2024-09-17 Meeting notes

IaC scanning report

@ved ratan

• Report Analysis

• Raising issues to the wider team?

https://github.com/nephio-project/nephio/issues/808

checkov => scan the whole catalog package => prioritize the findings => Take the findings back to SIG-Automation => Fix some of those findings ourselves in SIG-Security?

Updates on Workload Identity

@Prashant

https://github.com/nephio-project/nephio/pull/809
https://github.com/nephio-project/catalog/pull/84

Redhat COP demo in progress (this would allow us to use k8s resources to create vault policies).