Duration 60 minutes
| Duration | Agenda Item | Requested by | Notes / Links |
|---|---|---|---|
| START RECORDING | |||
| API Postman/Swagger in ReadTheDocs | There is a need to easily find from ReadTheDocs all the definition of projects' API. Currently each project has its own format and its specific location. Unless you know ehere exactly to go, it is difficult to find location of proper API. AI: Sofia Wallin to propose a way to get a collection of all API. (not in scope for Casablanca) | ||
Vulnerability-Security report | Amy Zwarico | Remind PTL to follow up on emails from Amy Zwarico, Paweł Pawlak Stephen terrill | |
Vulnerability report | James Forsyth | Replacing 1/3 party components that exposes false-positive vulnerabilities may be cumbersome (up to 1 full release in term of effort for AAI). Teams are requesting guidance from SECCOM on the approach. Details of research made on this available at Using Google gson vs FasterXML Jackson by Keong Lim AI: Amy Zwarico to follow up with SECCOM for guidance on replacing 1/3 party with false positive | |
Release Management Update: RC1 update and RC2 on Nov 8. | AI: @All PTL RC2 is coming this week on Thursday,Nov 8. PTL to fill out RC2 template All Highest and High defects are expected to be close. | ||
| Integration Status (including Use Case) |
| ||
| License check latest email | AI: @ALLPTL to close on latest License scan email from Steve Winslow | ||
Action items
- @All PTL provide input as of how to configure logs for their project INT-710 - Getting issue details... STATUS
- @All PTL to close on latest License scan email from Steve Winslow
- Amy Zwarico to follow up with SECCOM for guidance on replacing 1/3 party with false positive
- Sofia Wallin to propose a way to get a collection of all API. (not in scope for Casablanca)
- AI: @All PTL RC2 is coming this week on Thursday,Nov 8. PTL to fill out RC2 template