2020-08-25 Security Subcommittee Meeting Notes (under construction)

Please find below the Minutes of Meetings and recording for the SECCOM meeting that was held on 25th of August 2020.

Summary	Description	Status	Solution
Last PTL's meeting (24th of August) update	Base image excluding GPL3 #ACTION: SECCOM to provide guidelines about where to document 'bash' or any other package required for the application to be added on top of the base image? #ACTION: SECCOM to share on 8/24 results of Java 8.0 Audit, also documented on REQ-351 REQ-350 - #ACTION: SECCOM - provide the list of projects that did not reply yet to this requirement to the comment of REQ-350 or add the link of the dashboard. Presentation from Amir Mohamad regarding implementation of REQ-323 -Package upgrade and Java 11 Janus graph (LF project ) has no version for Java 11- projects impacted : SDC, AAI and others -REQ-376 - Flow matrix to be updated by remaining PTL – Fabian SO weekly meeting was joined by Fabian and Pawel (Wednesday 1:30 UTC)	ongoing	Jira to be used to track requirements on top of base image. Grouping of requirements is preferred. Depencencies might be tackled in different ways. Tony already uploaded The latest version of Jcraf.jsch 0.1.55 has the same packages and class names as com.springsource.jcraft.jsch 0.1.41 (very old pacckage) During next PTL meeting identify next projects. Fabian will be off for the next 2 weeks - proxy to be identified.
TSC meeting outputs	No actions for SECCOM. Long discussion on a repo creation and add.
Open Networking & Edge Summit North America 2020 September 28 & 29, 2020 (Virtual Event)	Using a virtual events tool called INXPO https://lists.onap.org/g/onap-tsc/message/6513 ONAP and Cloud Native panel discussion
LFN Fall Technical Meetings October 13 - 15, 2020	Topic Proposals https://wiki.lfnetworking.org/x/9QhoAg
Java v8 in ONAP - status update	We received output of the script prepared by Pawel W. from Samsung. List is pretty long:		Migration process to be tracked.
OUR NEXT SECCOM MEETING CALL WILL BE HELD ON 25th OF AUGUST'20.	Topics proposed: What is next for Honolulu in the context of Service Mesh PoC? What is the impact of Service Mesh usage on runtime environment?

Recording

SECCOM presentation