AAF Frankfurt Release: TSC must have requirement



Requirement

commitment & strategy 

Requirement

commitment & strategy 

Document current upgrade component strategy

AAF has an upgrade strategy, and belief it is documented.  If not, then do.

track on AAF-1044

SECCOM Perform Software Composition Analysis - Vulnerability tables

AAF's SECCOM Vulnerabilities are generally clean, however, verify that nothing new has cropped up.

track on AAF-1045

SECCOM Password removal from OOM HELM charts

N/A

AAF never had passwords in OOM...

AAF enabled other apps to avoid passwords since Dublin.

SECCOM HTTPS communication vs. HTTP

N/A

AAF has always been HTTP/S for all components, except "FS".  FS (Fileserver) is documented exception...  Needed for access to RCLs during TLS connection (TLS conversational requirement to be HTTP)