PTL 2018-08-20
Duration 60 minutes
Duration | Agenda Item | Requested by | Notes / Links |
---|---|---|---|
START RECORDING | |||
Third Party Vulnerability thread definition | Stephen terrill | Push back from PTLs to address Severe (High) vulnerability thread. AI: Gildas Lanilis Gmail to follow up with Stephen terrill and Amy Zwarico | |
Healhcheck Expectations for M4 and docker-manifest-staging.csv update | Gildas Lanilis Gmail Gary Wu | Agreement to adopt that path | |
Docker compose issue | Gildas Lanilis Gmail Jessica Gonzalez | Remaining Chrome issue have been addressed | |
CSIT Jobs | Info on new CIT Tab (no verify job) provided by Gildas Lanilis Gmail. No specific comment. |
Action items
- AI: Gildas Lanilis Gmail to follow up with Stephen terrill and Amy Zwarico on Third Party Vulnerability thread definition. High vulnerability category (has presented by Stephen terrill in Beijing page #4) was not interpreted as "Severe" according to Sonatype Nexus IQ. PTLs pushed back and perceived this as "New" requirements.
Zoom Chat Log
06:18:59 From Kenny Paul (Linux Foundation) : REMINDER: As mentioned at the TSC Meeting- I am working off-line Monday the 20th through Friday the 24th.
Email will be checked once per day and I will only be responding to messages directly relating to TSC or Subcommittee elections or those marked #urgent.
06:19:15 From Kenny Paul (Linux Foundation) : Subcommittee emails will do out today.
06:19:22 From Kenny Paul (Linux Foundation) : go out
06:27:51 From Michael O'Brien (LOG, Amdocs) : I use oparent - and will key off the jackson, spring version numbers - or use the green ones flagged in the clm build - however some libraries like tomcat - keyed on my docker image will need an image switch as tomcat is red event to 9..0.0
06:30:35 From Pamela Dragosh : https://lf-onap.atlassian.net/wiki/display/DW/Deliverables+for+API+Freeze+Milestone+Checklist+Template
06:30:41 From Pamela Dragosh : Check out the Development section
06:59:09 From Michael O'Brien (LOG, Amdocs) : +1 for Randa - I currently unassign automaticall-assigned jiras
07:00:02 From Michael O'Brien (LOG, Amdocs) : Note docker image choice affects CLM highs - so collaboration with CIA project will help