...
Agenda Items | Presented By | Presos/Notes/Links/ |
|---|---|---|
Welcome | ||
| Review previous meeting notes | ||
| Review Issue 103 | https://github.com/open-horizon/examples/releases/download/v2.30.0-947/openhorizon-tested-versions.txt | |
| Discuss versioning for Exchange API | Ben Courliss | |
| Q/A and Wrap up | Anyone |
Meeting Notes
- Try to login to security.lfx.dev
- Add additional architectures to tested version file
- Move the tested version file to .github (see https://github.com/open-horizon/.github)
- Look into how to integrate with SBOM, see Issue 117
- Exchange Versioning needs to be discussed with Bruce and moved into the open.tbd
Meeting Notes from 6/20
- Look into what the EdgeX Foundry does for their release notes. There may be a GitHub Action available to reuse.
- Need to address security vulnerabilities.
- Maybe have a wiki page to start with - Akraino and EdgeX Foundry wikis may have something we can base off of
- Have TSC members (WG chairs) on private email list where users can submit vulnerabilities
- Speak with Kendall who may have started to create this list via groups.io
- Potentially look at using Syft to output a CycloneDX or SPDX file that can be joined with a CVE database to produce a vulnerability report from images
- TESTING.md to address testing policy for new functionality (required unit tests, etc)
...