      command "inv -e agent.build --exclude-rtloader --major-version #{major_version_arg} --no-development --install-path=#{install_dir} --embedded-path=#{install_dir}/embedded --flavor #{flavor_arg} --agent-bin=bin/agent/core-agent --bundle agent", env: env
+      command "deva inv -e agent.build --exclude-rtloader --major-version #{major_version_arg} --no-development --install-path=#{install_dir} --embedded-path=#{install_dir}/embedded --flavor #{flavor_arg} --agent-bin=bin/agent/core-agent --bundle agent", env: env
     end
   end
 
@@ -178,7 +178,7 @@
     # Add SELinux policy for system-probe
     if debian_target? || redhat_target?
       mkdir "#{conf_dir}/selinux"
-      command "inv -e selinux.compile-system-probe-policy-file --output-directory #{conf_dir}/selinux", env: env
+      command "deva inv -e selinux.compile-system-probe-policy-file --output-directory #{conf_dir}/selinux", env: env
     end
 
     move 'bin/agent/dist/system-probe.yaml', "#{conf_dir}/system-probe.yaml.example"
@@ -216,7 +216,7 @@
   # APM Injection agent
   if windows_target?
     if ENV['WINDOWS_APMINJECT_MODULE'] and not ENV['WINDOWS_APMINJECT_MODULE'].empty?
-      command "inv agent.generate-config --build-type apm-injection --output-file ./bin/agent/dist/apm-inject.yaml", :env => env
+      command "deva inv agent.generate-config --build-type apm-injection --output-file ./bin/agent/dist/apm-inject.yaml", :env => env
       move 'bin/agent/dist/apm-inject.yaml', "#{conf_dir}/apm-inject.yaml.example"
     end
   end
diff --git a/omnibus/config/software/datadog-iot-agent.rb b/omnibus/config/software/datadog-iot-agent.rb
index b528cb485c49b..77302ccc880d5 100644
--- a/omnibus/config/software/datadog-iot-agent.rb
+++ b/omnibus/config/software/datadog-iot-agent.rb
@@ -61,7 +61,7 @@
     mkdir conf_dir
     mkdir "#{install_dir}/bin/agent"
 
-    command "inv agent.build --flavor iot --no-development --major-version #{major_version_arg}", env: env
+    command "deva inv agent.build --flavor iot --no-development --major-version #{major_version_arg}", env: env
 
       # move around bin and config files
     move 'bin/agent/dist/datadog.yaml', "#{conf_dir}/datadog.yaml.example"
diff --git a/omnibus/config/software/installer.rb b/omnibus/config/software/installer.rb
index 38b612d2510eb..c82bd388fdea1 100644
--- a/omnibus/config/software/installer.rb
+++ b/omnibus/config/software/installer.rb
@@ -36,7 +36,7 @@
     mkdir "#{install_dir}/bin"
     copy 'bin/installer', "#{install_dir}/bin/"
   elsif windows_target?
-    command "inv -e installer.build --install-path=#{install_dir}", env: env
+    command "deva inv -e installer.build --install-path=#{install_dir}", env: env
     copy 'bin/installer/installer.exe', "#{install_dir}/datadog-installer.exe"
   end
 
diff --git a/pkg/clusteragent/README.md b/pkg/clusteragent/README.md
index 22fd10a1a5763..e8d7812311bad 100644
--- a/pkg/clusteragent/README.md
+++ b/pkg/clusteragent/README.md
@@ -29,8 +29,8 @@ To start working on the Cluster Agent, you can build the `main` branch:
 
 1. Clone the repo: `git clone https://github.com/DataDog/datadog-agent.git $GOPATH/src/github.com/DataDog/datadog-agent`.
 2. cd into the project folder: `cd $GOPATH/src/github.com/DataDog/datadog-agent`.
-3. Install go tools: `invoke install-tools`.
-4. Build the whole project with `invoke cluster-agent.build`
+3. Install go tools: `deva inv install-tools`.
+4. Build the whole project with `deva inv cluster-agent.build`
 
 Please refer to the [Agent Developer Guide](/docs/dev/README.md) for more details.
 
diff --git a/pkg/eventmonitor/proto/api/README.md b/pkg/eventmonitor/proto/api/README.md
index ce3f08b06d61c..2352c49aa36b5 100644
--- a/pkg/eventmonitor/proto/api/README.md
+++ b/pkg/eventmonitor/proto/api/README.md
@@ -2,7 +2,7 @@
 
 From the repository root run the following:
 ```
-inv install-tools
+deva inv install-tools
 ```
 to install the correct version of required tools
 
@@ -11,5 +11,5 @@ to install the correct version of required tools
 
 From the repository root run the following:
 ```
-inv -e system-probe.generate-event-monitor-proto
+deva inv -e system-probe.generate-event-monitor-proto
 ```
diff --git a/pkg/network/nettop/readme.md b/pkg/network/nettop/readme.md
index 61a4c44f989f4..88638f9e6bf05 100644
--- a/pkg/network/nettop/readme.md
+++ b/pkg/network/nettop/readme.md
@@ -7,6 +7,6 @@ It loads the eBPF probes to watch for connections on the current host
 ## Build
 
 ```bash
-inv -e system-probe.object-files
+deva inv -e system-probe.object-files
 go build -tags linux_bpf,linux ./pkg/network/nettop
 ```
diff --git a/pkg/network/usm/debugger/README.md b/pkg/network/usm/debugger/README.md
index 27d71055a8e31..eb5f96d7313a6 100644
--- a/pkg/network/usm/debugger/README.md
+++ b/pkg/network/usm/debugger/README.md
@@ -8,16 +8,16 @@ does not need to exist).  This is needed in order to be able to build the eBPF
 object files for a different architecture than your host machine.
 
 ```
-inv -e kmt.prepare system-probe --compile-only --stack=foo --arch=x86_64
-inv -e kmt.prepare system-probe --compile-only --stack=foo --arch=arm64
+deva inv -e kmt.prepare system-probe --compile-only --stack=foo --arch=x86_64
+deva inv -e kmt.prepare system-probe --compile-only --stack=foo --arch=arm64
 ```
 
 Build the binary with one of the following commands for the architecture of
 your target machine:
 
 ```
-inv -e system-probe.build-usm-debugger --arch=x86_64
-inv -e system-probe.build-usm-debugger --arch=arm64
+deva inv -e system-probe.build-usm-debugger --arch=x86_64
+deva inv -e system-probe.build-usm-debugger --arch=arm64
 ```
 
 Copy the `bin/usm-debugger` to the `system-probe` container in the
diff --git a/pkg/proto/datadog/api/README.md b/pkg/proto/datadog/api/README.md
index 63ab320f50621..fc4cfebe365b6 100644
--- a/pkg/proto/datadog/api/README.md
+++ b/pkg/proto/datadog/api/README.md
@@ -1,17 +1,17 @@
-## gRPC: Protobuf and Gateway code generation 
+## gRPC: Protobuf and Gateway code generation
 
 To generate the code for the API you have defined in your `.proto`
-files we will need three different grpc-related packages: 
+files requires three different grpc-related packages:
 
 - protobuf - protoc-gen-go: generates the golang protobuf definitions.
-- grpc-gateway - protoc-gen-grpc-gateway: generates the gRPC-REST gateway  
+- grpc-gateway - protoc-gen-grpc-gateway: generates the gRPC-REST gateway
 - grpc-gateway - protoc-gen-swagger (optional)
 
 ### Install
 
 From the repository root run the following:
 ```
-inv setup
+deva inv setup
 ```
 This should drop all required binaries in your `$GOPATH/bin`
 
@@ -24,20 +24,20 @@ elsewhere take precedence (`which` is your friend).
 From the repository root run the following:
 
 ```
-inv protobuf.generate 
+deva inv protobuf.generate
 ```
 
-Those two will generate the protobuf golang definitions _and_ the
-gRPC gateway code that will allow us to serve the API also as a 
+This command generates generate the protobuf golang definitions _and_ the
+gRPC gateway code that allows Datadog to serve the API also as a
 REST application.
 
 ### Notes
 
-We are currently pinned to fairly old versions for some of the 
+We are currently pinned to fairly old versions for some of the
 protobuf/grpc dependencies and tooling. These are required as a
 consequence of third-party libraries (most notably etcd). Please
 see `go.mod` and `internal/tools/proto/go.mod` to understand the
-version requirements. 
+version requirements.
 
 The tooling in place should help our protobuf versions be consistent
 across the board.
diff --git a/pkg/security/proto/README.md b/pkg/security/proto/README.md
index f328bd40c28fc..9ea7a934e94d4 100644
--- a/pkg/security/proto/README.md
+++ b/pkg/security/proto/README.md
@@ -2,7 +2,7 @@
 
 From the repository root run the following:
 ```
-inv install-tools
+deva inv install-tools
 ```
 to install the correct version of required tools
 
@@ -11,5 +11,5 @@ to install the correct version of required tools
 
 From the repository root run the following:
 ```
-inv -e security-agent.generate-cws-proto
+deva inv -e security-agent.generate-cws-proto
 ```
diff --git a/pkg/security/tests/README.md b/pkg/security/tests/README.md
index 39a0ef963b46c..76ab23f5e5728 100644
--- a/pkg/security/tests/README.md
+++ b/pkg/security/tests/README.md
@@ -3,17 +3,17 @@
 * Running all tests:
 
 ```bash
-inv -e security-agent.functional-tests --verbose --skip-linters --testflags "-test.run '.*'"
+deva inv -e security-agent.functional-tests --verbose --skip-linters --testflags "-test.run '.*'"
 ```
 
 * Running a single test:
 
 ```bash
-inv -e security-agent.functional-tests --verbose --skip-linters --testflags "-test.run 'TestConnect'"
+deva inv -e security-agent.functional-tests --verbose --skip-linters --testflags "-test.run 'TestConnect'"
 ```
 
 * Running ebpfless tests:
 
 ```bash
-inv -e security-agent.ebpfless-functional-tests --verbose --skip-linters --testflags "-test.run '.*'"
+deva inv -e security-agent.ebpfless-functional-tests --verbose --skip-linters --testflags "-test.run '.*'"
 ```
diff --git a/pkg/util/winutil/eventlog/README.md b/pkg/util/winutil/eventlog/README.md
index 7886c5b57304d..990d0a75fc41a 100644
--- a/pkg/util/winutil/eventlog/README.md
+++ b/pkg/util/winutil/eventlog/README.md
@@ -26,4 +26,4 @@ Simply run `go test ./...` to run the tests with the [Fake API](api/fake).
 
 The tests can be run with the [Windows API](api/windows), which will install/remove event logs on the system and fill them with events.
 
-The integration tests can be run directly `go test ./... -evtapi Windows`, or through the invoke task `inv -e integration-tests`.
+The integration tests can be run directly `go test ./... -evtapi Windows`, or through the invoke task `deva inv -e integration-tests`.
diff --git a/skaffold.yaml b/skaffold.yaml
index 1d05bab182ca2..83f8f4aa8f308 100644
--- a/skaffold.yaml
+++ b/skaffold.yaml
@@ -45,10 +45,10 @@ profiles:
       artifacts:
       - image: agent
         custom:
-          buildCommand: "inv agent.hacky-dev-image-build --target-image=$IMAGE"
+          buildCommand: "deva inv agent.hacky-dev-image-build --target-image=$IMAGE"
       - image: clusteragent
         custom:
-          buildCommand: "inv cluster-agent.hacky-dev-image-build --target-image=$IMAGE"
+          buildCommand: "deva inv cluster-agent.hacky-dev-image-build --target-image=$IMAGE"
   - name: minikube
     activation:
     - kubeContext: minikube
@@ -58,8 +58,8 @@ profiles:
       - image: agent
         custom:
           buildCommand: "docker exec datadog_agent_devcontainer bash -c \"
-            inv agent.hacky-dev-image-build --target-image=$IMAGE\""
+            deva inv agent.hacky-dev-image-build --target-image=$IMAGE\""
       - image: clusteragent
         custom:
           buildCommand: "docker exec datadog_agent_devcontainer bash -c \"
-            inv cluster-agent.hacky-dev-image-build --target-image=$IMAGE\""
+            deva inv cluster-agent.hacky-dev-image-build --target-image=$IMAGE\""
diff --git a/tasks/agent.py b/tasks/agent.py
index 66da958ed93f2..e681c68fa9b5b 100644
--- a/tasks/agent.py
+++ b/tasks/agent.py
@@ -152,7 +152,7 @@ def build(
     the values from `invoke.yaml` will be used.
 
     Example invokation:
-        inv agent.build --build-exclude=systemd
+        deva inv agent.build --build-exclude=systemd
     """
     flavor = AgentFlavor[flavor]
 
@@ -399,7 +399,7 @@ def exec(
     """
     Execute 'agent <subcommand>' against the currently running Agent.
 
-    This works against an agent run via `inv agent.run`.
+    This works against an agent run via `deva inv agent.run`.
     Basically this just simplifies creating the path for both the agent binary and config.
     """
     agent_bin = os.path.join(BIN_PATH, bin_name("agent"))
@@ -743,7 +743,7 @@ def version(
         # In theory we'd need to have one format for each package type (deb, rpm, msi, pkg).
         # However, there are a few things that allow us in practice to have only one variable for everything:
         # - the deb and rpm safe version formats are identical (the only difference is an additional rule on Wind River Linux, which doesn't apply to us).
-        #   Moreover, of the two rules, we actually really only use the first one (because we always use inv agent.version --url-safe).
+        #   Moreover, of the two rules, we actually really only use the first one (because we always use deva inv agent.version --url-safe).
         # - the msi version name uses the raw version string. The only difference with the deb / rpm versions
         #   is therefore that dashes are replaced by tildes. We're already doing the reverse operation in agent-release-management
         #   to get the correct msi name.
diff --git a/tasks/cluster_agent.py b/tasks/cluster_agent.py
index ef13271863e3c..71daab93d7e95 100644
--- a/tasks/cluster_agent.py
+++ b/tasks/cluster_agent.py
@@ -41,7 +41,7 @@ def build(
     Build Cluster Agent
 
      Example invokation:
-        inv cluster-agent.build
+        deva inv cluster-agent.build
     """
     build_common(
         ctx,
diff --git a/tasks/cluster_agent_cloudfoundry.py b/tasks/cluster_agent_cloudfoundry.py
index e262b91c35880..1820cc26a50f2 100644
--- a/tasks/cluster_agent_cloudfoundry.py
+++ b/tasks/cluster_agent_cloudfoundry.py
@@ -19,7 +19,7 @@ def build(ctx, rebuild=False, build_include=None, build_exclude=None, race=False
     Build Cluster Agent for Cloud Foundry
 
      Example invokation:
-        inv cluster-agent-cloudfoundry.build
+        deva inv cluster-agent-cloudfoundry.build
     """
     build_common(
         ctx,
diff --git a/tasks/components.py b/tasks/components.py
index 0f2281742b714..1e7182c428a13 100644
--- a/tasks/components.py
+++ b/tasks/components.py
@@ -555,7 +555,7 @@ def lint_components(_, fix=False):
 
     if not ok:
         if fixable:
-            print("Run `inv components.lint-components --fix` to fix errors")
+            print("Run `deva inv components.lint-components --fix` to fix errors")
         raise Exit(code=1)
 
 
@@ -578,9 +578,9 @@ def new_bundle(_, bundle_path, overwrite=False, team="/* TODO: add team name */"
         - You can use the --team flag to set the team name for the new bundle.
 
     Examples:
-        inv components.new-bundle comp/foo/bar             # Create the 'bar' bundle in the 'comp/foo' folder
-        inv components.new-bundle comp/foo/bar --overwrite # Create the 'bar' bundle in the 'comp/foo' folder and overwrite 'comp/foo/bar/bundle{_test}.go' even if they already exist.
-        inv components.new-bundle /tmp/baz                 # Create the 'baz' bundle in the '/tmp/' folder. './comp' prefix is not enforced by the task.
+        deva inv components.new-bundle comp/foo/bar             # Create the 'bar' bundle in the 'comp/foo' folder
+        deva inv components.new-bundle comp/foo/bar --overwrite # Create the 'bar' bundle in the 'comp/foo' folder and overwrite 'comp/foo/bar/bundle{_test}.go' even if they already exist.
+        deva inv components.new-bundle /tmp/baz                 # Create the 'baz' bundle in the '/tmp/' folder. './comp' prefix is not enforced by the task.
     """
     template_var_mapping = {"BUNDLE_NAME": os.path.basename(bundle_path), "TEAM_NAME": team}
     create_components_framework_files(
@@ -599,9 +599,9 @@ def new_component(_, comp_path, overwrite=False, team="/* TODO: add team name */
         - You can use the --team flag to set the team name for the new component/
 
     Examples:
-        inv components.new-component comp/foo/bar             # Create the 'bar' component in the 'comp/foo' folder
-        inv components.new-component comp/foo/bar --overwrite # Create the 'bar' component in the 'comp/foo' folder and overwrite 'comp/foo/bar/component.go' even if it already exists
-        inv components.new-component /tmp/baz                 # Create the 'baz' component in the '/tmp/' folder. './comp' prefix is not enforced by the task.
+        deva inv components.new-component comp/foo/bar             # Create the 'bar' component in the 'comp/foo' folder
+        deva inv components.new-component comp/foo/bar --overwrite # Create the 'bar' component in the 'comp/foo' folder and overwrite 'comp/foo/bar/component.go' even if it already exists
+        deva inv components.new-component /tmp/baz                 # Create the 'baz' component in the '/tmp/' folder. './comp' prefix is not enforced by the task.
     """
     component_name = os.path.basename(comp_path)
     template_var_mapping = {
diff --git a/tasks/coverage.py b/tasks/coverage.py
index 956a51a61304a..d2926649689a2 100644
--- a/tasks/coverage.py
+++ b/tasks/coverage.py
@@ -106,7 +106,7 @@ def upload_to_codecov(
     """
     Uploads coverage data of all modules to Codecov.
     This expects that the coverage files have already been generated by
-    inv test --coverage.
+    deva inv test --coverage.
 
     Flags:   --pull-coverage-cache: [For dev branches] Pull the coverage cache from main parent commit.
              --push-coverage-cache: [For main]         Push the coverage cache to the S3 bucket.
@@ -149,7 +149,7 @@ def _get_coverage_cache_uri():
 
 def upload_coverage_to_s3(ctx: Context):
     """
-    Create an archive with all the coverage.out files from the inv test --coverage command.
+    Create an archive with all the coverage.out files from the deva inv test --coverage command.
     Then upload the archive to the dd-ci-persistent-artefacts-build-stable S3 bucket.
     """
 
diff --git a/tasks/debug.py b/tasks/debug.py
index 6b905f8213043..352be3eefe580 100644
--- a/tasks/debug.py
+++ b/tasks/debug.py
@@ -2,7 +2,6 @@
 from pathlib import Path
 
 from invoke import task
-from invoke.exceptions import Exit
 
 from tasks.libs.common.color import Color, color_message
 from tasks.vscode import VSCODE_DIR, VSCODE_LAUNCH_FILE
@@ -13,23 +12,18 @@ def debug(_, wait=True, host='localhost', port=5678):
     """
     Launch debugger to debug in vs-code or other IDEs using debugpy.
 
-    Usage to debug `inv invoke-unit-tests.run`:
-    > inv debug invoke-unit-tests.run
+    Usage to debug `deva inv invoke-unit-tests.run`:
+    > deva inv debug invoke-unit-tests.run
     > # In vscode, launch the debugger with the configuration "Remote Debug Tasks"
     > # The debugger is attached !
     """
-    try:
-        import debugpy
-    except ImportError as e:
-        raise Exit(
-            'debugpy is not installed, you should update your requirements within tasks/requirements.txt', code=1
-        ) from e
+    import debugpy
 
     os.environ['TASKS_DEBUG'] = '1'
 
     if not (Path(VSCODE_DIR) / VSCODE_LAUNCH_FILE).exists():
         print(
-            f"{color_message('warning:', Color.ORANGE)} {color_message('(For VS Code users)', Color.BLUE)} No launch.json file found, you should run `inv vscode.setup-launch` to have a debug configuration.",
+            f"{color_message('warning:', Color.ORANGE)} {color_message('(For VS Code users)', Color.BLUE)} No launch.json file found, you should run `deva inv vscode.setup-launch` to have a debug configuration.",
         )
 
     debugpy.listen((host, port))
diff --git a/tasks/devcontainer.py b/tasks/devcontainer.py
index 80ba2f581fd83..fca80d522b7a2 100644
--- a/tasks/devcontainer.py
+++ b/tasks/devcontainer.py
@@ -124,7 +124,7 @@ def setup(
     # onCreateCommond runs the install-tools and deps tasks only when the devcontainer is created and not each time
     # the container is started
     devcontainer["onCreateCommand"] = (
-        f"git config --global --add safe.directory {AGENT_REPOSITORY_PATH} && invoke -e install-tools && invoke -e deps"
+        f"git config --global --add safe.directory {AGENT_REPOSITORY_PATH} && deva inv -e install-tools && deva inv -e deps"
     )
 
     devcontainer["containerEnv"] = {
@@ -190,12 +190,14 @@ def start(ctx, path="."):
     Start the devcontainer
     """
     if not file().exists():
-        print(color_message("No devcontainer settings found.  Run `invoke devcontainer.setup` first.", Color.RED))
+        print(color_message("No devcontainer settings found.  Run `deva inv devcontainer.setup` first.", Color.RED))
         raise Exit(code=1)
 
     if not is_installed(ctx, "devcontainer"):
         print(
-            color_message("Devcontainer CLI is not installed.  Run `invoke install-devcontainer-cli` first.", Color.RED)
+            color_message(
+                "Devcontainer CLI is not installed.  Run `deva inv install-devcontainer-cli` first.", Color.RED
+            )
         )
         raise Exit(code=1)
 
@@ -209,7 +211,9 @@ def stop(ctx):
     """
     if not file().exists():
         print(
-            color_message("No devcontainer settings found. Run `inv devcontainer.setup` first and start it.", Color.RED)
+            color_message(
+                "No devcontainer settings found. Run `deva inv devcontainer.setup` first and start it.", Color.RED
+            )
         )
         raise Exit(code=1)
 
diff --git a/tasks/diff.py b/tasks/diff.py
index 37f63e5d57f20..2a6f2d709c934 100644
--- a/tasks/diff.py
+++ b/tasks/diff.py
@@ -253,7 +253,7 @@ def _list_tasks_rec(collection, prefix='', res=None):
 def _list_invoke_tasks(ctx) -> dict[str, str]:
     """Returns a dictionary of invoke tasks and their descriptions."""
 
-    tasks = json.loads(ctx.run('invoke --list -F json', hide=True).stdout)
+    tasks = json.loads(ctx.run('deva inv --list -F json', hide=True).stdout)
 
     # Remove 'tasks.' prefix
     return {name.removeprefix(tasks['name'] + '.'): desc for name, desc in _list_tasks_rec(tasks).items()}
diff --git a/tasks/github_tasks.py b/tasks/github_tasks.py
index 5c695d473d2cd..1cfe6203489bb 100644
--- a/tasks/github_tasks.py
+++ b/tasks/github_tasks.py
@@ -610,7 +610,7 @@ def add_required_checks(_, branch: str, check: str, force: bool = False):
         - A fine-grained token needs the "Administration" repository permissions (write).
 
     Use it like this:
-    inv github.add-required-checks --branch=main --check="dd-gitlab/lint_codeowners" --check="dd-gitlab/lint_components"
+    deva inv github.add-required-checks --branch=main --check="dd-gitlab/lint_codeowners" --check="dd-gitlab/lint_components"
     """
     from tasks.libs.ciproviders.github_api import GithubAPI
 
diff --git a/tasks/gitlab_helpers.py b/tasks/gitlab_helpers.py
index bb82fc683fa6f..cac28ddd4005d 100644
--- a/tasks/gitlab_helpers.py
+++ b/tasks/gitlab_helpers.py
@@ -34,7 +34,7 @@ def generate_ci_visibility_links(_ctx, output: str | None):
     """Generates links to CI Visibility for the current job.
 
     Usage:
-        $ inv gitlab.generate-ci-visibility-links
+        $ deva inv gitlab.generate-ci-visibility-links
     """
 
     ci_job_id = os.environ.get("CI_JOB_ID")
@@ -127,9 +127,9 @@ def print_pipeline(ctx, ids, repo='DataDog/datadog-agent', jq: str | None = None
     """Prints one or more Gitlab pipelines in JSON and potentially query them with jq.
 
     Usage:
-        $ inv gitlab.print-pipeline 1234
-        $ inv gitlab.print-pipeline 1234 -j .source
-        $ inv gitlab.print-pipeline 1234 -j .duration,.ref,.status,.sha
+        $ deva inv gitlab.print-pipeline 1234
+        $ deva inv gitlab.print-pipeline 1234 -j .source
+        $ deva inv gitlab.print-pipeline 1234 -j .duration,.ref,.status,.sha
     """
 
     def get_pipeline(repo, id):
@@ -143,11 +143,11 @@ def print_job(ctx, ids, repo='DataDog/datadog-agent', jq: str | None = None, jq_
     """Prints one or more Gitlab jobs in JSON and potentially query them with jq.
 
     Usage:
-        $ inv gitlab.print-job 1234
-        $ inv gitlab.print-job 1234 -j '.commit.id'
-        $ inv gitlab.print-job 1234 -j '.pipeline.id'
-        $ inv gitlab.print-job 1234 -j '.web_url.stage,.ref,.duration,.status'
-        $ inv gitlab.print-job 1234 -j '.artifacts | length'
+        $ deva inv gitlab.print-job 1234
+        $ deva inv gitlab.print-job 1234 -j '.commit.id'
+        $ deva inv gitlab.print-job 1234 -j '.pipeline.id'
+        $ deva inv gitlab.print-job 1234 -j '.web_url.stage,.ref,.duration,.status'
+        $ deva inv gitlab.print-job 1234 -j '.artifacts | length'
     """
 
     def get_job(repo, id):
@@ -173,8 +173,8 @@ def gen_config_subset(ctx, jobs, dry_run=False, force=False):
         force: Force the update of the .gitlab-ci.yml file even if it has been modified.
 
     Example:
-        $ inv gitlab.gen-config-subset tests_deb-arm64-py3
-        $ inv gitlab.gen-config-subset tests_rpm-arm64-py3,tests_deb-arm64-py3 --dry-run
+        $ deva inv gitlab.gen-config-subset tests_deb-arm64-py3
+        $ deva inv gitlab.gen-config-subset tests_rpm-arm64-py3,tests_deb-arm64-py3 --dry-run
     """
 
     jobs_to_keep = ['cancel-prev-pipelines', 'github_rate_limit_info', 'setup_agent_version']
diff --git a/tasks/go.py b/tasks/go.py
index f54fa762061f2..55808c876fe97 100644
--- a/tasks/go.py
+++ b/tasks/go.py
@@ -180,7 +180,7 @@ def lint_licenses(ctx):
                 """\
                 Licenses are not up-to-date.
 
-                Please run 'inv generate-licenses' to update {}."""
+                Please run 'deva inv generate-licenses' to update {}."""
             ).format(file),
             code=1,
         )
@@ -191,7 +191,7 @@ def lint_licenses(ctx):
 @task
 def generate_licenses(ctx, filename='LICENSE-3rdparty.csv', verbose=False):
     """
-    Generates the LICENSE-3rdparty.csv file. Run this if `inv lint-licenses` fails.
+    Generates the LICENSE-3rdparty.csv file. Run this if `deva inv lint-licenses` fails.
     """
     new_licenses = get_licenses_list(ctx, filename)
 
@@ -244,8 +244,8 @@ def check_go_mod_replaces(ctx, fix=False):
     if errors_found:
         message = "\nErrors found:\n"
         message += "\n".join("  - " + error for error in sorted(errors_found))
-        message += "\n\n Run `inv check-go-mod-replaces --fix` to fix the errors.\n"
-        message += "This task operates on go.sum files, so make sure to run `inv -e tidy` after fixing the errors."
+        message += "\n\n Run `deva inv check-go-mod-replaces --fix` to fix the errors.\n"
+        message += "This task operates on go.sum files, so make sure to run `deva inv -e tidy` after fixing the errors."
         raise Exit(message=message)
 
 
@@ -303,7 +303,7 @@ def check_mod_tidy(ctx, test_folder="testmodule"):
             if os.path.isfile(os.path.join(ctx.cwd, "main")):
                 os.remove(os.path.join(ctx.cwd, "main"))
 
-        raise_if_errors(errors_found, "Run 'inv tidy' to fix 'out of sync' errors.")
+        raise_if_errors(errors_found, "Run 'deva inv tidy' to fix 'out of sync' errors.")
 
 
 @task
diff --git a/tasks/go_deps.py b/tasks/go_deps.py
index b08560eaa8056..112922fc402b3 100644
--- a/tasks/go_deps.py
+++ b/tasks/go_deps.py
@@ -222,11 +222,11 @@ def graph(
 
     Usage:
         Dependency graph of the trace-agent on Linux
-          inv -e go-deps.graph --build trace-agent --os linux
+          deva inv -e go-deps.graph --build trace-agent --os linux
         Reachability graph of the process-agent on Linux to k8s.io/... dependencies
-          inv -e go-deps.graph --build process-agent --os linux --target k8s.io/...
+          deva inv -e go-deps.graph --build process-agent --os linux --target k8s.io/...
         Dependency graph of workloadmeta on Linux when using the same build tags as the core-agent
-          inv -e go-deps.graph --build agent --os linux --entrypoint github.com/DataDog/datadog-agent/comp/core/workloadmeta/...:all
+          deva inv -e go-deps.graph --build agent --os linux --entrypoint github.com/DataDog/datadog-agent/comp/core/workloadmeta/...:all
     """
     if shutil.which("goda") is None:
         raise Exit(
diff --git a/tasks/gotest.py b/tasks/gotest.py
index 6dd2edf538dbd..104dcb0893100 100644
--- a/tasks/gotest.py
+++ b/tasks/gotest.py
@@ -185,7 +185,7 @@ def coverage_flavor(
     """
     Prints the code coverage of all modules for the given flavor.
     This expects that the coverage files have already been generated by
-    inv test --coverage.
+    deva inv test --coverage.
     """
 
     def command(_empty_result, module, _module_result):
@@ -288,8 +288,8 @@ def test(
     If no module or target is set the tests are run against all modules and targets.
 
     Example invokation:
-        inv test --targets=./pkg/collector/check,./pkg/aggregator --race
-        inv test --module=. --race
+        deva inv test --targets=./pkg/collector/check,./pkg/aggregator --race
+        deva inv test --module=. --race
     """
     sanitize_env_vars()
 
@@ -853,7 +853,7 @@ def lint_go(
     include_sds=False,
     only_modified_packages=False,
 ):
-    raise Exit("This task is deprecated, please use `inv linter.go`", 1)
+    raise Exit("This task is deprecated, please use `deva inv linter.go`", 1)
 
 
 def rename_package(file_path, old_name, new_name):
diff --git a/tasks/install_tasks.py b/tasks/install_tasks.py
index a3525d5bea641..c90cf4ab3b65d 100644
--- a/tasks/install_tasks.py
+++ b/tasks/install_tasks.py
@@ -107,7 +107,7 @@ def install_shellcheck(ctx, version="0.8.0", destination="/usr/local/bin"):
 def install_protoc(ctx, version=None):
     """
     Installs the requested version of protoc in the specified folder (by default /usr/local/bin).
-    Required generate the golang code based on .prod (inv protobuf.generate).
+    Required generate the golang code based on .prod (deva inv protobuf.generate).
     """
     if version is None:
         version_file = ".protoc-version"
diff --git a/tasks/installer.py b/tasks/installer.py
index d88065820f7ab..a3a55053f27ac 100644
--- a/tasks/installer.py
+++ b/tasks/installer.py
@@ -134,7 +134,7 @@ def push_artifact(
     '''
     Pushes an OCI artifact to a registry.
     example:
-        inv -e installer.push-artifact --artifact "datadog-installer" --registry "docker.io/myregistry" --tag "latest"
+        deva inv -e installer.push-artifact --artifact "datadog-installer" --registry "docker.io/myregistry" --tag "latest"
     '''
     if version == "":
         version = get_version(ctx, include_git=True, url_safe=True, major_version='7', include_pipeline_id=True)
diff --git a/tasks/kernel_matrix_testing/README.md b/tasks/kernel_matrix_testing/README.md
index dcc971585d015..bd3ef0d8d052c 100644
--- a/tasks/kernel_matrix_testing/README.md
+++ b/tasks/kernel_matrix_testing/README.md
@@ -38,22 +38,22 @@ This will download all the resources required to launch the VMs, and install all
 > This step should be done only once.
 
 ```bash
-inv -e kmt.init
+deva inv -e kmt.init
 ```
 
 > You may significantly speed up this part by only downloading specific VM images. Refer to [Listing possible VMs](#Listing Possible VMs) to see how to list available images and how to provide their names.
 
 ```bash
-inv -e kmt.init --images=ubuntu_22.04,debian_10
+deva inv -e kmt.init --images=ubuntu_22.04,debian_10
 ```
 
 > You may skip the downloading part if you are not setting up VMs locally.
 
 ```bash
-inv -e kmt.init --lite
+deva inv -e kmt.init --lite
 ```
 
-This command will also ask you for the default SSH key to use, so it does not need to be provided every time. You can configure the SSH key again at any time running `inv -e kmt.config-ssh-key`. See more details below
+This command will also ask you for the default SSH key to use, so it does not need to be provided every time. You can configure the SSH key again at any time running `deva inv -e kmt.config-ssh-key`. See more details below
 
 #### SSH key configuration
 
@@ -70,7 +70,7 @@ In all cases, you will be able to input a key name for AWS, in case the keypair
 ### Create stack
 
 ```bash
-inv -e kmt.create-stack --stack=demo-stack
+deva inv -e kmt.create-stack --stack=demo-stack
 ```
 
 ### Configure stack
@@ -81,7 +81,7 @@ We will configure the stack to launch
 - Remote arm64 machine with amazon linux 2 kernel 4.14, amazon linux 2 kernel 5.10 VMs.
 
 ```bash
-inv -e kmt.gen-config --vms=x86-jammy-distro,x86-focal-distro,arm64-amazon4.14-distro,arm64-amazon5.10-distro --stack=demo-stack
+deva inv -e kmt.gen-config --vms=x86-jammy-distro,x86-focal-distro,arm64-amazon4.14-distro,arm64-amazon5.10-distro --stack=demo-stack
 ```
 
 We can also configure the stack to launch VMs locally, i.e. on developer's machine. The VMs will have the same architecture as the local host environment.
@@ -90,7 +90,7 @@ We can also configure the stack to launch VMs locally, i.e. on developer's machi
 - Local debian 9 VM.
 
 ```bash
-inv -e kmt.gen-config --vms=amzn5.10-local-distro,fedora38-local-distro,debian9-local-distro --stack=demo-stack
+deva inv -e kmt.gen-config --vms=amzn5.10-local-distro,fedora38-local-distro,debian9-local-distro --stack=demo-stack
 ```
 
 Refer to [Configuring the stack](#Configuring the stack) for more details on this command.
@@ -101,7 +101,7 @@ Refer to [Configuring the stack](#Configuring the stack) for more details on thi
 A common use case is to configure the stack to replicate the jobs that failed in a CI pipeline. This can be easily done by using the `--from-ci-pipeline` flag, using the ID of the pipeline that failed in Gitlab as the argument:
 
 ```bash
-inv -e kmt.gen-config --from-ci-pipeline=<pipeline-id> --use-local-if-possible --stack=demo-stack
+deva inv -e kmt.gen-config --from-ci-pipeline=<pipeline-id> --use-local-if-possible --stack=demo-stack
 ```
 
 The `--use-local-if-possible` flag will attempt to use local VMs if they are available, and only use remote VMs if the local ones are not available.
@@ -111,7 +111,7 @@ The `--use-local-if-possible` flag will attempt to use local VMs if they are ava
 This will bring up all the VMs previously configured.
 
 ```bash
-inv -e kmt.launch-stack --stack=demo-stack
+deva inv -e kmt.launch-stack --stack=demo-stack
 ```
 
 ### Connecting to VMs
@@ -121,7 +121,7 @@ inv -e kmt.launch-stack --stack=demo-stack
 You can generate a SSH config file to connect to the VMs using the following command:
 
 ```bash
-inv -e kmt.ssh-config > ~/.ssh/kmt_ssh_config
+deva inv -e kmt.ssh-config > ~/.ssh/kmt_ssh_config
 ```
 
 This will generate a file `kmt_ssh_config` in the `~/.ssh` directory, which you can include in your config by using the line `Include ~/.ssh/kmt_ssh_config` in your `~/.ssh/config` file. Then you can then connect to the VMs using the following command:
@@ -139,7 +139,7 @@ This is the recommended approach, as it automatically configures the proxy jumps
 You can connect manually to the VMs using the IP addresses printed by the following command:
 
 ```bash
-inv -e kmt.status --stack=demo-stack
+deva inv -e kmt.status --stack=demo-stack
 ```
 
 To connect to the VM first ssh to the remote machine, if required.
@@ -161,7 +161,7 @@ A useful command for tmux in these cases is `:set synchronize-panes on`, which w
 Tear down the stack
 
 ```bash
-inv -e kmt.destroy-stack --stack=demo-stack
+deva inv -e kmt.destroy-stack --stack=demo-stack
 ```
 
 This will attempt to manually teardown all resources. Primarily we care about cleaning the local libvirt environment and destroy remote ec2 instances.
@@ -171,13 +171,13 @@ This will attempt to manually teardown all resources. Primarily we care about cl
 ### Initializing environment
 
 ```bash
-inv -e kmt.init
+deva inv -e kmt.init
 ```
 
 If you only want to initialize the directory structure, you may do a 'lite' setup as follows:
 
 ```bash
-inv -e kmt.init --lite
+deva inv -e kmt.init --lite
 ```
 
 ### Updating resources
@@ -185,7 +185,7 @@ inv -e kmt.init --lite
 In order to update the resources for launching VMs run:
 
 ```bash
-inv -e kmt.update-resources
+deva inv -e kmt.update-resources
 ```
 
 Updating will first destroy all running stacks, and then use checksums to decide which packages need to be updated from S3.
@@ -196,7 +196,7 @@ If there is an error during update, original packages are restored from backup.
 A stack can be created as follows:
 
 ```bash
-inv -e kmt.create-stack [--stack=<name>]
+deva inv -e kmt.create-stack [--stack=<name>]
 ```
 
 The developer can provide a name to associate with the `stack`.
@@ -207,7 +207,7 @@ If no name is provided one is automatically generated from the current branch na
 Possible VMs can be listed with
 
 ```bash
-inv -e kmt.ls
+deva inv -e kmt.ls
 ```
 
 The arguments to this are:
@@ -245,39 +245,39 @@ The file can be incrementally generated. This means a user may generate a vmset
 
 ```bash
 # Setup configuration file to launch jammy and focal locally. Initialize a new stack corresponding to the current branch
-inv -e kmt.gen-config  --vms=jammy-local-distro,focal-local-distro --init-stack
+deva inv -e kmt.gen-config  --vms=jammy-local-distro,focal-local-distro --init-stack
 # Launch this stack. Since we are launching local VMs, there is no need to specify ssh key.
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 # Add amazon linux VMs to be launched locally
-inv -e kmt.gen-config  --vms=amazon4.14-local-distro,distro-local-amazon5.15,distro-local-amazon5.10
+deva inv -e kmt.gen-config  --vms=amazon4.14-local-distro,distro-local-amazon5.15,distro-local-amazon5.10
 # Launch the new VMs added. The previous VMs will keep running
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 # Remove all VMs except amazon linux 2 4.14 locally
-inv -e kmt.gen-config  --new --vms=amazon4.14-local-distro
+deva inv -e kmt.gen-config  --new --vms=amazon4.14-local-distro
 # Apply this configuration
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 ```
 
 #### Example 2
 
 ```bash
 # Setup configuration file to launch ubuntu VMs on remote x86_64 and arm64 machines
-inv -e kmt.gen-config  --vms=x86-ubuntu20-distro,distro-bionic-x86,distro-jammy-x86,distro-arm64-ubuntu22,arm64-ubuntu18-distro
+deva inv -e kmt.gen-config  --vms=x86-ubuntu20-distro,distro-bionic-x86,distro-jammy-x86,distro-arm64-ubuntu22,arm64-ubuntu18-distro
 # Name of the ssh key to use
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 # Add amazon linux
-inv -e kmt.gen-config  --vms=x86-amazon5.4-disto,arm64-distro-amazon5.4
+deva inv -e kmt.gen-config  --vms=x86-amazon5.4-disto,arm64-distro-amazon5.4
 # Name of the ssh key to use
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 ```
 
 #### Example 3
 
 ```bash
 # Configure custom kernels
-inv -e kmt.gen-config  --vms=custom-5.4-local,custom-4.14-local,custom-5.7-arm64
+deva inv -e kmt.gen-config  --vms=custom-5.4-local,custom-4.14-local,custom-5.7-arm64
 # Launch stack
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 ```
 
 ### VMs List
@@ -321,17 +321,17 @@ All of the below resolve to [kernel 5.4, arm64, custom]
 If you are just launching local VMs you do not need to specify an ssh key
 
 ```bash
-inv -e kmt.launch-stack
+deva inv -e kmt.launch-stack
 ```
 
-If you are launching remote instances then the ssh key used to access the machine is required. This is usually configured with the `inv -e kmt.config-ssh-key` and does not need to be provided manually. However, you can provide a specific key for use with the `--ssh-key` argument. There are several possible values for this argument:
+If you are launching remote instances then the ssh key used to access the machine is required. This is usually configured with the `deva inv -e kmt.config-ssh-key` and does not need to be provided manually. However, you can provide a specific key for use with the `--ssh-key` argument. There are several possible values for this argument:
 
 - A path pointing the private key
 - The filename of a private key located in `~/.ssh`. For example, if you pass `--ssh-key=id_ed25519`, we will look for keys `~/.ssh/id_ed25519` or `~/.ssh/id_ed25519.pem`.
 - A key name (the third part of the public key file). We will look for public key files in `~/.ssh/*.pub` and in the current SSH agent and try to find one matching that name.
 
 ```bash
-inv -e kmt.launch-stack  --ssh-key=<ssh-key-name>
+deva inv -e kmt.launch-stack  --ssh-key=<ssh-key-name>
 ```
 
 If you are launching local VMs, you will be queried for your password. This is required since the program has to run some commands as root. However, we do not run the entire scenario with `sudo` to avoid broken permissions.
@@ -341,7 +341,7 @@ If you are launching local VMs, you will be queried for your password. This is r
 Prints information about the stack.
 
 ```bash
-inv -e kmt.status [--stack=<name>]
+deva inv -e kmt.status [--stack=<name>]
 ```
 
 > At the moment this just prints the running VMs and their IP addresses. This information will be enriched in later versions of the tool.
@@ -352,19 +352,19 @@ KMT is intended to easily run the testsuite across a kernel/distribution matrix.
 Developers can easily run tests against VMs transparently using the provided invoke tasks.
 
 ```bash
-inv -e kmt.test --vms=<vms-list>
+deva inv -e kmt.test --vms=<vms-list>
 ```
 
 Similar to `system-probe.tests`, tests can be run against specific packages, and can also be filtered down to specific tests via a regex.
 
 ```bash
-inv -e kmt.test --vms=jammy-local-distro --packages=./pkg/network/tracer --run="TestTracerSuite/prebuilt/TestDNSStats/valid_domain"
+deva inv -e kmt.test --vms=jammy-local-distro --packages=./pkg/network/tracer --run="TestTracerSuite/prebuilt/TestDNSStats/valid_domain"
 ```
 
 Various other parameters are provided to control different aspects of running the test. Refer to the help for this invoke task for more information.
 
 ```bash
-inv --help=kmt.test
+deva inv --help=kmt.test
 ```
 
 ### Building system-probe
@@ -372,7 +372,7 @@ inv --help=kmt.test
 System probe can be built locally and shared with specified VMs.
 
 ```bash
-inv -e kmt.build --vms=<vms-list>
+deva inv -e kmt.build --vms=<vms-list>
 ```
 
 This command will share a [default configuration](./default-system-probe.yaml) for system-probe with all the VMs.
@@ -382,7 +382,7 @@ This command will share a [default configuration](./default-system-probe.yaml) f
 This is only relevant for VMs running in the local environment. This has no effect on VMs running on remote instances. Pausing the stack essentially stops the running VMs and frees their resources. However, the VM environment is left intact so that it may be brought up again.
 
 ```bash
-inv -e kmt.pause
+deva inv -e kmt.pause
 ```
 
 ### Resuming the stack
@@ -390,7 +390,7 @@ inv -e kmt.pause
 This resumes a previously paused stack. This is only applicable for VMs running locally.
 
 ```bash
-inv -e kmt.resume
+deva inv -e kmt.resume
 ```
 
 ## Interacting with the CI
@@ -406,7 +406,7 @@ To avoid having to copy and paste all the data from the CI to generate a list of
 To get a summary of the tests that were run in a CI pipeline, you can use the following command:
 
 ```bash
-inv -e kmt.explain-ci-failure <pipeline-id>
+deva inv -e kmt.explain-ci-failure <pipeline-id>
 ```
 
 This will show several tables, skipping the cases where all jobs/tests passed to avoid polluting the output.
@@ -441,9 +441,9 @@ An example of an alien VMs profile:
 
 To target these alien profiles use the `--alien-vms` flag to provide the path to this profile file.
 ```
-inv -e kmt.build --alien-vms=/tmp/alien.profile
+deva inv -e kmt.build --alien-vms=/tmp/alien.profile
 ```
 
 ```
-inv -e kmt.test --packages=./pkg/ebpf --run=TestLockRanges/Hashmap --alien-vms=./alien.profile
+deva inv -e kmt.test --packages=./pkg/ebpf --run=TestLockRanges/Hashmap --alien-vms=./alien.profile
 ```
diff --git a/tasks/kernel_matrix_testing/compiler.py b/tasks/kernel_matrix_testing/compiler.py
index c9fc615f5c81d..d5467b3577d68 100644
--- a/tasks/kernel_matrix_testing/compiler.py
+++ b/tasks/kernel_matrix_testing/compiler.py
@@ -185,12 +185,6 @@ def start(self) -> None:
         self.exec("echo conda activate ddpy3 >> /home/compiler/.bashrc", user="compiler")
         self.exec(f"install -d -m 0777 -o {uid} -g {uid} /go", user="root")
 
-        # Install requirements only for building in CI (not libvirt)
-        self.exec(
-            f"pip install -r {CONTAINER_AGENT_PATH}/tasks/kernel_matrix_testing/requirements-ci.txt",
-            user="compiler",
-        )
-
         self.prepare_for_cross_compile()
 
     def ensure_ready_for_cross_compile(self):
diff --git a/tasks/kernel_matrix_testing/init_kmt.py b/tasks/kernel_matrix_testing/init_kmt.py
index f94bbe9e09f9a..b00b89ea4e5f8 100644
--- a/tasks/kernel_matrix_testing/init_kmt.py
+++ b/tasks/kernel_matrix_testing/init_kmt.py
@@ -34,9 +34,6 @@ def init_kernel_matrix_testing_system(ctx: Context, lite: bool, images):
         if resp.lower().strip() != "y":
             raise Exit("Aborted by user")
 
-    reqs_file = Path(__file__).parent / "requirements.txt"
-    ctx.run(f"pip3 install -r {reqs_file.absolute()}")
-
     if shutil.which("pulumi") is None:
         if Path("~/.pulumi/bin/pulumi").expanduser().exists():
             raise Exit("pulumi is installed in ~/.pulumi/bin/pulumi, but not in $PATH. Add it to $PATH.")
diff --git a/tasks/kernel_matrix_testing/selftest.py b/tasks/kernel_matrix_testing/selftest.py
index 7bf347cda9917..19bb6ef1b5f12 100644
--- a/tasks/kernel_matrix_testing/selftest.py
+++ b/tasks/kernel_matrix_testing/selftest.py
@@ -46,9 +46,9 @@ def selftest_platforms_json(ctx: Context, _: bool) -> SelftestResult:
     if len(image_vers) != 1:
         return False, f"Multiple image versions found: {image_vers}"
 
-    res = ctx.run("inv -e kmt.ls", hide=True, warn=True)
+    res = ctx.run("deva inv -e kmt.ls", hide=True, warn=True)
     if res is None or not res.ok:
-        return False, "Cannot run inv -e kmt.ls, platforms.json file might be incorrect"
+        return False, "Cannot run deva inv -e kmt.ls, platforms.json file might be incorrect"
     return True, "platforms.json file exists, is readable and is correct"
 
 
@@ -68,14 +68,16 @@ def selftest_prepare(ctx: Context, _: bool, component: Component, cross_compile:
 
     vms = f"{target.name}-debian11-distro"
 
-    ctx.run(f"inv kmt.destroy-stack --stack={stack}", warn=True)
-    res = ctx.run(f"inv -e kmt.gen-config --stack={stack} --vms={vms} --init-stack --yes", warn=True)
+    ctx.run(f"deva inv kmt.destroy-stack --stack={stack}", warn=True)
+    res = ctx.run(f"deva inv -e kmt.gen-config --stack={stack} --vms={vms} --init-stack --yes", warn=True)
     if res is None or not res.ok:
-        return None, "Cannot generate config with inv kmt.gen-config"
+        return None, "Cannot generate config with deva inv kmt.gen-config"
 
-    res = ctx.run(f"inv -e kmt.prepare --stack={stack} --component={component} --compile-only {arch_arg}", warn=True)
+    res = ctx.run(
+        f"deva inv -e kmt.prepare --stack={stack} --component={component} --compile-only {arch_arg}", warn=True
+    )
     if res is None or not res.ok:
-        return False, "Cannot run inv -e kmt.prepare"
+        return False, "Cannot run deva inv -e kmt.prepare"
 
     paths = KMTPaths(f"{stack}-ddvm", target)
     testpath = paths.secagent_tests if component == "security-agent" else paths.sysprobe_tests
@@ -108,7 +110,7 @@ def selftest_prepare(ctx: Context, _: bool, component: Component, cross_compile:
     if binary_arch != target:
         return False, f"Binary {test_binary} has unexpected arch {binary_arch} instead of {target}"
 
-    return True, f"inv -e kmt.prepare ran successfully for {component}"
+    return True, f"deva inv -e kmt.prepare ran successfully for {component}"
 
 
 def selftest_multiarch_test(ctx: Context, allow_infra_changes: bool) -> SelftestResult:
@@ -118,22 +120,24 @@ def selftest_multiarch_test(ctx: Context, allow_infra_changes: bool) -> Selftest
     if not allow_infra_changes:
         return None, "Skipping multiarch test, infra changes not allowed"
 
-    ctx.run(f"inv kmt.destroy-stack --stack={stack}", warn=True, hide=True)
-    res = ctx.run(f"inv -e kmt.gen-config --stack={stack} --vms={vms} --init-stack --yes", warn=True)
+    ctx.run(f"deva inv kmt.destroy-stack --stack={stack}", warn=True, hide=True)
+    res = ctx.run(f"deva inv -e kmt.gen-config --stack={stack} --vms={vms} --init-stack --yes", warn=True)
     if res is None or not res.ok:
-        return None, "Cannot generate config with inv kmt.gen-config"
+        return None, "Cannot generate config with deva inv kmt.gen-config"
 
-    res = ctx.run(f"inv kmt.launch-stack --stack={stack}", warn=True)
+    res = ctx.run(f"deva inv kmt.launch-stack --stack={stack}", warn=True)
     if res is None or not res.ok:
-        return None, "Cannot create stack with inv kmt.create-stack"
+        return None, "Cannot create stack with deva inv kmt.create-stack"
 
     # We just test the printk patcher as it's simple, owned by eBPF platform,
     # loads eBPF files and does not depend on other components
-    res = ctx.run(f"inv -e kmt.test --stack={stack} --packages=pkg/ebpf --run='.*TestPatchPrintkNewline.*'", warn=True)
+    res = ctx.run(
+        f"deva inv -e kmt.test --stack={stack} --packages=pkg/ebpf --run='.*TestPatchPrintkNewline.*'", warn=True
+    )
     if res is None or not res.ok:
-        return False, "Cannot run inv -e kmt.test"
+        return False, "Cannot run deva inv -e kmt.test"
 
-    return True, "inv -e kmt.test ran successfully for multiarch"
+    return True, "deva inv -e kmt.test ran successfully for multiarch"
 
 
 def selftest(ctx: Context, allow_infra_changes: bool = False, filter: str | None = None):
diff --git a/tasks/kernel_matrix_testing/stacks.py b/tasks/kernel_matrix_testing/stacks.py
index 2c720ce80b6d3..0e0bc2c29790b 100644
--- a/tasks/kernel_matrix_testing/stacks.py
+++ b/tasks/kernel_matrix_testing/stacks.py
@@ -24,7 +24,7 @@
     resource_in_stack,
     resume_domains,
 )
-from tasks.kernel_matrix_testing.tool import Exit, NoLibvirt, error, info, warn
+from tasks.kernel_matrix_testing.tool import Exit, error, info, warn
 from tasks.kernel_matrix_testing.vars import VMCONFIG
 
 if TYPE_CHECKING:
@@ -71,7 +71,7 @@ def vm_config_exists(stack: str):
 
 def create_stack(ctx: Context, stack: str | None = None):
     if not os.path.exists(f"{get_kmt_os().stacks_dir}"):
-        raise Exit("Kernel matrix testing environment not correctly setup. Run 'inv kmt.init'.")
+        raise Exit("Kernel matrix testing environment not correctly setup. Run 'deva inv kmt.init'.")
 
     stack = check_and_get_stack(stack)
 
@@ -187,10 +187,10 @@ def launch_stack(
 ):
     stack = check_and_get_stack(stack)
     if not stack_exists(stack):
-        raise Exit(f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'")
+        raise Exit(f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'")
 
     if not vm_config_exists(stack):
-        raise Exit(f"No {VMCONFIG} for stack {stack}. Refer to 'inv kmt.gen-config --help'")
+        raise Exit(f"No {VMCONFIG} for stack {stack}. Refer to 'deva inv kmt.gen-config --help'")
 
     stack_dir = f"{get_kmt_os().stacks_dir}/{stack}"
     vm_config = f"{stack_dir}/{VMCONFIG}"
@@ -238,7 +238,7 @@ def launch_stack(
         local,
         provision,
     ]
-    ctx.run(f"{' '.join(env)} {prefix} inv -e system-probe.start-microvms {' '.join(args)}")
+    ctx.run(f"{' '.join(env)} {prefix} deva inv -e system-probe.start-microvms {' '.join(args)}")
 
     info(f"[+] Stack {stack} successfully setup")
 
@@ -263,7 +263,7 @@ def destroy_stack_pulumi(ctx: Context, stack: str, ssh_key: str | None):
 
     env_vars = ' '.join(env)
     ctx.run(
-        f"{env_vars} {prefix} inv system-probe.start-microvms --infra-env=aws/sandbox --stack-name={stack} --destroy --local"
+        f"{env_vars} {prefix} deva inv system-probe.start-microvms --infra-env=aws/sandbox --stack-name={stack} --destroy --local"
     )
 
 
@@ -336,9 +336,6 @@ def destroy_stack_force(ctx: Context, stack: str):
     vm_config = os.path.join(stack_dir, VMCONFIG)
 
     if os.path.exists(vm_config) and local_vms_in_config(vm_config):
-        if libvirt is None:
-            raise NoLibvirt()
-
         conn = libvirt.open(get_kmt_os().libvirt_socket)
         if not conn:
             raise Exit("destroy_stack_force: Failed to open connection to qemu:///system")
@@ -379,7 +376,7 @@ def destroy_stack_force(ctx: Context, stack: str):
 def destroy_stack(ctx: Context, stack: str | None, pulumi: bool, ssh_key: str | None):
     stack = check_and_get_stack(stack)
     if not stack_exists(stack):
-        raise Exit(f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'")
+        raise Exit(f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'")
 
     info(f"[*] Destroying stack {stack}")
     if pulumi:
@@ -393,9 +390,7 @@ def destroy_stack(ctx: Context, stack: str | None, pulumi: bool, ssh_key: str |
 def pause_stack(stack: str | None = None):
     stack = check_and_get_stack(stack)
     if not stack_exists(stack):
-        raise Exit(f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'")
-    if libvirt is None:
-        raise NoLibvirt()
+        raise Exit(f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'")
     conn = libvirt.open(get_kmt_os().libvirt_socket)
     pause_domains(conn, stack)
     conn.close()
@@ -404,17 +399,13 @@ def pause_stack(stack: str | None = None):
 def resume_stack(stack=None):
     stack = check_and_get_stack(stack)
     if not stack_exists(stack):
-        raise Exit(f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'")
-    if libvirt is None:
-        raise NoLibvirt()
+        raise Exit(f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'")
     conn = libvirt.open(get_kmt_os().libvirt_socket)
     resume_domains(conn, stack)
     conn.close()
 
 
 def read_libvirt_sock():
-    if libvirt is None:
-        raise NoLibvirt()
     conn = libvirt.open(get_kmt_os().libvirt_socket)
     if not conn:
         raise Exit("read_libvirt_sock: Failed to open connection to qemu:///system")
@@ -443,8 +434,6 @@ def read_libvirt_sock():
 
 
 def write_libvirt_sock():
-    if libvirt is None:
-        raise NoLibvirt()
     conn = libvirt.open(get_kmt_os().libvirt_socket)
     if not conn:
         raise Exit("write_libvirt_sock: Failed to open connection to qemu:///system")
diff --git a/tasks/kernel_matrix_testing/tool.py b/tasks/kernel_matrix_testing/tool.py
index 69502ce2b266f..72bd82f5cbcf5 100644
--- a/tasks/kernel_matrix_testing/tool.py
+++ b/tasks/kernel_matrix_testing/tool.py
@@ -48,12 +48,6 @@ def Exit(msg: str):
     return ie.Exit(colored(msg, "red"))
 
 
-def NoLibvirt():
-    return Exit(
-        "libvirt python module not installed. Install with 'pip install -r tasks/kernel_matrix_testing/requirements.txt'"
-    )
-
-
 def is_root():
     return os.getuid() == 0
 
diff --git a/tasks/kernel_matrix_testing/vmconfig.py b/tasks/kernel_matrix_testing/vmconfig.py
index e75161dbf427d..0ba14cf274847 100644
--- a/tasks/kernel_matrix_testing/vmconfig.py
+++ b/tasks/kernel_matrix_testing/vmconfig.py
@@ -655,7 +655,7 @@ def gen_config_for_stack(
     stack = check_and_get_stack(stack)
     if not stack_exists(stack) and not init_stack:
         raise Exit(
-            f"Stack {stack} does not exist. Please create stack first 'inv kmt.create-stack --stack={stack}', or specify --init-stack option to the current command"
+            f"Stack {stack} does not exist. Please create stack first 'deva inv kmt.create-stack --stack={stack}', or specify --init-stack option to the current command"
         )
 
     if init_stack:
diff --git a/tasks/kmt.py b/tasks/kmt.py
index 5a8cdf588200d..2c8c9f1a84e71 100644
--- a/tasks/kmt.py
+++ b/tasks/kmt.py
@@ -112,7 +112,7 @@ def create_stack(ctx, stack=None):
         "vcpu": "Comma separated list of CPUs, to launch each VM with",
         "memory": "Comma separated list of memory to launch each VM with. Automatically rounded up to power of 2",
         "new": "Generate new configuration file instead of appending to existing one within the provided stack",
-        "init-stack": "Automatically initialize stack if not present. Equivalent to calling 'inv -e kmt.create-stack [--stack=<stack>]'",
+        "init-stack": "Automatically initialize stack if not present. Equivalent to calling 'deva inv -e kmt.create-stack [--stack=<stack>]'",
         "from-ci-pipeline": "Generate a vmconfig.json file with the VMs that failed jobs in pipeline with the given ID.",
         "use-local-if-possible": "(Only when --from-ci-pipeline is used) If the VM is for the same architecture as the host, use the local VM instead of the remote one.",
         "vmconfig_template": "Template to use for the generated vmconfig.json file. Defaults to 'system-probe'. A file named 'vmconfig-<vmconfig_template>.json' must exist in 'tasks/new-e2e/system-probe/config/'",
@@ -286,7 +286,7 @@ def gen_config_from_ci_pipeline(
         ctx, stack, ",".join(vms), "", init_stack, vcpu, memory, new, ci, arch, output_file, vmconfig_template, yes=yes
     )
     info("[+] You can run the following command to execute only packages with failed tests")
-    print(f"inv kmt.test --packages=\"{','.join(failed_packages)}\" --run='^{'|'.join(failed_tests)}$'")
+    print(f"deva inv kmt.test --packages=\"{','.join(failed_packages)}\" --run='^{'|'.join(failed_tests)}$'")
 
 
 @task
@@ -301,7 +301,7 @@ def launch_stack(
 ):
     stack = check_and_get_stack(stack)
     if not stacks.stack_exists(stack):
-        raise Exit(f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'")
+        raise Exit(f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'")
 
     stacks.launch_stack(ctx, stack, ssh_key, x86_ami, arm_ami, provision_microvms)
     if provision_script is not None:
@@ -317,7 +317,7 @@ def provision_stack(
 ):
     stack = check_and_get_stack(stack)
     if not stacks.stack_exists(stack):
-        raise Exit(f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'")
+        raise Exit(f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'")
 
     ssh_key_obj = try_get_ssh_key(ctx, ssh_key)
     infra = build_infrastructure(stack, ssh_key_obj)
@@ -746,7 +746,7 @@ def prepare(
         if alien_vms is not None:
             err_msg = f"no alient VMs discovered from provided profile {alien_vms}."
         else:
-            err_msg = f"no vms found from list {vms}. Run `inv -e kmt.status` to see all VMs in current stack"
+            err_msg = f"no vms found from list {vms}. Run `deva inv -e kmt.status` to see all VMs in current stack"
         stack = get_kmt_or_alien_stack(ctx, stack, vms, alien_vms)
         domains = get_target_domains(ctx, stack, ssh_key, arch_obj, vms, alien_vms)
         assert len(domains) > 0, err_msg
@@ -783,7 +783,7 @@ def _prepare(
             kmt_secagent_prepare(ctx, stack, arch_obj, packages, verbose, ci)
         else:
             cc.exec(
-                f"git config --global --add safe.directory {CONTAINER_AGENT_PATH} && inv {inv_echo} kmt.kmt-secagent-prepare --stack={stack} {pkgs} --arch={arch_obj.name}",
+                f"git config --global --add safe.directory {CONTAINER_AGENT_PATH} && deva inv {inv_echo} kmt.kmt-secagent-prepare --stack={stack} {pkgs} --arch={arch_obj.name}",
                 run_dir=CONTAINER_AGENT_PATH,
             )
     elif component == "system-probe":
@@ -791,7 +791,7 @@ def _prepare(
             kmt_sysprobe_prepare(ctx, arch_obj, ci=True)
         else:
             cc.exec(
-                f"git config --global --add safe.directory {CONTAINER_AGENT_PATH} && inv {inv_echo} kmt.kmt-sysprobe-prepare --stack={stack} {pkgs} --arch={arch_obj.name}",
+                f"git config --global --add safe.directory {CONTAINER_AGENT_PATH} && deva inv {inv_echo} kmt.kmt-sysprobe-prepare --stack={stack} {pkgs} --arch={arch_obj.name}",
                 run_dir=CONTAINER_AGENT_PATH,
             )
     else:
@@ -1190,7 +1190,7 @@ def test(
     if alien_vms is not None:
         err_msg = f"no alient VMs discovered from provided profile {alien_vms}."
     else:
-        err_msg = f"no vms found from list {vms}. Run `inv -e kmt.status` to see all VMs in current stack"
+        err_msg = f"no vms found from list {vms}. Run `deva inv -e kmt.status` to see all VMs in current stack"
 
     assert len(domains) > 0, err_msg
 
@@ -1275,7 +1275,7 @@ def get_kmt_or_alien_stack(ctx, stack, vms, alien_vms):
     stack = check_and_get_stack(stack)
     assert stacks.stack_exists(
         stack
-    ), f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'"
+    ), f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'"
     return stack
 
 
@@ -1315,11 +1315,11 @@ def build(
     cc = get_compiler(ctx)
 
     inv_echo = "-e" if ctx.config.run["echo"] else ""
-    cc.exec(f"cd {CONTAINER_AGENT_PATH} && inv {inv_echo} system-probe.object-files")
+    cc.exec(f"cd {CONTAINER_AGENT_PATH} && deva inv {inv_echo} system-probe.object-files")
 
     build_task = "build-sysprobe-binary" if component == "system-probe" else "build"
     cc.exec(
-        f"cd {CONTAINER_AGENT_PATH} && git config --global --add safe.directory {CONTAINER_AGENT_PATH} && inv {inv_echo} {component}.{build_task} --arch={arch_obj.name}",
+        f"cd {CONTAINER_AGENT_PATH} && git config --global --add safe.directory {CONTAINER_AGENT_PATH} && deva inv {inv_echo} {component}.{build_task} --arch={arch_obj.name}",
     )
 
     cc.exec(f"tar cf {CONTAINER_AGENT_PATH}/kmt-deps/{stack}/build-embedded-dir.tar {EMBEDDED_SHARE_DIR}")
@@ -1333,7 +1333,7 @@ def build(
     if alien_vms is not None:
         err_msg = f"no alient VMs discovered from provided profile {alien_vms}."
     else:
-        err_msg = f"no vms found from list {vms}. Run `inv -e kmt.status` to see all VMs in current stack"
+        err_msg = f"no vms found from list {vms}. Run `deva inv -e kmt.status` to see all VMs in current stack"
 
     assert len(domains) > 0, err_msg
 
@@ -1364,7 +1364,7 @@ def clean(ctx: Context, stack: str | None = None, container=False, image=False):
     stack = check_and_get_stack(stack)
     assert stacks.stack_exists(
         stack
-    ), f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'"
+    ), f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'"
 
     ctx.run("rm -rf ./test/new-e2e/tests/sysprobe-functional/artifacts/pkg")
     ctx.run(f"rm -rf kmt-deps/{stack}", warn=True)
@@ -1391,7 +1391,7 @@ def ssh_config(
     """
     Print the SSH config for the given stacks.
 
-    Recommended usage: inv kmt.ssh-config --stacks=all > ~/.ssh/config-kmt.
+    Recommended usage: deva inv kmt.ssh-config --stacks=all > ~/.ssh/config-kmt.
     Then add the following to your ~/.ssh/config:
             Include ~/.ssh/config-kmt
 
@@ -1959,7 +1959,7 @@ def show_last_test_results(ctx: Context, stack: str | None = None):
     stack = check_and_get_stack(stack)
     assert stacks.stack_exists(
         stack
-    ), f"Stack {stack} does not exist. Please create with 'inv kmt.create-stack --stack=<name>'"
+    ), f"Stack {stack} does not exist. Please create with 'deva inv kmt.create-stack --stack=<name>'"
     assert tabulate is not None, "tabulate module is not installed, please install it to continue"
 
     paths = KMTPaths(stack, Arch.local())
@@ -2208,7 +2208,7 @@ def install_ddagent(
     if alien_vms is not None:
         err_msg = f"no alient VMs discovered from provided profile {alien_vms}."
     else:
-        err_msg = f"no vms found from list {vms}. Run `inv -e kmt.status` to see all VMs in current stack"
+        err_msg = f"no vms found from list {vms}. Run `deva inv -e kmt.status` to see all VMs in current stack"
 
     assert len(domains) > 0, err_msg
 
diff --git a/tasks/libs/common/check_tools_version.py b/tasks/libs/common/check_tools_version.py
index fbab35f25ccda..a655e7b05d395 100644
--- a/tasks/libs/common/check_tools_version.py
+++ b/tasks/libs/common/check_tools_version.py
@@ -77,7 +77,7 @@ def check_tools_version(ctx: Context, tools_list: list[str], debug: bool = False
             'expected_v': custom_golangci_v(expected_golangci_lint_repo_v(ctx)),
             'debug': '' if not debug else current_golangci_lint_v(ctx, debug=debug),
             'exit_on_error': True,
-            'error_msg': "Error: The golanci-lint version you are using is not the correct one. Please run inv -e setup to install the correct version.",
+            'error_msg': "Error: The golanci-lint version you are using is not the correct one. Please run deva inv -e setup to install the correct version.",
         },
     }
     for tool in tools_list:
@@ -94,7 +94,7 @@ def check_tools_version(ctx: Context, tools_list: list[str], debug: bool = False
             if current_v != expected_v:
                 print(
                     color_message(
-                        f"Expecting {tool} '{expected_v}' but you have {tool} '{current_v}'. Please run inv -e install-tools to fix this as you might encounter issues using the tooling.",
+                        f"Expecting {tool} '{expected_v}' but you have {tool} '{current_v}'. Please run deva inv -e install-tools to fix this as you might encounter issues using the tooling.",
                         Color.RED,
                     ),
                     file=sys.stderr,
diff --git a/tasks/libs/common/worktree.py b/tasks/libs/common/worktree.py
index cd04558c169ad..bb8039da5bb31 100644
--- a/tasks/libs/common/worktree.py
+++ b/tasks/libs/common/worktree.py
@@ -40,7 +40,7 @@ def init_env(ctx, branch: str | None = None, commit: str | None = None):
             for filter_option in ["--filter=blob:none", ""]
         ):
             raise Exit(
-                f'{color_message("Error", Color.RED)}: Cannot initialize worktree environment. You might want to reset the worktree directory with `inv worktree.remove`',
+                f'{color_message("Error", Color.RED)}: Cannot initialize worktree environment. You might want to reset the worktree directory with `deva inv worktree.remove`',
                 code=1,
             )
 
@@ -100,7 +100,7 @@ def enter_env(ctx, branch: str | None, skip_checkout=False, commit: str | None =
         current_branch = get_current_branch(ctx)
         assert (
             current_branch == branch
-        ), f"skip_checkout is True but the current branch ({current_branch}) is not {branch}. You should check out the branch before using this command, this can be safely done with `inv worktree.checkout {branch}`."
+        ), f"skip_checkout is True but the current branch ({current_branch}) is not {branch}. You should check out the branch before using this command, this can be safely done with `deva inv worktree.checkout {branch}`."
 
 
 def exit_env():
diff --git a/tasks/licenses.py b/tasks/licenses.py
index 29bc9accc6efe..2134133ecdaf9 100644
--- a/tasks/licenses.py
+++ b/tasks/licenses.py
@@ -100,7 +100,7 @@ def _verify_unknown_licenses(licenses, licenses_filename):
 
                 Consult the dependency's source, update
                 `.copyright-overrides.yml` or `.wwhrd.yml` accordingly, and run
-                `inv generate-licenses` to update {}."""
+                `deva inv generate-licenses` to update {}."""
             ).format(licenses_filename),
             code=1,
         )
diff --git a/tasks/linter.py b/tasks/linter.py
index 01f77bd97915e..ab752bffb8ced 100644
--- a/tasks/linter.py
+++ b/tasks/linter.py
@@ -162,8 +162,8 @@ def go(
         debug: prints the go version and the golangci-lint debug information to help debugging lint discrepancies between versions.
 
     Example invokation:
-        $ inv linter.go --targets=./pkg/collector/check,./pkg/aggregator
-        $ inv linter.go --module=.
+        $ deva inv linter.go --targets=./pkg/collector/check,./pkg/aggregator
+        $ deva inv linter.go --module=.
     """
 
     check_tools_version(ctx, ['golangci-lint', 'go'], debug=debug)
diff --git a/tasks/modules.py b/tasks/modules.py
index 052970fb790b6..ad1aa75eea62d 100644
--- a/tasks/modules.py
+++ b/tasks/modules.py
@@ -155,7 +155,7 @@ def validate(ctx: Context, base_dir='.', fix_format=False):
                 config.to_file()
             else:
                 raise Exit(
-                    f'{color_message("Error", Color.RED)}: Configuration file is not formatted correctly, use `invoke modules.validate --fix-format` to fix it'
+                    f'{color_message("Error", Color.RED)}: Configuration file is not formatted correctly, use `deva inv modules.validate --fix-format` to fix it'
                 )
 
     with open(base_dir / Configuration.FILE_NAME) as f:
@@ -281,16 +281,14 @@ def remove_replace_rules(data: str) -> str:
     data = re.sub("\tgithub.com/DataDog/datadog-agent/.+ => .+", '', data)
     data = re.sub("replace github.com/DataDog/datadog-agent/[^ ]+ => .+", '', data)
     data = re.sub(r"replace \(\s+\)", '', data)
-    data = re.sub(r"// This section was automatically added by 'invoke modules\..+", '', data)
+    data = re.sub(r"// This section was automatically added by 'deva inv modules\..+", '', data)
     return data
 
 
 def update_go_mod(gomod_list, root):
     file = "go.mod"
     repo_name = "github.com/DataDog/datadog-agent/"
-    replace_comment = (
-        "// This section was automatically added by 'invoke modules.add-all-replace' command, do not edit manually\n\n"
-    )
+    replace_comment = "// This section was automatically added by 'deva inv modules.add-all-replace' command, do not edit manually\n\n"
 
     gomod_file = os.path.join(root, file)
     print("Updating:", gomod_file)
diff --git a/tasks/msi.py b/tasks/msi.py
index 42a7aa13fb8ac..ac18747e11cc7 100644
--- a/tasks/msi.py
+++ b/tasks/msi.py
@@ -416,7 +416,7 @@ def test(ctx, vstudio_root=None, arch="x64", major_version='7', release_version=
 
     # Generate the config file
     if not ctx.run(
-        f'inv -e agent.generate-config --build-type="agent-py2py3" --output-file="{build_outdir}\\datadog.yaml"',
+        f'deva inv -e agent.generate-config --build-type="agent-py2py3" --output-file="{build_outdir}\\datadog.yaml"',
         warn=True,
         env=env,
     ):
diff --git a/tasks/new_e2e_tests.py b/tasks/new_e2e_tests.py
index aabf3a112c287..c6f91458c5345 100644
--- a/tasks/new_e2e_tests.py
+++ b/tasks/new_e2e_tests.py
@@ -48,7 +48,7 @@ def get_human_readable_state(failing: bool, flaky: bool) -> str:
     help={
         'profile': 'Override auto-detected runner profile (local or CI)',
         'tags': 'Build tags to use',
-        'targets': 'Target packages (same as inv test)',
+        'targets': 'Target packages (same as deva inv test)',
         'configparams': 'Set overrides for ConfigMap parameters (same as -c option in test-infra-definitions)',
         'verbose': 'Verbose output: log all tests as they are run (same as gotest -v) [default: True]',
         'run': 'Only run tests matching the regular expression',
@@ -195,7 +195,7 @@ def run(
             if args.get(param_key):
                 params.append(f'-{args[param_key]}')
 
-        command = f"E2E_PIPELINE_ID={os.environ.get('CI_PIPELINE_ID')} inv -e new-e2e-tests.run {' '.join(params)}"
+        command = f"E2E_PIPELINE_ID={os.environ.get('CI_PIPELINE_ID')} deva inv -e new-e2e-tests.run {' '.join(params)}"
         print(
             f'To run this test locally, use: `{command}`. '
             'You can also add `E2E_DEV_MODE="true"` to run in dev mode which will leave the environment up after the tests.'
diff --git a/tasks/pipeline.py b/tasks/pipeline.py
index 7a40327592f9d..0878e93db73c3 100644
--- a/tasks/pipeline.py
+++ b/tasks/pipeline.py
@@ -219,19 +219,19 @@ def run(
 
     Examples
     Run a pipeline on my-branch:
-      inv pipeline.run --git-ref my-branch
+      deva inv pipeline.run --git-ref my-branch
 
     Run a pipeline on the current branch:
-      inv pipeline.run --here
+      deva inv pipeline.run --here
 
     Run a pipeline without Kernel Matrix Tests on the current branch:
-      inv pipeline.run --here --no-kmt-tests
+      deva inv pipeline.run --here --no-kmt-tests
 
     Run a pipeline with e2e tets on the current branch:
-      inv pipeline.run --here --e2e-tests
+      deva inv pipeline.run --here --e2e-tests
 
     Run a deploy pipeline on the 7.32.0 tag, uploading the artifacts to the stable branch of the staging repositories:
-      inv pipeline.run --deploy --use-release-entries --major-versions "6,7" --git-ref "7.32.0" --repo-branch "stable"
+      deva inv pipeline.run --deploy --use-release-entries --major-versions "6,7" --git-ref "7.32.0" --repo-branch "stable"
     """
 
     repo = get_gitlab_repo()
@@ -320,9 +320,9 @@ def follow(ctx, id=None, git_ref=None, here=False, project_name="DataDog/datadog
     Use --project-name to specify a repo other than DataDog/datadog-agent (default)
 
     Examples:
-    inv pipeline.follow --git-ref my-branch
-    inv pipeline.follow --here
-    inv pipeline.follow --id 1234567
+    deva inv pipeline.follow --git-ref my-branch
+    deva inv pipeline.follow --here
+    deva inv pipeline.follow --id 1234567
     """
 
     repo = get_gitlab_repo(project_name)
@@ -375,9 +375,9 @@ def trigger_child_pipeline(_, git_ref, project_name, variable=None, follow=True,
     Use --timeout to set up a timeout shorter than the default 2 hours, to anticipate failures if any.
 
     Examples:
-    inv pipeline.trigger-child-pipeline --git-ref "main" --project-name "DataDog/agent-release-management" --variable "RELEASE_VERSION"
+    deva inv pipeline.trigger-child-pipeline --git-ref "main" --project-name "DataDog/agent-release-management" --variable "RELEASE_VERSION"
 
-    inv pipeline.trigger-child-pipeline --git-ref "main" --project-name "DataDog/agent-release-management" --variable "VAR1" --variable "VAR2" --variable "VAR3"
+    deva inv pipeline.trigger-child-pipeline --git-ref "main" --project-name "DataDog/agent-release-management" --variable "VAR1" --variable "VAR2" --variable "VAR3"
     """
 
     if not os.environ.get('CI_JOB_TOKEN'):
@@ -716,7 +716,9 @@ def update_buildimages(ctx, image_tag, test_version=True, branch_name=None):
     Update local files to run with new image_tag from agent-buildimages and launch a full pipeline
     Use --no-test-version to commit without the _test_only suffixes
     """
-    raise Exit(f"This invoke task is {color_message('deprecated', 'red')}, please use inv buildimages.update instead.")
+    raise Exit(
+        f"This invoke task is {color_message('deprecated', 'red')}, please use `deva inv buildimages.update` instead."
+    )
 
 
 @task(
diff --git a/tasks/protobuf.py b/tasks/protobuf.py
index bf1ca6d321728..223716fabce5c 100644
--- a/tasks/protobuf.py
+++ b/tasks/protobuf.py
@@ -154,7 +154,7 @@ def generate(ctx, do_mockgen=True):
     proto_file = re.compile(r"pkg/proto/pbgo/.*\.pb(\.gw)?\.go$")
     if any(proto_file.search(line) for line in git_status.split("\n")):
         raise Exit(
-            f"Generated files were not properly committed.\n{git_status}\nPlease run `inv protobuf.generate` and commit the changes.",
+            f"Generated files were not properly committed.\n{git_status}\nPlease run `deva inv protobuf.generate` and commit the changes.",
             code=1,
         )
 
diff --git a/tasks/release.py b/tasks/release.py
index 955a3ab53514c..b02d7deb089a2 100644
--- a/tasks/release.py
+++ b/tasks/release.py
@@ -116,7 +116,7 @@ def update_modules(ctx, release_branch=None, version=None, trust=False):
         verify: Checks for correctness on the Agent Version (on by default).
 
     Examples:
-        $ inv -e release.update-modules 7.27.x
+        $ deva inv -e release.update-modules 7.27.x
     """
 
     assert release_branch or version
@@ -187,9 +187,9 @@ def tag_modules(
         devel: Will create -devel tags (used after creation of the release branch).
 
     Examples:
-        $ inv -e release.tag-modules 7.27.x                 # Create tags and push them to origin
-        $ inv -e release.tag-modules 7.27.x --no-push       # Create tags locally; don't push them
-        $ inv -e release.tag-modules 7.29.x --force         # Create tags (overwriting existing tags with the same name), force-push them to origin
+        $ deva inv -e release.tag-modules 7.27.x                 # Create tags and push them to origin
+        $ deva inv -e release.tag-modules 7.27.x --no-push       # Create tags locally; don't push them
+        $ deva inv -e release.tag-modules 7.29.x --force         # Create tags (overwriting existing tags with the same name), force-push them to origin
     """
 
     assert release_branch or version
@@ -238,9 +238,9 @@ def tag_version(
         start_qual: Will start the qualification phase for agent 6 release candidate by adding a qualification tag
 
     Examples:
-        $ inv -e release.tag-version -r 7.27.x            # Create tags and push them to origin
-        $ inv -e release.tag-version -r 7.27.x --no-push  # Create tags locally; don't push them
-        $ inv -e release.tag-version -r 7.29.x --force    # Create tags (overwriting existing tags with the same name), force-push them to origin
+        $ deva inv -e release.tag-version -r 7.27.x            # Create tags and push them to origin
+        $ deva inv -e release.tag-version -r 7.27.x --no-push  # Create tags locally; don't push them
+        $ deva inv -e release.tag-version -r 7.29.x --force    # Create tags (overwriting existing tags with the same name), force-push them to origin
     """
 
     assert release_branch or version
@@ -391,11 +391,11 @@ def create_rc(ctx, release_branch, patch_version=False, upstream="origin", slack
     If the previous version of the Agent was an RC, updates the release entries for RC + 1.
 
     Examples:
-        If the latest tag on the branch is 7.31.0, and invoke release.create-rc --patch-version
+        If the latest tag on the branch is 7.31.0, and deva inv release.create-rc --patch-version
         is run, then the task will prepare the release entries for 7.31.1-rc.1, and therefore
         will only use 7.31.X tags on the dependency repositories that follow the Agent version scheme.
 
-        If the latest tag on the branch is 7.32.0-devel or 7.31.0, and invoke release.create-rc
+        If the latest tag on the branch is 7.32.0-devel or 7.31.0, and deva inv release.create-rc
         is run, then the task will prepare the release entries for 7.32.0-rc.1, and therefore
         will only use 7.32.X tags on the dependency repositories that follow the Agent version scheme.
 
@@ -989,7 +989,7 @@ def update_build_links(_, new_version, patch_version=False):
     if username is None or password is None:
         raise Exit(
             color_message(
-                "No Atlassian credentials provided. Run inv --help update-build-links for more details.",
+                "No Atlassian credentials provided. Run deva inv --help update-build-links for more details.",
                 "red",
             ),
             code=1,
diff --git a/tasks/setup.py b/tasks/setup.py
index f8d95c18414cb..7c92ac96ed58b 100644
--- a/tasks/setup.py
+++ b/tasks/setup.py
@@ -10,7 +10,6 @@
 import traceback
 from collections.abc import Iterable
 from dataclasses import dataclass
-from typing import TYPE_CHECKING
 
 from invoke import task
 from invoke.exceptions import Exit
@@ -21,11 +20,6 @@
 from tasks.libs.common.status import Status
 from tasks.libs.common.utils import is_linux, is_windows, running_in_pyapp
 
-if TYPE_CHECKING:
-    from collections.abc import Generator
-
-PYTHON_REQUIREMENTS = ["requirements.txt", "tasks/requirements.txt"]
-
 
 @dataclass
 class SetupResult:
@@ -43,7 +37,6 @@ def setup(ctx, vscode=False):
         check_git_repo,
         check_python_version,
         check_go_version,
-        update_python_dependencies,
         install_go_tools,
         install_protoc,
         enable_pre_commit,
@@ -53,7 +46,7 @@ def setup(ctx, vscode=False):
         setup_functions.append(setup_vscode)
     else:
         print(
-            f'{color_message("warning:", Color.ORANGE)} Skipping vscode setup, run `inv setup --vscode` to setup vscode as well'
+            f'{color_message("warning:", Color.ORANGE)} Skipping vscode setup, run `deva inv setup --vscode` to setup vscode as well'
         )
 
     results = []
@@ -158,16 +151,6 @@ def check_python_version(_ctx) -> SetupResult:
     return SetupResult("Check Python version", status, message)
 
 
-def update_python_dependencies(ctx) -> Generator[SetupResult]:
-    print(color_message("Updating Python dependencies...", Color.BLUE))
-
-    for requirement_file in PYTHON_REQUIREMENTS:
-        print(color_message(f"Updating Python dependencies from {requirement_file}...", Color.BLUE))
-
-        ctx.run(f"pip install -r {requirement_file}", hide=True)
-        yield SetupResult(f"Update Python dependencies from {requirement_file}", Status.OK)
-
-
 @task
 def pre_commit(ctx, interactive=True):
     """Will set up pre-commit hooks.
@@ -205,7 +188,7 @@ def pre_commit(ctx, interactive=True):
         if os.path.isfile(".pre-commit-config-devagent.yaml"):
             os.remove(".pre-commit-config-devagent.yaml")
 
-        # We use a custom version that use deva instead of inv directly, that requires the venv to be loaded
+        # We use a custom version that use deva instead of deva inv directly, that requires the venv to be loaded
         from pre_commit import update_pyapp_file
 
         config_file = update_pyapp_file()
diff --git a/tasks/show_linters_issues/README.md b/tasks/show_linters_issues/README.md
index bcc0c25397efd..544c46debdcd9 100644
--- a/tasks/show_linters_issues/README.md
+++ b/tasks/show_linters_issues/README.md
@@ -14,10 +14,10 @@ The version of `go` and `golangci-lint` can have a big impact on the output of t
 - Your `go` version (run `go version`) is identical to the CI's (content of the `.go-version` file).
 - Your `golangci-lint` version is identical to the CI's (look for `golangci-lint` in the `internal/tools/go.mod` file).
 - You did not install `go` using `brew` (`which go` path shouldn't contain `homebrew`). If it does, please install `go` for example using `gimme`.
-- Use `python >= 3.9.0` and `invoke >= 2.2.0` (`inv --version` to check, it it's not the case run `python3 -m pip install -r requirements.txt` to fix it).
-- Install the requirements with `python3 -m pip install tasks/show_linter_issues/requirements.txt`.
+- Use `python >= 3.9.0`.
+- Install the requirements with `python3 -m pip install datadog-agent-dev`.
 - Clear you `golangci-lint` cache (`golangci-lint cache clean`) and your `go mod` cache (`go clean -modcache`).
-- Install the tools (`inv -e install-tools`) and the dependencies (`inv -e deps`).
+- Install the tools (`deva inv -e install-tools`) and the dependencies (`deva inv -e deps`).
 
 ## Fixing the `gosimple` linter
 
@@ -29,7 +29,7 @@ Already done in [#18884](https://github.com/DataDog/datadog-agent/pull/18884).
 Run the command
 
 ```bash
-inv -e show-linters-issues --filter-team "@DataDog/your-team" --filter-linters "revive"
+deva inv -e show-linters-issues --filter-team "@DataDog/your-team" --filter-linters "revive"
 ```
 
 Note: The linter is running every combination OS x Arch we're linting in the CI so it's normal for it to take a bit of time on the first run (should be faster after because some of it is cached).
@@ -39,7 +39,7 @@ Manually fix every lines in the command output create a PR with your fixes.
 ## Show the `revive` linter issues for your branch only
 
 ```bash
-inv -e show-linters-issues --filter-linters "revive" --from-commit-hash "main"
+deva inv -e show-linters-issues --filter-linters "revive" --from-commit-hash "main"
 ```
 
 
diff --git a/tasks/show_linters_issues/show_linters_issues.py b/tasks/show_linters_issues/show_linters_issues.py
index 671e9563eea7f..d048fd6e9a881 100644
--- a/tasks/show_linters_issues/show_linters_issues.py
+++ b/tasks/show_linters_issues/show_linters_issues.py
@@ -59,7 +59,7 @@ def show_linters_issues(
     """
     This function displays the list of files that need fixing for a specific team and for specific linters.
 
-        Example: inv show-linters-issues --filter-team "@DataDog/agent-devx-infra" --filter-linters "revive" --platforms "linux,amd64" --platforms "linux,arm64"
+        Example: deva inv show-linters-issues --filter-team "@DataDog/agent-devx-infra" --filter-linters "revive" --platforms "linux,amd64" --platforms "linux,arm64"
 
         Parameters:
             team (str): keep only the files owned by a team. These are Github team names from the GITHUB_SLACK_MAP variable.
@@ -74,7 +74,7 @@ def show_linters_issues(
     check_if_team_exists(filter_team)
     golangci_lint_kwargs = f'"--new-from-rev {from_commit_hash} --print-issued-lines=false"'
 
-    command = f"inv linter.go --golangci-lint-kwargs {golangci_lint_kwargs} --headless-mode"
+    command = f"deva inv linter.go --golangci-lint-kwargs {golangci_lint_kwargs} --headless-mode"
 
     if build_tags:
         command += f" --build-tags \"{build_tags}\""
diff --git a/tasks/systray.py b/tasks/systray.py
index 7b779220be993..8f9b6deae2597 100644
--- a/tasks/systray.py
+++ b/tasks/systray.py
@@ -22,7 +22,7 @@ def build(ctx, debug=False, console=False, rebuild=False, race=False, major_vers
     the values from `invoke.yaml` will be used.
 
     Example invokation:
-        inv systray.build
+        deva inv systray.build
     """
 
     if not sys.platform == 'win32':
diff --git a/tasks/test_core.py b/tasks/test_core.py
index 81cfebc843059..1c9e362b17d46 100644
--- a/tasks/test_core.py
+++ b/tasks/test_core.py
@@ -63,7 +63,7 @@ def __init__(self, path):
         self.result_type = "Tests"
         # Path to the result.json file output by gotestsum (should always be present)
         self.result_json_path = None
-        # Path to the junit file output by gotestsum (only present if specified in inv test)
+        # Path to the junit file output by gotestsum (only present if specified in deva inv test)
         self.junit_file_path = None
 
     def get_failure(self, flavor):
@@ -167,7 +167,7 @@ def process_input_args(
     lint=False,
 ):
     """
-    Takes the input module, targets and flavor arguments from inv test and inv coverage.upload-to-codecov,
+    Takes the input module, targets and flavor arguments from deva inv test and deva inv coverage.upload-to-codecov,
     sets default values for them & casts them to the expected types.
     """
     if only_modified_packages:
diff --git a/tasks/unit_tests/testdata/erroneous_circleci_config.yml b/tasks/unit_tests/testdata/erroneous_circleci_config.yml
index c3530a876c372..a5fd515b73a9b 100644
--- a/tasks/unit_tests/testdata/erroneous_circleci_config.yml
+++ b/tasks/unit_tests/testdata/erroneous_circleci_config.yml
@@ -67,28 +67,28 @@ jobs:
       - run:
           name: check go version
           command: |
-            inv -e check-go-version
+            deva inv -e check-go-version
       - run:
           name: grab go deps
           command: |
-            inv -e deps
+            deva inv -e deps
       - run:
           name: build rtloader
           command: |
-            inv rtloader.make --install-prefix=/go/src/github.com/DataDog/datadog-agent/dev
-            inv rtloader.install
+            deva inv rtloader.make --install-prefix=/go/src/github.com/DataDog/datadog-agent/dev
+            deva inv rtloader.install
       - run:
           name: lint rtloader
           command: |
-            inv rtloader.format --raise-if-changed
+            deva inv rtloader.format --raise-if-changed
       - run:
           name: test rtloader
           command: |
-            inv rtloader.test
+            deva inv rtloader.test
       - run:
           name: install go tooling
           command: |
-            inv -e install-tools
+            deva inv -e install-tools
       - save_cache:
           <<: *save_deps
           paths:
@@ -107,7 +107,7 @@ jobs:
       - run:
           name: run unit tests
           no_output_timeout: 20m
-          command: inv -e test --rerun-fails=2 --coverage --race --profile --cpus 8 --build-stdlib
+          command: deva inv -e test --rerun-fails=2 --coverage --race --profile --cpus 8 --build-stdlib
 
   integration_tests:
     <<: *job_template
@@ -118,7 +118,7 @@ jobs:
       - setup_remote_docker
       - run:
           name: run integration tests
-          command: inv -e integration-tests --race --remote-docker
+          command: deva inv -e integration-tests --race --remote-docker
 
   release_note:
     <<: *job_template
@@ -126,7 +126,7 @@ jobs:
       - restore_cache: *restore_source
       - restore_cache: *restore_deps
       - run:
-          command: inv -e linter.releasenote
+          command: deva inv -e linter.releasenote
           name: run PR check for release note
 
   team_label:
@@ -135,7 +135,7 @@ jobs:
       - restore_cache: *restore_source
       - restore_cache: *restore_deps
       - run:
-          command: inv -e lint-teamassignment
+          command: deva inv -e lint-teamassignment
           name: run PR check for team assignment labels
 
   milestone:
@@ -144,7 +144,7 @@ jobs:
       - restore_cache: *restore_source
       - restore_cache: *restore_deps
       - run:
-          command: inv -e lint-milestone
+          command: deva inv -e lint-milestone
           name: run PR check for milestone assignment
 
   go_linting:
@@ -156,7 +156,7 @@ jobs:
       - run:
           name: run go linters
           no_output_timeout: 20m
-          command: inv -e linter.go
+          command: deva inv -e linter.go
 
   licenses_linting:
     <<: *job_template
@@ -165,7 +165,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: run license linting
-          command: inv -e lint-licenses
+          command: deva inv -e lint-licenses
 
   copyrights_linting:
     <<: *job_template
@@ -174,7 +174,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: run copyrights linting
-          command: inv -e linter.copyrights
+          command: deva inv -e linter.copyrights
 
   filename_linting:
     <<: *job_template
@@ -183,7 +183,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: run filename linting
-          command: inv -e linter.filenames
+          command: deva inv -e linter.filenames
 
   shell_linting:
     <<: *job_template
@@ -192,7 +192,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: Install shellcheck
-          command: inv -e install-shellcheck
+          command: deva inv -e install-shellcheck
       - run:
           name: Print shellcheck version
           command: shellcheck --version
@@ -215,7 +215,7 @@ jobs:
               echo 'export LANG="C.UTF-8"' >> $BASH_ENV
       - run:
           name: lint python files
-          command: inv -e linter.python
+          command: deva inv -e linter.python
 
   component_linting:
     <<: *job_template
@@ -224,7 +224,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: run component linting
-          command: inv -e lint-components
+          command: deva inv -e lint-components
 
   codeowner_linting:
     <<: *job_template
@@ -233,7 +233,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: run CODEOWNER linting
-          command: inv -e github.lint-codeowner
+          command: deva inv -e github.lint-codeowner
 
   docker_tests:
     <<: *job_template
@@ -243,10 +243,10 @@ jobs:
       - setup_remote_docker
       - run:
           name: run docker image tests
-          command: inv -e docker.test
+          command: deva inv -e docker.test
       - run:
           name: run docker image integration tests
-          command: inv -e docker.integration-tests
+          command: deva inv -e docker.integration-tests
 
   build_binaries:
     <<: *job_template
@@ -255,10 +255,10 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: build dogstatsd
-          command: inv -e dogstatsd.build --static
+          command: deva inv -e dogstatsd.build --static
       - run:
           name: build agent
-          command: inv -e agent.build --exclude-rtloader
+          command: deva inv -e agent.build --exclude-rtloader
 
   build_iot_agent:
     <<: *job_template
@@ -267,7 +267,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: build iot agent
-          command: inv -e agent.build --flavor iot
+          command: deva inv -e agent.build --flavor iot
       - run:
           name: test iot agent
           command: DD_HOSTNAME=test-circleci-hostname ./bin/agent/agent -c ./bin/agent/dist check cpu
@@ -279,7 +279,7 @@ jobs:
       - restore_cache: *restore_deps
       - run:
           name: generate doxygen documentation
-          command: inv -e rtloader.generate-doc
+          command: deva inv -e rtloader.generate-doc
 
 workflows:
   version: 2
diff --git a/tasks/unit_tests/testdata/yaml_configurations/needs_one_line.yml b/tasks/unit_tests/testdata/yaml_configurations/needs_one_line.yml
index aa299ac8f499a..646ab87da9320 100644
--- a/tasks/unit_tests/testdata/yaml_configurations/needs_one_line.yml
+++ b/tasks/unit_tests/testdata/yaml_configurations/needs_one_line.yml
@@ -8,7 +8,7 @@ nerd_tests:
   variables:
     FLAVORS: '--flavor base'
   script:
-    - inv -e need.do-i-really-need-to-test || true
+    - deva inv -e need.do-i-really-need-to-test || true
   artifacts:
     expire_in: 2 years
     when: always
diff --git a/tasks/unit_tests/testdata/yaml_configurations/needs_several_lines.yml b/tasks/unit_tests/testdata/yaml_configurations/needs_several_lines.yml
index cc61236439ed5..7987da243eb8a 100644
--- a/tasks/unit_tests/testdata/yaml_configurations/needs_several_lines.yml
+++ b/tasks/unit_tests/testdata/yaml_configurations/needs_several_lines.yml
@@ -13,7 +13,7 @@ nerd_tests:
   variables:
     FLAVORS: '--flavor base'
   script:
-    - inv -e need.do-i-really-need-to-test || true
+    - deva inv -e need.do-i-really-need-to-test || true
   artifacts:
     expire_in: 2 years
     when: always
diff --git a/tasks/unit_tests/testdata/yaml_configurations/no_needs_several_lines.yml b/tasks/unit_tests/testdata/yaml_configurations/no_needs_several_lines.yml
index 3abe7511b9835..8b22ff3fc43b6 100644
--- a/tasks/unit_tests/testdata/yaml_configurations/no_needs_several_lines.yml
+++ b/tasks/unit_tests/testdata/yaml_configurations/no_needs_several_lines.yml
@@ -13,7 +13,7 @@ nerd_tests:
   variables:
     FLAVORS: '--flavor base'
   script:
-    - inv -e need.do-i-really-need-to-test || true
+    - deva inv -e need.do-i-really-need-to-test || true
   artifacts:
     expire_in: 2 years
     when: always
@@ -22,4 +22,4 @@ nerd_tests:
     reports:
       junit: "*.xml"
       annotations:
-        - $EXTERNAL_LINKS_PATH
\ No newline at end of file
+        - $EXTERNAL_LINKS_PATH
diff --git a/tasks/update_go.py b/tasks/update_go.py
index e07d1b2e83038..643b4f4e0e424 100644
--- a/tasks/update_go.py
+++ b/tasks/update_go.py
@@ -107,7 +107,7 @@ def update_go(
     else:
         print(
             color_message(
-                "WARNING: did not run `inv tidy` as the version of your `go` binary doesn't match the requested version",
+                "WARNING: did not run `deva inv tidy` as the version of your `go` binary doesn't match the requested version",
                 "orange",
             )
         )
diff --git a/tasks/winbuildscripts/Build-AgentPackages.ps1 b/tasks/winbuildscripts/Build-AgentPackages.ps1
index 60aa69ee5d02e..9e2c87694c182 100644
--- a/tasks/winbuildscripts/Build-AgentPackages.ps1
+++ b/tasks/winbuildscripts/Build-AgentPackages.ps1
@@ -73,8 +73,8 @@ Invoke-BuildScript `
         $inv_args += "--build-upgrade"
     }
 
-    Write-Host "inv -e winbuild.agent-package $inv_args"
-    inv -e winbuild.agent-package @inv_args
+    Write-Host "deva inv -e winbuild.agent-package $inv_args"
+    deva inv -e winbuild.agent-package @inv_args
     if ($LASTEXITCODE -ne 0) {
         Write-Error "Failed to build the agent package"
         exit 1
diff --git a/tasks/winbuildscripts/Build-InstallerPackages.ps1 b/tasks/winbuildscripts/Build-InstallerPackages.ps1
index bf381a8ef5f8a..922977a5d08da 100644
--- a/tasks/winbuildscripts/Build-InstallerPackages.ps1
+++ b/tasks/winbuildscripts/Build-InstallerPackages.ps1
@@ -52,8 +52,8 @@ Invoke-BuildScript `
         $inv_args += $ReleaseVersion
     }
 
-    Write-Host "inv -e winbuild.installer-package $inv_args"
-    inv -e winbuild.installer-package @inv_args
+    Write-Host "deva inv -e winbuild.installer-package $inv_args"
+    deva inv -e winbuild.installer-package @inv_args
     if ($LASTEXITCODE -ne 0) {
         Write-Error "Failed to build the agent package"
         exit 1
diff --git a/tasks/winbuildscripts/Build-OmnibusTarget.ps1 b/tasks/winbuildscripts/Build-OmnibusTarget.ps1
index 50dfc63f30e23..bf23c940c67ef 100644
--- a/tasks/winbuildscripts/Build-OmnibusTarget.ps1
+++ b/tasks/winbuildscripts/Build-OmnibusTarget.ps1
@@ -70,8 +70,8 @@ Invoke-BuildScript `
         exit 1
     }
 
-    Write-Host "inv -e omnibus.build $inv_args"
-    inv -e omnibus.build @inv_args
+    Write-Host "deva inv -e omnibus.build $inv_args"
+    deva inv -e omnibus.build @inv_args
     if ($LASTEXITCODE -ne 0) {
         Write-Error "Failed to build the agent package"
         exit 1
diff --git a/tasks/winbuildscripts/Generate-Chocolatey-Package.ps1 b/tasks/winbuildscripts/Generate-Chocolatey-Package.ps1
index 41bf71748cc2b..abfdc9e0fdb09 100644
--- a/tasks/winbuildscripts/Generate-Chocolatey-Package.ps1
+++ b/tasks/winbuildscripts/Generate-Chocolatey-Package.ps1
@@ -49,7 +49,8 @@ if ($InstallDeps) {
     # Install chocolatey
     $env:chocolateyUseWindowsCompression = 'true'; Invoke-Expression ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
     # Install dev tools, including invoke
-    pip3 install -r requirements.txt
+    pip3 install datadog-agent-dev
+    deva self dep sync -f legacy-tasks
 }
 
 $repoRoot = "C:\mnt"
@@ -57,7 +58,7 @@ $outputDirectory = "$repoRoot\build-out"
 if (![string]::IsNullOrEmpty($VersionOverride)) {
     $rawAgentVersion = $VersionOverride
 } else {
-    $rawAgentVersion = (inv agent.version --url-safe --major-version 7)
+    $rawAgentVersion = (deva inv agent.version --url-safe --major-version 7)
 }
 $copyright = "Datadog {0}" -f (Get-Date).Year
 
@@ -115,7 +116,7 @@ try {
             if ($rawAgentVersion -notmatch $env:CI_PIPELINE_ID) {
                 Write-Error "CI_PIPELINE_ID is not found in the agent version, aborting" -ErrorAction Continue
                 if ([string]::IsNullOrEmpty($env:BUCKET_BRANCH)) {
-                    # inv agent.version requires BUCKET_BRANCH to be set when including pipeline in version
+                    # deva inv agent.version requires BUCKET_BRANCH to be set when including pipeline in version
                     Write-Error "BUCKET_BRANCH is not set, if you are running this locally, set `$env:BUCKET_BRANCH='dev' or pass the -VersionOverride parameter" -ErrorAction Continue
                 }
                 exit 1
diff --git a/tasks/winbuildscripts/Generate-OCIPackage.ps1 b/tasks/winbuildscripts/Generate-OCIPackage.ps1
index 8b64223788b3e..414a63d74d4a3 100644
--- a/tasks/winbuildscripts/Generate-OCIPackage.ps1
+++ b/tasks/winbuildscripts/Generate-OCIPackage.ps1
@@ -10,7 +10,7 @@ if (-not (Test-Path C:\tools\datadog-package.exe)) {
     (New-Object System.Net.WebClient).DownloadFile("https://dd-agent-omnibus.s3.amazonaws.com/datadog-package.exe", "C:\\tools\\datadog-package.exe")
 }
 if ([string]::IsNullOrWhitespace($version)) {
-    $version = "{0}-1" -f (inv agent.version --url-safe --major-version 7)
+    $version = "{0}-1" -f (deva inv agent.version --url-safe --major-version 7)
     Write-Host "Detected agent version ${version}"
 }
 if (-not $version.EndsWith("-1")) {
diff --git a/tasks/winbuildscripts/Invoke-IntegrationTests.ps1 b/tasks/winbuildscripts/Invoke-IntegrationTests.ps1
index 062631d399ff3..ee2586af05b4e 100644
--- a/tasks/winbuildscripts/Invoke-IntegrationTests.ps1
+++ b/tasks/winbuildscripts/Invoke-IntegrationTests.ps1
@@ -35,7 +35,7 @@ Invoke-BuildScript `
 
     & .\tasks\winbuildscripts\pre-go-build.ps1
 
-    & inv -e integration-tests
+    & deva inv -e integration-tests
     $err = $LASTEXITCODE
     if($err -ne 0){
         Write-Host -ForegroundColor Red "test failed $err"
diff --git a/tasks/winbuildscripts/Invoke-Linters.ps1 b/tasks/winbuildscripts/Invoke-Linters.ps1
index 5e077f3bfb996..d5a89b0bcb57f 100644
--- a/tasks/winbuildscripts/Invoke-Linters.ps1
+++ b/tasks/winbuildscripts/Invoke-Linters.ps1
@@ -38,7 +38,7 @@ Invoke-BuildScript `
     & .\tasks\winbuildscripts\pre-go-build.ps1
 
     # Lint rtloader
-    & inv -e rtloader.format --raise-if-changed
+    & deva inv -e rtloader.format --raise-if-changed
     $err = $LASTEXITCODE
     Write-Host Format result is $err
     if($err -ne 0){
@@ -47,7 +47,7 @@ Invoke-BuildScript `
     }
 
     # Lint Go
-    & inv -e linter.go --debug
+    & deva inv -e linter.go --debug
     $err = $LASTEXITCODE
     Write-Host Go linter result is $err
     if($err -ne 0){
diff --git a/tasks/winbuildscripts/Invoke-UnitTests.ps1 b/tasks/winbuildscripts/Invoke-UnitTests.ps1
index 3f37ad591830b..302090c5bdd25 100644
--- a/tasks/winbuildscripts/Invoke-UnitTests.ps1
+++ b/tasks/winbuildscripts/Invoke-UnitTests.ps1
@@ -83,16 +83,16 @@ Invoke-BuildScript `
             New-LocalUser -Name "ddagentuser" -Description "Test user for the secrets feature on windows." -Password $Password
         }
         # Generate the datadog.yaml config file to be used in integration tests
-        & inv -e agent.generate-config --build-type="agent-py2py3" --output-file="./datadog.yaml"
+        & deva inv -e agent.generate-config --build-type="agent-py2py3" --output-file="./datadog.yaml"
         # Build inputs needed for go builds
         & .\tasks\winbuildscripts\pre-go-build.ps1
     }
 
     # MSI unit tests
     if ($Env:DEBUG_CUSTOMACTION) {
-        & inv -e msi.test --debug
+        & deva inv -e msi.test --debug
     } else {
-        & inv -e msi.test
+        & deva inv -e msi.test
     }
     $err = $LASTEXITCODE
     Write-Host Test result is $err
@@ -102,7 +102,7 @@ Invoke-BuildScript `
     }
 
     # rtloader unit tests
-    & inv -e rtloader.test
+    & deva inv -e rtloader.test
     $err = $LASTEXITCODE
     Write-Host rtloader test result is $err
     if($err -ne 0){
@@ -111,7 +111,7 @@ Invoke-BuildScript `
     }
 
     # Sanity check that the core agent can build
-    & inv -e agent.build
+    & deva inv -e agent.build
     $err = $LASTEXITCODE
     if($err -ne 0){
         Write-Host -ForegroundColor Red "Agent build failed $err"
@@ -134,7 +134,7 @@ Invoke-BuildScript `
         $TEST_WASHER_FLAG="--test-washer"
     }
     $Env:Python3_ROOT_DIR=$Env:TEST_EMBEDDED_PY3
-    & inv -e test --junit-tar="$Env:JUNIT_TAR" `
+    & deva inv -e test --junit-tar="$Env:JUNIT_TAR" `
         --race --profile --rerun-fails=2 --coverage --cpus 8 `
         --python-home-3=$Env:Python3_ROOT_DIR `
         --save-result-json C:\mnt\$test_output_file `
@@ -149,7 +149,7 @@ Invoke-BuildScript `
     if ($UploadCoverage) {
         # 1. Upload coverage reports to Codecov
         $Env:CODECOV_TOKEN=$(Get-VaultSecret -parameterName "$Env:CODECOV_TOKEN")
-        & inv -e coverage.upload-to-codecov $Env:COVERAGE_CACHE_FLAG
+        & deva inv -e coverage.upload-to-codecov $Env:COVERAGE_CACHE_FLAG
         if($LASTEXITCODE -ne 0){
             Write-Host -ForegroundColor Red "coverage upload failed $err"
         }
@@ -161,7 +161,7 @@ Invoke-BuildScript `
             Copy-Item -Path $_.FullName -Destination C:\mnt
         }
         $Env:DATADOG_API_KEY=$(Get-VaultSecret -parameterName "$Env:API_KEY_ORG2")
-        & inv -e junit-upload --tgz-path $Env:JUNIT_TAR
+        & deva inv -e junit-upload --tgz-path $Env:JUNIT_TAR
         if($LASTEXITCODE -ne 0){
             Write-Host -ForegroundColor Red "junit upload failed $err"
         }
diff --git a/tasks/winbuildscripts/README.md b/tasks/winbuildscripts/README.md
index 38e34e75838a7..99eac2a47d342 100644
--- a/tasks/winbuildscripts/README.md
+++ b/tasks/winbuildscripts/README.md
@@ -34,8 +34,8 @@ Below are quick details for a few primary scripts. There are other scripts in th
 The `Invoke-AgentPackages.ps1` script runs the complete omnibus build plus the MSI and OCI packages.
 
 Inner components to consider using instead
-- `inv agent.build`
-- `inv msi.build`
+- `deva inv agent.build`
+- `deva inv msi.build`
 
 #### Additional Parameters
 
diff --git a/tasks/winbuildscripts/Update-Winget.ps1 b/tasks/winbuildscripts/Update-Winget.ps1
index 0e66b740aa02a..775b8956bcb84 100644
--- a/tasks/winbuildscripts/Update-Winget.ps1
+++ b/tasks/winbuildscripts/Update-Winget.ps1
@@ -2,7 +2,8 @@ $ErrorActionPreference = 'Stop';
 Set-Location c:\mnt
 
 # Install dev tools, including invoke
-pip3 install -r requirements.txt
+pip3 install datadog-agent-dev
+deva self dep sync -f legacy-tasks
 
 # Update the repo
 $ghCliInstallResult = Start-Process "msiexec" -ArgumentList "/qn /i https://github.com/cli/cli/releases/download/v2.44.1/gh_2.44.1_windows_amd64.msi /log install.log" -NoNewWindow -Wait -Passthru
@@ -15,7 +16,7 @@ if ($ghCliInstallResult.ExitCode -ne 0) {
     & 'C:\Program Files\GitHub CLI\gh.exe' repo sync https://github.com/robot-github-winget-datadog-agent/winget-pkgs.git --source microsoft/winget-pkgs
 }
 
-$rawAgentVersion = (inv agent.version)
+$rawAgentVersion = (deva inv agent.version)
 Write-Host "Detected agent version ${rawAgentVersion}"
 $m = [regex]::match($rawAgentVersion, "(\d+\.\d+\.\d+)(-rc.(\d+))?")
 if ($m) {
diff --git a/tasks/winbuildscripts/common.ps1 b/tasks/winbuildscripts/common.ps1
index 7f5e802c7639c..e7441b56f4cb8 100644
--- a/tasks/winbuildscripts/common.ps1
+++ b/tasks/winbuildscripts/common.ps1
@@ -64,7 +64,7 @@ function Exit-RepoRoot() {
 Expands the Go module cache from an archive file.
 
 .DESCRIPTION
-This function expands the Go module cache from an archive file located in the specified root directory. 
+This function expands the Go module cache from an archive file located in the specified root directory.
 It extracts the contents of the archive file into the Go module cache directory defined by the GOMODCACHE environment variable.
 
 .PARAMETER root
@@ -133,13 +133,14 @@ function Expand-ModCache() {
 
 function Install-Deps() {
     Write-Host "Installing python requirements"
-    pip3.exe install -r .\requirements.txt -r .\tasks\libs\requirements-github.txt
+    pip3.exe install datadog-agent-dev
+    deva self dep sync -f legacy-tasks
     if ($LASTEXITCODE -ne 0) {
         Write-Error "Failed to install python requirements"
         exit 1
     }
     Write-Host "Installing go dependencies"
-    inv -e deps
+    deva inv -e deps
     if ($LASTEXITCODE -ne 0) {
         Write-Error "Failed to install dependencies"
         exit 1
@@ -148,7 +149,7 @@ function Install-Deps() {
 
 function Install-TestingDeps() {
     Write-Host "Installing testing dependencies"
-    inv -e install-tools
+    deva inv -e install-tools
     if ($LASTEXITCODE -ne 0) {
         Write-Error "Failed to install testing dependencies"
         exit 1
@@ -306,7 +307,7 @@ function Invoke-BuildScript {
 
         # Expand modcache
         # TODO: Can these be moved inside the Install-Deps/Install-TestingDeps functions,
-        #       or is it important that they both be run before `inv deps` ?
+        #       or is it important that they both be run before `deva inv deps` ?
         if ($InstallDeps) {
             Expand-ModCache -modcache modcache
         }
@@ -323,7 +324,7 @@ function Invoke-BuildScript {
         }
 
         if ($CheckGoVersion) {
-            inv -e check-go-version
+            deva inv -e check-go-version
             if ($LASTEXITCODE -ne 0) {
                 Write-Error "Go version check failed"
                 exit 1
diff --git a/tasks/winbuildscripts/pre-go-build.ps1 b/tasks/winbuildscripts/pre-go-build.ps1
index ceb522254a6ab..565f664ba5688 100644
--- a/tasks/winbuildscripts/pre-go-build.ps1
+++ b/tasks/winbuildscripts/pre-go-build.ps1
@@ -14,9 +14,9 @@ Default: 3
 $ErrorActionPreference = "Stop"
 
 # Run clean to avoid issues with CMakeCache.txt due to moving build roots
-& inv -e rtloader.clean
+& deva inv -e rtloader.clean
 
-& inv -e rtloader.make --install-prefix="$(Get-Location)\dev" --cmake-options='-G \"Unix Makefiles\"'
+& deva inv -e rtloader.make --install-prefix="$(Get-Location)\dev" --cmake-options='-G \"Unix Makefiles\"'
 $err = $LASTEXITCODE
 Write-Host Build result is $err
 if($err -ne 0){
@@ -24,7 +24,7 @@ if($err -ne 0){
     [Environment]::Exit($err)
 }
 
-& inv -e rtloader.install
+& deva inv -e rtloader.install
 $err = $LASTEXITCODE
 Write-Host rtloader install result is $err
 if($err -ne 0){
@@ -32,7 +32,7 @@ if($err -ne 0){
     [Environment]::Exit($err)
 }
 
-& inv -e build-messagetable
+& deva inv -e build-messagetable
 $err = $LASTEXITCODE
 Write-Host Build result is $err
 if($err -ne 0){
diff --git a/tasks/winbuildscripts/secagent.ps1 b/tasks/winbuildscripts/secagent.ps1
index af6a1cbb85eef..fdb7068bce013 100644
--- a/tasks/winbuildscripts/secagent.ps1
+++ b/tasks/winbuildscripts/secagent.ps1
@@ -7,13 +7,14 @@ $Env:Python3_ROOT_DIR=$Env:TEST_EMBEDDED_PY3
 if ($Env:TARGET_ARCH -eq "x64") {
     & ridk enable
 }
-& $Env:Python3_ROOT_DIR\python.exe -m  pip install -r requirements.txt
+& $Env:Python3_ROOT_DIR\python.exe -m pip install datadog-agent-dev
+& $Env:Python3_ROOT_DIR\python.exe -m deva self dep sync -f legacy-tasks
 
 $PROBE_BUILD_ROOT=(Get-Location).Path
 $Env:PATH="$PROBE_BUILD_ROOT\dev\lib;$Env:GOPATH\bin;$Env:Python3_ROOT_DIR;$Env:Python3_ROOT_DIR\Scripts;$Env:Python2_ROOT_DIR;$Env:Python2_ROOT_DIR\Scripts;$Env:PATH"
 
-& inv -e deps
-& inv -e install-tools
+& deva inv -e deps
+& deva inv -e install-tools
 
 # Must build the rtloader libs cgo depends on before running golangci-lint, which requires code to be compilable
 $archflag = "x64"
@@ -21,7 +22,7 @@ if ($Env:TARGET_ARCH -eq "x86") {
     $archflag = "x86"
 }
 
-& inv -e security-agent.e2e-prepare-win
+& deva inv -e security-agent.e2e-prepare-win
 
 $err = $LASTEXITCODE
 if($err -ne 0){
diff --git a/tasks/winbuildscripts/sysprobe.ps1 b/tasks/winbuildscripts/sysprobe.ps1
index 2ac70e2766a27..0016782f7570f 100644
--- a/tasks/winbuildscripts/sysprobe.ps1
+++ b/tasks/winbuildscripts/sysprobe.ps1
@@ -5,25 +5,26 @@ $Env:Python2_ROOT_DIR=$Env:TEST_EMBEDDED_PY2
 $Env:Python3_ROOT_DIR=$Env:TEST_EMBEDDED_PY3
 
 & ridk enable
-& $Env:Python3_ROOT_DIR\python.exe -m  pip install -r requirements.txt
+& $Env:Python3_ROOT_DIR\python.exe -m pip install datadog-agent-dev
+& $Env:Python3_ROOT_DIR\python.exe -m deva self dep sync -f legacy-tasks
 
 $PROBE_BUILD_ROOT=(Get-Location).Path
 $Env:PATH="$PROBE_BUILD_ROOT\dev\lib;$Env:GOPATH\bin;$Env:Python3_ROOT_DIR;$Env:Python3_ROOT_DIR\Scripts;$Env:Python2_ROOT_DIR;$Env:Python2_ROOT_DIR\Scripts;$Env:PATH"
 
-& inv -e deps
-& inv -e install-tools
+& deva inv -e deps
+& deva inv -e install-tools
 
 # Must build the rtloader libs cgo depends on before running golangci-lint, which requires code to be compilable
 & .\tasks\winbuildscripts\pre-go-build.ps1 -PythonRuntimes "$Env:PY_RUNTIMES"
 
-& inv -e linter.go --build system-probe-unit-tests --targets .\pkg
+& deva inv -e linter.go --build system-probe-unit-tests --targets .\pkg
 $err = $LASTEXITCODE
 if ($err -ne 0) {
     Write-Host -ForegroundColor Red "linter.go failed $err"
     [Environment]::Exit($err)
 }
 
-& inv -e system-probe.e2e-prepare --ci
+& deva inv -e system-probe.e2e-prepare --ci
 
 $err = $LASTEXITCODE
 if($err -ne 0){
diff --git a/tasks/windows_dev_env.py b/tasks/windows_dev_env.py
index fef35348d97f4..658be5a0127a7 100644
--- a/tasks/windows_dev_env.py
+++ b/tasks/windows_dev_env.py
@@ -64,7 +64,7 @@ def run(
 
     with ctx.cd('../test-infra-definitions'):
         # find connection info for the VM
-        result = ctx.run(f"inv aws.show-vm --stack-name={name}", hide=True)
+        result = ctx.run(f"deva inv aws.show-vm --stack-name={name}", hide=True)
         if result is None or not result:
             raise Exception("Failed to find the Windows development environment.")
         host = RemoteHost(result.stdout)
@@ -90,8 +90,7 @@ def _start_windows_dev_env(ctx, name: str = "windows-dev-env"):
             ctx.run("git clone git@github.com:DataDog/test-infra-definitions.git")
             with ctx.cd('test-infra-definitions'):
                 # setup test-infra-definitions
-                ctx.run("python3 -m pip install -r requirements.txt")
-                ctx.run("inv setup")
+                ctx.run("deva inv setup")
     if shutil.which("rsync") is None:
         raise Exception(
             "rsync is not installed. Please install rsync by running `brew install rsync` on macOS and try again."
@@ -100,7 +99,7 @@ def _start_windows_dev_env(ctx, name: str = "windows-dev-env"):
     host = ""
     with ctx.cd('../test-infra-definitions'):
         result = ctx.run(
-            f"inv aws.create-vm --ami-id={AMI_WINDOWS_DEV_2022} --os-family=windows --architecture=x86_64 --no-install-agent --stack-name={name} --no-interactive --instance-type=t3.xlarge"
+            f"deva inv aws.create-vm --ami-id={AMI_WINDOWS_DEV_2022} --os-family=windows --architecture=x86_64 --no-install-agent --stack-name={name} --no-interactive --instance-type=t3.xlarge"
         )
         if result is None or not result:
             raise Exception("Failed to create the Windows development environment.")
@@ -142,15 +141,15 @@ def _start_windows_dev_env(ctx, name: str = "windows-dev-env"):
     _run_on_windows_dev_env(
         ctx,
         name,
-        ". ./tasks/winbuildscripts/common.ps1; Invoke-BuildScript -InstallTestingDeps \\$true -InstallDeps \\$true -Command {.\\tasks\\winbuildscripts\\pre-go-build.ps1; inv -e tidy}",
+        ". ./tasks/winbuildscripts/common.ps1; Invoke-BuildScript -InstallTestingDeps \\$true -InstallDeps \\$true -Command {.\\tasks\\winbuildscripts\\pre-go-build.ps1; deva inv -e tidy}",
     )
     # print the time taken to start the dev env
     elapsed_time = time.time() - start_time
     print("♻️ Windows dev env started in", timedelta(seconds=elapsed_time))
     _run_command_on_local_changes(ctx, rsync_command)
     print("♻️ Windows dev env sync stopped")
-    print("Start it again with `inv windows_dev_env.start`")
-    print("Destroy the Windows dev env with `inv windows-dev-env.stop`")
+    print("Start it again with `deva inv windows_dev_env.start`")
+    print("Destroy the Windows dev env with `deva inv windows-dev-env.stop`")
 
 
 def _disable_WD_and_reboot(ctx, host):
@@ -223,7 +222,7 @@ def _on_changed_path_run_command(ctx: Context, path: str, command: str):
 
 def _stop_windows_dev_env(ctx, name: str = "windows-dev-env"):
     with ctx.cd('../test-infra-definitions'):
-        ctx.run(f"inv aws.destroy-vm --stack-name={name}")
+        ctx.run(f"deva inv aws.destroy-vm --stack-name={name}")
 
 
 class RemoteHost:
@@ -238,7 +237,7 @@ def __init__(self, output: str):
 def _run_on_windows_dev_env(ctx: Context, name: str = "windows-dev-env", command: str = "") -> int:
     with ctx.cd('../test-infra-definitions'):
         # find connection info for the VM
-        result = ctx.run(f"inv aws.show-vm --stack-name={name}", hide=True)
+        result = ctx.run(f"deva inv aws.show-vm --stack-name={name}", hide=True)
         if result is None or not result:
             raise Exception("Failed to find the Windows development environment.")
         host = RemoteHost(result.stdout)
diff --git a/tasks/worktree.py b/tasks/worktree.py
index bb00ed751b370..8a647ef0620ff 100644
--- a/tasks/worktree.py
+++ b/tasks/worktree.py
@@ -59,7 +59,7 @@ def run(ctx, branch: str, command: str, skip_checkout: bool = False):
     """Runs a command in the target worktree environment.
 
     Usage:
-        $ inv worktree.run 6.53.x "head CHANGELOG.rst"  # Displays the changelog of the target branch
+        $ deva inv worktree.run 6.53.x "head CHANGELOG.rst"  # Displays the changelog of the target branch
     """
 
     with agent_context(ctx, branch, skip_checkout=skip_checkout):
@@ -74,7 +74,7 @@ def invoke(ctx, branch: str, skip_checkout: bool = False, yes: bool = False):
         This task should be avoided when a --branch or --release-branch argument is available in the task.
 
     Usage:
-        > inv worktree.invoke 6.53.x --yes modules.show-all  # Will show agent 6 modules
+        > deva inv worktree.invoke 6.53.x --yes modules.show-all  # Will show agent 6 modules
     """
 
     if yes or yes_no_question(
diff --git a/test/benchmarks/apm_scripts/run-benchmarks.sh b/test/benchmarks/apm_scripts/run-benchmarks.sh
index e0ad06d315048..ac21a4f59dd42 100755
--- a/test/benchmarks/apm_scripts/run-benchmarks.sh
+++ b/test/benchmarks/apm_scripts/run-benchmarks.sh
@@ -4,7 +4,7 @@ set -e
 
 bench_loop_x10 () {
   for i in {1..10}; do
-    inv trace-agent.benchmarks --output="/tmp/$1" --bench="BenchmarkAgentTraceProcessing$"
+    deva inv trace-agent.benchmarks --output="/tmp/$1" --bench="BenchmarkAgentTraceProcessing$"
     cat "/tmp/$1" >> "$ARTIFACTS_DIR/$1"
   done
 }
diff --git a/test/benchmarks/kubernetes_state/README.md b/test/benchmarks/kubernetes_state/README.md
index ab3a1877bee65..7f596bf40c0f5 100644
--- a/test/benchmarks/kubernetes_state/README.md
+++ b/test/benchmarks/kubernetes_state/README.md
@@ -14,7 +14,7 @@ This allows a fair comparison between several runs of the benchmark.
 The benchmark can be launched with the following `invoke` target:
 
 ```sh
-time inv bench.kubernetes-state
+time deva inv bench.kubernetes-state
 ```
 
 The benchmark only returns the time it took to run the main function of the KSMv2 check on the static test data built at the previous state:
diff --git a/test/fakeintake/docs/README.md b/test/fakeintake/docs/README.md
index af4219d148281..19006a95e9e8a 100644
--- a/test/fakeintake/docs/README.md
+++ b/test/fakeintake/docs/README.md
@@ -51,7 +51,7 @@ The `fakeintake` container is built by the `datadog-agent` CI and available at h
 ### Build fakeintake server and CLI
 
 ```bash
-inv fakeintake.build
+deva inv fakeintake.build
 ```
 
 ### 🐳 Docker, locally
diff --git a/test/integration/docker/otel_agent_build_tests.py b/test/integration/docker/otel_agent_build_tests.py
index 5ec4a9209986c..eedea95c1f7cb 100644
--- a/test/integration/docker/otel_agent_build_tests.py
+++ b/test/integration/docker/otel_agent_build_tests.py
@@ -11,7 +11,7 @@ def setUpModule():
 
 class OtelAgentBuildTest(unittest.TestCase):
     """contains setup and tests for otel agent build. Must be invoked directly
-    by 'inv otel-agent.test-image-build' so that necessary image is built and
+    by 'deva inv otel-agent.test-image-build' so that necessary image is built and
     environment variables are set"""
 
     def setUp(self):
diff --git a/test/new-e2e/README.md b/test/new-e2e/README.md
index 31befab726d2f..f11620f9d0fde 100644
--- a/test/new-e2e/README.md
+++ b/test/new-e2e/README.md
@@ -38,6 +38,6 @@ The following are considered as installer tests:
 
 All these tests can be executed locally with the following command:
 
-`inv new-e2e-tests.run --targets <test folder path> --osversion '<comma separated os version list>' --platform '<debian/centos/suse/ubuntu>' --arch <x86_64/arm64>`
+`deva inv new-e2e-tests.run --targets <test folder path> --osversion '<comma separated os version list>' --platform '<debian/centos/suse/ubuntu>' --arch <x86_64/arm64>`
 
 The available os versions can be found in the file `./tests/agent-platform/platforms/platforms.json`
diff --git a/test/new-e2e/tests/orchestrator/README.md b/test/new-e2e/tests/orchestrator/README.md
index e478109e16036..00d9033025645 100644
--- a/test/new-e2e/tests/orchestrator/README.md
+++ b/test/new-e2e/tests/orchestrator/README.md
@@ -11,7 +11,7 @@ To invoke locally, run:
 ```bash
 cd ~/dd/datadog-agent # run from the repo root, not the new-e2e project root
 aws-vault exec sso-agent-sandbox-account-admin -- zsh
-inv new-e2e-tests.run --targets=./tests/orchestrator
+deva inv new-e2e-tests.run --targets=./tests/orchestrator
 ```
 
 You can supply `--keep-stacks` to keep the pulumi stacks after the tests are done. This will allow you to use inspect
@@ -80,7 +80,7 @@ Diagnostics:
 To fix this, run:
 
 ```bash
-inv -e new-e2e-tests.clean -s
+deva inv -e new-e2e-tests.clean -s
 ```
 
 It may take a while, but will completely reset your pulumi stack config/state/resources.
@@ -94,7 +94,7 @@ You can specify your own agent version as well, otherwise it will run with lates
 ```bash
 img_repo="registry.hub.docker.com/datadog"
 img_tag="fisher-cap-1436-explicit-type-values-py3-jmx"
-inv new-e2e-tests.run \
+deva inv new-e2e-tests.run \
   -c ddagent:fullImagePath=$img_repo/agent-dev:$img_tag \
   -c ddagent:clusterAgentFullImagePath=$img_repo/cluster-agent-dev:$img_tag \
   --targets=./tests/orchestrator
diff --git a/test/new-e2e/tests/sysprobe-functional/.gitignore b/test/new-e2e/tests/sysprobe-functional/.gitignore
index 433a10da9f0e5..1cc32032a7aaa 100644
--- a/test/new-e2e/tests/sysprobe-functional/.gitignore
+++ b/test/new-e2e/tests/sysprobe-functional/.gitignore
@@ -1,4 +1,4 @@
-# Exclude system-probe test files generated by running inv -e system-probe.kitchen-prepare
+# Exclude system-probe test files generated by running deva inv -e system-probe.kitchen-prepare
 artifacts/*
 clang-bpf
 llc-bpf
diff --git a/tools/ci/junit_upload.sh b/tools/ci/junit_upload.sh
index 97312066045e1..0020e986c5e27 100755
--- a/tools/ci/junit_upload.sh
+++ b/tools/ci/junit_upload.sh
@@ -14,7 +14,7 @@ for file in $junit_files; do
         echo "Issue with junit file: $file"
         continue
     fi
-    inv -e junit-upload --tgz-path "$file" || error=1
+    deva inv -e junit-upload --tgz-path "$file" || error=1
 done
 unset DATADOG_API_KEY
 # Never fail on Junit upload failure since it would prevent the other after scripts to run.
diff --git a/tools/ebpf/Dockerfiles/Dockerfile-process-agent-dev b/tools/ebpf/Dockerfiles/Dockerfile-process-agent-dev
index 0f964fbd783c4..181557d88a9de 100644
--- a/tools/ebpf/Dockerfiles/Dockerfile-process-agent-dev
+++ b/tools/ebpf/Dockerfiles/Dockerfile-process-agent-dev
@@ -8,7 +8,7 @@ RUN apt-get update -y && apt-get install -y jq conntrack netcat-openbsd dnsutils
 # the core agent has the library path hardcoded, this allows the agent included below to find libs
 ENV LD_LIBRARY_PATH=/opt/datadog-agent/embedded/lib
 
-# inv -e process-agent.build-dev-image will set up a temporary
+# deva inv -e process-agent.build-dev-image will set up a temporary
 # build directory where this Dockerfile and the necessary binaries
 # are in the same directory
 COPY process-agent /opt/datadog-agent/embedded/bin/process-agent
diff --git a/tools/ebpf/Dockerfiles/Dockerfile-security-agent-dev b/tools/ebpf/Dockerfiles/Dockerfile-security-agent-dev
index bbf24a3f4f4af..41a16fce59a5b 100644
--- a/tools/ebpf/Dockerfiles/Dockerfile-security-agent-dev
+++ b/tools/ebpf/Dockerfiles/Dockerfile-security-agent-dev
@@ -8,7 +8,7 @@ RUN apt-get update -y && apt-get install -y jq netcat-openbsd
 # the core agent has the library path hardcoded, this allows the agent included below to find libs
 ENV LD_LIBRARY_PATH=/opt/datadog-agent/embedded/lib
 
-# inv -e security-agent.build-dev-image will set up a temporary
+# deva inv -e security-agent.build-dev-image will set up a temporary
 # build directory where this Dockerfile and the necessary binaries
 # are in the same directory
 COPY security-agent /opt/datadog-agent/embedded/bin/security-agent
diff --git a/tools/windows/DatadogAgentInstaller/Directory.Build.props b/tools/windows/DatadogAgentInstaller/Directory.Build.props
index c70bad18e8a35..6be2775851147 100644
--- a/tools/windows/DatadogAgentInstaller/Directory.Build.props
+++ b/tools/windows/DatadogAgentInstaller/Directory.Build.props
@@ -3,7 +3,7 @@
   <!-- Would like to include Configuration in BaseIntermediateOutputPath path, but it's undefined when nuget writes project.assets.json, but is
        defined when it goes to read it, so it can't find it.
   -->
-  <!-- Used for out-of-repo builds (e.g. with 'inv msi.build') -->
+  <!-- Used for out-of-repo builds (e.g. with 'deva inv msi.build') -->
   <PropertyGroup Condition="'$(AGENT_INSTALLER_OUTPUT_DIR)' != ''">
     <BaseOutputPath>$(AGENT_INSTALLER_OUTPUT_DIR)\bin\</BaseOutputPath>
     <BaseIntermediateOutputPath>$(AGENT_INSTALLER_OUTPUT_DIR)\obj\$(Platform)\$(MSBuildProjectName)\</BaseIntermediateOutputPath>
diff --git a/tools/windows/DatadogAgentInstaller/WixSetup.Tests/AgentVersionTests.cs b/tools/windows/DatadogAgentInstaller/WixSetup.Tests/AgentVersionTests.cs
index 703db63a47b8e..f824627def368 100644
--- a/tools/windows/DatadogAgentInstaller/WixSetup.Tests/AgentVersionTests.cs
+++ b/tools/windows/DatadogAgentInstaller/WixSetup.Tests/AgentVersionTests.cs
@@ -33,7 +33,7 @@ public void Should_Parse_Stable_Version_OmnibusFormat_Correctly()
         [Fact]
         public void Should_Parse_Nightly_Version_OmnibusFormat_Correctly()
         {
-            // Output of inv agent.version --omnibus-format on a nightly
+            // Output of deva inv agent.version --omnibus-format on a nightly
             var packageVersion = "7.40.0~rc.2+git.309.1240df2";
             var version = new AgentVersion(packageVersion);
             version.PackageVersion.Should().Be(packageVersion);
@@ -46,7 +46,7 @@ public void Should_Parse_Nightly_Version_OmnibusFormat_Correctly()
         [Fact]
         public void Should_Parse_Nightly_Version_UrlSafe_Correctly()
         {
-            // Output of inv agent.version --url-safe on an RC
+            // Output of deva inv agent.version --url-safe on an RC
             var packageVersion = "7.43.1-rc.3.git.485.14b9337";
             var version = new AgentVersion(packageVersion);
             version.PackageVersion.Should().Be(packageVersion);