====================================== #acumos-meeting: Security Subcommittee ====================================== Meeting started by aimeeu at 14:26:34 UTC. The full logs are available at http://ircbot.wl.linuxfoundation.org/meetings/acumos-meeting/2018/acumos-meeting.2018-06-26-14.26.log.html . Meeting summary --------------- * Jira tasks (aimeeu, 14:26:58) * Bryan created tag in Jira for all security items; items are displayed on Security wiki page (aimeeu, 14:27:40) * these Jira items are for all security-related tasks across all components (aimeeu, 14:28:45) * attendees Bryan, Aimee Ukasick, Vineet Tripathi (aimeeu, 14:29:03) * the Security committee needs to work with projects to prioritize existing Jira items (aimeeu, 14:29:41) * Validation-Security component (aimeeu, 14:30:10) * page created in the Common Services project's wiki space (aimeeu, 14:30:30) * #link https://wiki.acumos.org/display/CS/Validation-Security (aimeeu, 14:30:47) * Vineet: are all of these related to November release? Bryan: yes (aimeeu, 14:31:39) * Vineet (Portal team) will work with Mukesh to schedule work on these tasks (aimeeu, 14:32:27) * Goals for Athena (aimeeu, 14:33:54) * #link https://wiki.acumos.org/display/SEC (aimeeu, 14:34:09) * Bryan: unsure if Community is ready to stand behind these goals (aimeeu, 14:34:26) * how the ecosystem has to operate in terms of "trust" (aimeeu, 14:34:57) * need to ensure a federated system that I am connected to isn't a threat (aimeeu, 14:36:39) * Validation-Security component (aimeeu, 14:37:44) * needs to be a main focus since it is the most problematic (aimeeu, 14:38:23) * #link https://wiki.acumos.org/display/CS/Validation-Security (aimeeu, 14:38:48) * #link https://jira.acumos.org/browse/ACUMOS-1041 (aimeeu, 14:39:57) * #link https://jira.acumos.org/browse/ACUMOS-1176 (aimeeu, 14:43:24) * discussion on k8s job to trigger scan using 3rd party open source tools (aimeeu, 14:54:03) * Vineet will check into getting resources (aimeeu, 14:54:31) * discussion on what the current validation component does (aimeeu, 14:54:50) Meeting ended at 14:55:34 UTC. People present (lines said) --------------------------- * aimeeu (26) * collabot_ (4) * bryan_att (0) Generated by `MeetBot`_ 0.1.4