1/11/2021 Meeting

Akraino Security Sub-Committee Meeting Agenda 01/11/2021

Attendees:

Randy Stricklin

Brett Preston

Jim St. Leger

Pranab Bajpai

Daniil Egranov

Omogbolahan Alli

Tina Tsou

Agenda:

1. Open forum to discuss CVE exception spreadsheet items with Blueprint owners.

2. LFX Security Page Discussion

• Webinar on LFX Security on Jan 20th - https://lfx.linuxfoundation.org/resources/webinars/

• LFX Security site. https://security.lfx.linuxfoundation.org/#/

  • How LFX Security relates to the Akraino project

    • What tools are used?

    • How are repos scanned and how are these repos determined?

  • Missing manifest file, LFX security cannot scan for vulnerabilities

    • Example: https://docs.google.com/document/d/1nYIAQ--Xk3hTkpeZ0NiAnhWk5rtTY_7HyY6GkdOKnsU/edit

    • Show manifest samples pdf file.

  • Full list of repos below:

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/starlingx

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/redfish

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-ipa-deployer

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-caas-helm

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/nc-seba

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-monitoring

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-lockcli

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/connected-vehicle

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-rpmbuilder

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-remote-installer

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/yaml_builds

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-distributed-state-server

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-config-manager

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-storage

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/kni-templates

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-infra-ansible

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-access-management

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-hw-detector

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-caas-install

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-hostcli

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-cm-plugins

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-yarf

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/rec

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-caas-logging

    • Akraino-edge-stack - https://github.com/akraino-edge-stack/ta-ironic-virtmedia-driver

3.  Ensure BluVal tools are updated regularly.