John Kuraikose

@Rich Rodgers

Lorenzo King

@Vasavi V 

Hussein Alayan  

Randy Templeton (TSC Chair)

@Tina Tsou (Deactivated)

David Martin

Chanda Bhingarde 

@Joseph Pearson

Benny Davis

Martin

Announcement and Issues

• SDO EOL (March 31st)

  • PRI - Spring framework vulnerability - needs to be updated 6.0.0.  Spring framework 6+ requires Java17

  • SDO does not use Java Serialization so CVE does not apply in this case (IBM will mark as false positive)

  • Once SDO Spring framework vulnerability addressed can EOL SDO (make repos read only)

  • Plan is still Archive Repo and end of March

• FDO 1.1.5 Updates

  • Address mySQL connector  vulnerability in 1.1.5 release (April)

• Open Horizon FDO Update - Joe

  •  IBM has membership in FIDO

  • Fido certification (conformance tool)

    • Independent certification vs LF Edge Certification

    •  

  • FSIM spec available publicly replace fdo_sys

  • FDO integration development complete

  • IEAM 

    • March 21st (approx)

    • Any addition FDO integration or usage

  • Open Horizon

    • Open Horizon Agent should be compatible with IEAM

    • https://open-horizon.github.io/docs/installing/fdo/#fdo-overview

  • Demo of FDO integration with Open Horizon on 02-9  https://lists.lfedge.org/g/open-horizon-mgmt-hub/viewevent?repeatid=30306&eventid=1712660&calstart=2023-02-09

• TAC Request

  • OpenSSF badging (Randy) - Questionnaire to understand the current project security practices - Required by all LF Edge projects, Whitehouse is looking at all open source projects and their security practices - Randy - go through every question

  • LFXSecurity portal onboarding (Vasavi) - security.lfx.dev - Kendall to contact Vasavi to being the onboarding process

  • Identify a primary/secondary reps to attend TAC meetings on a regular basis - Randy/Vasavi

  • Community Lab (RV-server)

    • Conformance testing - (Owner,Manuf)

Decisions

• For next meeting 

  • Upcoming meeting for LF Edge Lab

  • Update on 1.1.5 release

  • Update on SDO archive

  • Updates for FDO project by 3/3

    • Significate updates for Q1

  • Sharing updates to the growth plan for FDO

    • FDO rename

  • Increase Community engagement

    • EdgeX foundry

      • ORRA (Open Retail Reference Architecture) Chair - Arnaud Le Hors lehors@us.ibm.com

    • Other LF Edge Project engagement

Update on next release 

• Next release FDO

  • No updates. Should have a plan by the next TSC meeting

Update on Goals for the project sub committee

• 2 broad goals: Support LF Edge Projects (SDO integration across LF Edge Projects). Providing developer tools that assist in compatibility testing and rapid development.

• Next Step: Develop Growth Plan for LF Edge Phase 2 requirements

• Docker containers  - Bill of Materials (Bom) Syft/Grype (reads docker container and reports all software used)

SL No.

Voting Member

Member Company

Y/N/A

Ahmed AlWattar

Chanda Bhingarde

Lorenzo King

Hussein Alayan (Benny)

@Rich Rodgers

@Vasavi V

Randy Templeton

David Martin