BRIDGE: https://zoom.us/j/661303200?pwd=TFdRd0c2MTJUem8xa252UGJHTE1Mdz09

Passcode: 209247

We will start our meetings by mentioning the project's Antitrust Policy, which you can find linked from the LF and project websites. The policy is important where multiple companies, including potential industry competitors, are participating in meetings. Please review and if you have any questions, please contact your company legal counsel. Members of the LF may contact Andrew Updegrove at the firm Gesmer Updegrove LLP, which provides legal counsel to the LF.

Attendance is taken purely upon #info in Zoom Chat 

...

...

06:55:56 From  Fred Oliveira  to  Everyone:
    #info Fred Oliveira, Self
06:59:46 From  Ranny Haiby (Linux Foundation)  to  Everyone:
    #info Ranny Haiby, The Linux Foundation
07:00:01 From  Byung-Woo Jun  to  Everyone:
    #info proxy Byung-Woo Jun, Ericsson
07:00:35 From  Dong Wang (China Telecom)  to  Everyone:
    #info Dong Wang, China Telecom
07:00:44 From  Timo Perala (Nokia)  to  Everyone:
    #info Timo Perala, Nokia
07:01:11 From  Andreas Geissler (DT)  to  Everyone:
    #info Andreas Geissler, DT
07:01:19 From  Bruno Sakoto  to  Everyone:
    #info Bruno Sakoto, Bell Canad
07:01:39 From  bin.yang@windriver.com  to  Everyone:
    #info Bin Yang, Wind River
07:01:55 From  Yuanhong Deng  to  Everyone:
    #info Yuanhong Deng, China mobile
07:02:36 From  N.K. Shankaranarayanan (STL)  to  Everyone:
    #info N. K. Shankar STL
07:03:08 From  Catherine Lefevre  to  Everyone:
    #info, catherine lefevre ATt
07:03:10 From  Timo Perala (Nokia)  to  Everyone:
    Joining without adudio for a moment.
07:03:44 From  Eric Debeau  to  Everyone:
    #info Eric Debeau, Orange
07:18:46 From  Amy Zwarico  to  Everyone:
    https://logs.onap.org/onap-integration/daily/onap_daily_pod4_master/2022-05/11_02-33/index-versions.html
07:26:32 From  Catherine Lefevre  to  Everyone:
    Not sure if this tool can help - need to check deeper - https://www.sonatype.com/products/open-source-security-dependency-management?smtNoRedir=1
07:28:03 From  Amy Zwarico  to  Everyone:
    I believe that this is the NexusIQ scanner we are already using. It identifies open source dependencies within a single repo/container
07:29:40 From  Catherine Lefevre  to  Everyone:
    these are tools to check dependencies from security perspectives -  but maybe these can help for this prpose - https://www.whitesourcesoftware.com/
07:36:51 From  Catherine Lefevre  to  Everyone:
    LFN IP Legal scan + (Sonar, FOSSology, NexusIQ) scans on the unmaintained repos are hidden behind 'Jenkins' i f yes then let's add a note?
07:41:26 From  Catherine Lefevre  to  Everyone:
    Thank you Amy, Chaker and all of you who summarizes the actions - great job !
07:41:37 From  Byung-Woo Jun (Ericsson)  to  Everyone:
    Good work Amy!
07:43:19 From  Catherine Lefevre  to  Everyone:
    +1 David greatly led this task force- kudos
07:49:26 From  Catherine Lefevre  to  Everyone:
    https://wikilf-onap.onapatlassian.orgnet/wiki/display/DW/Jakarta+Milestone+and+Requirements+Exception+Requests
07:49:35 From  David McBride  to  Everyone:
    https://wikilf-onap.onapatlassian.orgnet/wiki/x/YYKfBgWYj7
07:53:00 From  Ranny Haiby (Linux Foundation)  to  Everyone:
    Why is next week TSC meeting cancelled?
07:53:05 From  Catherine Lefevre  to  Everyone:
    https://wikilf-onap.onapatlassian.orgnet/wiki/display/DW/Release+Planning%3A+Jakarta
07:55:00 From  Timo Perala (Nokia)  to  Everyone:
    @Ranny: Ascension Holiday observed in many European countries
07:57:41 From  Catherine Lefevre  to  Everyone:
    https://wikilf-onap.onapatlassian.orgnet/wiki/display/DW/Release+Planning%3A+Kohn
07:59:30 From  Ranny Haiby (Linux Foundation)  to  Everyone:
    Thanks @Timo
08:07:51 From  Catherine Lefevre  to  Everyone:
    let's create tasks for req owners based on reqs in this list - https://wikilf-onap.onapatlassian.orgnet/wiki/display/DW/Kohn+Release+Requirements
08:10:02 From  Catherine Lefevre  to  Everyone:
    Kohn M1 - Kohn  on 6/9
08:10:03 From  Amy Zwarico  to  Everyone:
    WhiteSource also analysis open source dependencies within a repo. It is not analyzing the external APIs called from the repo.
08:10:31 From  Amy Zwarico  to  Everyone:
    NexusIQ and WhiteSource are equivalent tools
08:12:35 From  Ranny Haiby (Linux Foundation)  to  Everyone:
    @amy - What about Docker image dependency scanning? Something like Scancode?
08:14:45 From  Amy Zwarico  to  Everyone:
    Kenny & David: the updated "unmaintained" deck has been uploaded to the meeting minutes.
08:15:49 From  Kenny PAUL (LFN)  to  Everyone:
    @Amy - thanks.
08:23:19 From  Kenny PAUL (LFN)  to  Everyone:
    https://events.linuxfoundation.org/lfn-developer-testing-forum/
08:25:34 From  Catherine Lefevre  to  Everyone:
    I am sorry I need to drop for walking to my next meeting. Thank you ONAP Community - let's wrap up Jakarta as soon as we can so we can completely focus on Kohn
08:27:10 From  Kenny PAUL (LFN)  to  Everyone:
    https://wiki.lfnetworking.org/x/-oQZB

...