*Moderators:* Amy Zwarico , Pawel Pawlak *Calendar:* maintained in the onap-meetings group. *Bridge* ONAP13

Team, I'm pleased to report that the Guilin maintenance release has been completed. You may read the release notes here. Thanks for everyone's efforts in completing this important work. Let me know if

Hi Bob, ok, granted. Best regards Paweł Pawlak | Product Owner | ONAP SECCOM Chair M +48501501030 Od: Bob Heinemann <rheinemann@...> Wysłano: poniedziałek, 24 maja 2021 20:23 Do: Paweł Pawlak <p.pawla

Pawel / Amy: I would like to present our results regarding the analysis of the container logging requirements against the ATT&CK container matrix at the SECCOM meeting tomorrow. I would like to reques

Is anyone familiar with the use of Tornado as a replacement for Flask? I was asked to review a Gerrit PR based on this JIRA ticket from a SECCOM point of view: JIRA: https://jira.onap.org/browse/DCAEG

Me neither… Best regards Paweł Pawlak | Product Owner | ONAP SECCOM Chair M +48501501030 Od: onap-seccom@... <onap-seccom@...> W imieniu Amy Zwarico Wysłano: środa, 19 maja 2021 00:06 Do: HANSEN, TONY

Hi, I planned to share this slide deck draft before the meeting tomorrow, but I need to verify some of the contents with the team before sharing it. So, I will present the slide deck at our meeting to

Pawel, Amy, Fabian: I have some cycles to help on the logging topic. How best can I assist? Bob

A story about successfully keeping up-to-date with respect to components with known vulnerabilities. Tony On 5/5/2021, 10:40 PM, "CII-badges@... on behalf of David A. Wheeler" <CII-badges@... on beha

Hi: A follow up question from this weeks meeting. Amy you had mentioned you will be presenting to the OPS 5G project on May 6th. What forum / meeting is that presentation occurring? Is it an ONAP meet

Hi All: After the 4/27 SECCOM meeting I did some digging on the ONAP Logging Projects. Here are my notes and observations. After going through the links below it appears there is an overlap between wh

Thanks for pointing that out David. Do you know why it is in the unmaintained state? I looked at the meeting notes and it seemed to abruptly stop. Did the PTLs move on and no one backfilled?

OK for me as well. +1 Best regards Paweł Pawlak | Product Owner | ONAP SECCOM Chair M +48501501030 Od: onap-seccom@... <onap-seccom@...> W imieniu Amy Zwarico Wysłano: piątek, 23 kwietnia 2021 03:34 D

Hi Seccom members, during OOM weekly meeting, version targeted for kubernetes and helm was raised. Today kubernetes 1.21 is out According to Azure roadmap, it should be available in june in AKS servic

The following email was posted to the CII-badging mailing list. Some Univ of Minnesota (UofMN) researchers did "some bad things." Given that ONAP requires two-party commits and LF credentials, I would

Attached is a deck with logging requirements for the ONAP containers that we will discuss at the 20 April SECCOM meeting. These are requirements adopted from the VNF security requirements and addition

5 April SECCOM update for the PTLs. SECCOM is proposing that the TSC promote vulnerable package upgrade (REQ-439) and CII Badging (REQ-443) to Global Requirements for Istanbul. Package upgrades will b

On 4/11/2021, 2:59 PM, "CII-badges@... on behalf of David A. Wheeler" <CII-badges@... on behalf of dwheeler@...> wrote: The CII Best Practices production (“real”) site has a new criterion, “maintained

Hi Everyone, I just got off of a call with another community where I was looking at the security coordination page https://wiki.onap.org/x/a4BX. This is the landing page linked to the TSC subcommittee

After our last SECCOM meeting, I felt that it would be nice to point out a succinct overview of what each CII badging level entails. If you look at the bottom half of the README for the CII badging co