[Starlingx-discuss] [build][meetings] Build team meeting minutes 02/14/2019

[Lara, Cesar]

Build team meeting

Agenda for 02/14/2019

- Cengn update
- CVE scan integration
- Opens

Notes

Cengn Update
Build environment stable, there has been some minor issues due to upstream changes, we don't have a huge impact and they have been solved in a timely manner. We need to establish an strategy to lock down bits and minimize risks on file versions on upstream changes, for this we discuss the possibility to have the latest versions for Master branch and lock down versions for release branch. We will write down a script to enforce this strategy

AR - Cesar to identify a resource to help Scott on enabling

AR - Cesar will identify a resource to help Scott to review scripts on Cengn that updates to packages on mirror

CVE scan integration
CVE scanning tool proposals presented

a sub team will evaluate tool and a proposal based on the following  requirements

- is fully automated
- is up to date with vulnerabilities
- can handle multiple OS
- need scanning of containers (maybe take a look on Clair tool)
- needs a report for further analysis
- link to patches or merged patch
- patch update - fix in OS first

AR Ken to send a communication to mailing list about the process we were following on this and updates

Regards

Cesar Lara
Software Engineering Manager
OpenSource Technology Center

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20190218/736bcbd2/attachment.html>