Please find below the Minutes of Meetings and recording for the SECCOM meeting that was held on 8th of December 2020.

Jira No
SummaryDescriptionStatusSolution

SECCOM elections – call for candidates!

E-mail with call for candidates was sent to SECCOM distribution list. Candidates submitted:

  • Amy Zwarico for SECCOM Vice Chair
  • Pawel Pawlak for SECCOM Chair

Elections later this week.

ongoingE-mail to be sent to Kenny with request to initiate elections this week. 

ONAP discussion on Global Requirements vs. Best Practices in Honolulu release

Amy's presentation provided at the last PTL's call:

Proposal for global requirements for Honolulu release.

Formal approval from PTLs would require process elaboration.

SECCOM requirements are known by the community for a long time.

Global requirement has to be fixed within particular release.  As long as project does not meet the global requirment that wa snot met in the past, will not be allowed to provide a new container.

Security framework is crucial for the ONAP success in operator environment.

Quality of the code is also crucial. Process of code delivery requires review and change. Insufficient code coverage should not allow for +1 for a code acceptance.

Maintenance project should be called end of support mode.

ongoing

SCA: Whitesource vs. Nexus-IQ

The best would be to run both tools for one release to compare results. 

Projects fix direct dependencies.

ongoing

To gain resources, deprecated repos should be exluded.

Sonarcloud capabilities to be further investigated.


OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 5th OF JANUARY'21. 





Recording:

2020-12-08_SECCOM_week.mp4


SECCOM presentation:

  • No labels