Agenda

Antitrust Policy

• Action Items Review

• Nephio Repos to consider:

  • Porch ==> | OSSF | IaC Scan | SonarCloud |

  • nephio

  • catalog

  • api

  • oai

  • free5gc

  • nephio-sdk

• Vault Integration?

• License Header, any pending actions?

• https://jira.linuxfoundation.org/plugins/servlet/desk/portal/4/SUPPORT-33914

•  

Minutes

• Gaurav did a test run of checkov on nephio and there were 2000+ findings … Triaging 2k+ tickets?

  • Ignore certain folders and reduce the findings

  • Check if some tool can be used for triaging

• @Prashant Mishra … Which workloads could be targeted for vault integration? Check with SIG-Automation team.

  • hashicorp-vault-secrets-operator (VSO)

  • ensure that our implementation does not mandate a particular secrets manager tool.

Topic 1

• Comments

Action items