Page Comparison

Cross-project discussions

SECCOM proposed change to analyzing known vulnerabilities and updating vulnerable packages

• Remove requirement to provide effective/ineffective analysis until there are tools to support the analysis
• Projects update direct dependencies in their applications to most recent version of packages
  • Projects open Jiras to update packages in direct dependencies
  • No requirement to upgrade transitive dependent packages
• oparent updated to most recent version of included packages (as of the time of the oparent release for the ONAP release)

LF IT Support

Testing Improvement

CSIT Review

ToolChain Improvement

Other Improvement suggestion

Subcommittee Updates for PTLs

Sharing Best Practices