+1 We are in the process of updating the recommendations, and plan to finalize by the end of the week. (https://wiki.onap.org/pages/resumedraft.action?draftId=81400847&draftShareId=7afd1e06-3645-46c7-9e82-8e51a00df4f7&)
Python 3.9.5 on alpine 3.13 is consistent with the proposed recommendations. We are proposing Java SE 11.0.11. From: [email protected] <[email protected]> On Behalf Of Pawel Pawlak via lists.onap.org Sent: Tuesday, May 18, 2021 9:41 AM To: [email protected]; ZWARICO, AMY <[email protected]>; Krzysztof Opasiak <[email protected]> Cc: Lefevre, Catherine <[email protected]>; [email protected]; Bartek Grzybowski <[email protected]>; [email protected]; [email protected]; Kuzmicki, Krzysztof (Nokia - PL/Wroclaw) <[email protected]>; [email protected]; [email protected]; [email protected]; RAJEWSKI Lukasz O-PL <[email protected]>; HARDY Thierry TGI/OLN <[email protected]>; [email protected] Subject: [onap-discuss] ODP: [ONAP] [SECCOM] [Istanbul] Seccom recommendations for baseline images +1. Best regards [cid:[email protected]]<https://urldefense.com/v3/__https:/www.f5.com/__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6bOwpv-x$> [cid:[email protected]] Paweł Pawlak | Product Owner | ONAP SECCOM Chair M +48501501030 [cid:[email protected]]<https://urldefense.com/v3/__https:/www.twitter.com/f5__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6W4vx0Jb$> [cid:[email protected]] <https://urldefense.com/v3/__https:/www.linkedin.com/company/f5/__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6Wbati7M$> [cid:[email protected]] <https://urldefense.com/v3/__https:/www.facebook.com/f5incorporated__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6YbP6HTi$> [cid:[email protected]] <https://urldefense.com/v3/__https:/www.youtube.com/user/f5networksinc__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6RlRPXDs$> [cid:[email protected]] <https://urldefense.com/v3/__https:/devcentral.f5.com/__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6bY3H-Vs$> [cid:[email protected]]<https://urldefense.com/v3/__https:/www.f5.com/company/code-connects__;!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6XrNTWX3$> Od: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Wysłano: wtorek, 18 maja 2021 15:04 Do: ZWARICO, AMY <[email protected]<mailto:[email protected]>>; Pawel Pawlak <[email protected]<mailto:[email protected]>>; Krzysztof Opasiak <[email protected]<mailto:[email protected]>> DW: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]>; Bartek Grzybowski <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]>; Kuzmicki, Krzysztof (Nokia - PL/Wroclaw) <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]>; RAJEWSKI Lukasz O-PL <[email protected]<mailto:[email protected]>>; HARDY Thierry TGI/OLN <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]> Temat: [ONAP] [SECCOM] [Istanbul] Seccom recommendations for baseline images EXTERNAL MAIL: [email protected]<mailto:[email protected]> Hi Seccom We would like to build the java and python baseline images for Istanbul. Do you confirm that the reco are correct: https://git.onap.org/integration/seccom/tree/recommended_versions.yaml?h=istanbul<https://urldefense.com/v3/__https:/nam02.safelinks.protection.outlook.com/?url=https*3A*2F*2Fgit.onap.org*2Fintegration*2Fseccom*2Ftree*2Frecommended_versions.yaml*3Fh*3Distanbul&data=04*7C01*7Cp.pawlak*40f5.com*7Cdddfd1960263437daa7c08d919fd8b07*7Cdd3dfd2f6a3b40d19be0bf8327d81c50*7C0*7C0*7C637569399033124998*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=LagBvFMS5kX5jhhomNQ0zdt4hXBE71Sd*2FSBHxfohMgU*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSU!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6RUaOf10$> If you are OK, we would like to move to python3.9.5 on alpine 3.13 the current reco is python3.9 but alpine is 3.12 in 3.13, Alexander reported that the management of the licenses is better it would be helpful to keep on working on the cleaning of the dockers. BTW, the integration of the dynamic scan is now fully integrated in CI (Thanks Alexander!) on every weekly CI run, you can have access to the following table: https://logs.onap.org/onap-integration/weekly/onap_weekly_pod4_master/2021-05/17_18-33/security/tern/index.html<https://urldefense.com/v3/__https:/nam02.safelinks.protection.outlook.com/?url=https*3A*2F*2Flogs.onap.org*2Fonap-integration*2Fweekly*2Fonap_weekly_pod4_master*2F2021-05*2F17_18-33*2Fsecurity*2Ftern*2Findex.html&data=04*7C01*7Cp.pawlak*40f5.com*7Cdddfd1960263437daa7c08d919fd8b07*7Cdd3dfd2f6a3b40d19be0bf8327d81c50*7C0*7C0*7C637569399033134949*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=UiDv8lrZ*2FruS5e0nQHDDNhu*2B4rD2WMMU*2BC8JBuYzUQU*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!BhdT!yDduIeAb9ZBQ59JFi9ttPe5v44xlTbX_Wg_FtunNJ-jUW6jpPmlyRpir6fGafdNf$> Note that the test is long (several hours). We need to include also the baseline images in the scan.. /Morgan _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#23253): https://lists.onap.org/g/onap-discuss/message/23253 Mute This Topic: https://lists.onap.org/mt/82923091/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
