2024-11-19 Meeting notes

Workload Identity PR status

@Prashant Mishra

OpenSSF score revisit

Is there any scope for improvement? Branch-Protection rules and Signed-Releases seem to be the only two low hanging fruits.

LFX Insights

Why the score is so low? All the projects across Nephio GitHub org are considered. There seems to be no way of adding exceptions to certain repos.

IaC scanning

@ved ratan

<Ved could make it>