-
Notifications
You must be signed in to change notification settings - Fork 89
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge remote-tracking branch 'remotes/upstream/main' into bt-rul-kit-…
…release
- Loading branch information
Showing
346 changed files
with
6,618 additions
and
11,017 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| # ############################################################################# | ||
| # Copyright (c) 2024 Contributors to the Eclipse Foundation | ||
| # | ||
| # See the NOTICE file(s) distributed with this work for additional | ||
| # information regarding copyright ownership. | ||
| # | ||
| # This program and the accompanying materials are made available under the | ||
| # terms of the Apache License, Version 2.0 which is available at | ||
| # https://www.apache.org/licenses/LICENSE-2.0. | ||
| # | ||
| # Unless required by applicable law or agreed to in writing, software | ||
| # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT | ||
| # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the | ||
| # License for the specific language governing permissions and limitations | ||
| # under the License. | ||
| # | ||
| # SPDX-License-Identifier: Apache-2.0 | ||
| # ############################################################################# | ||
| --- | ||
|
|
||
| name: "3rd Party dependency check (Eclipse Dash)" | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
| pull_request: | ||
| branches: | ||
| - main | ||
|
|
||
| permissions: | ||
| contents: write | ||
|
|
||
| jobs: | ||
| check-dependencies: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v4 | ||
|
|
||
| # See https://github.com/eclipse-tractusx/sig-infra/tree/main/.github/actions/run-dash for infos | ||
| # about the dash actions and possible config | ||
| - name: Run dash | ||
| id: run-dash | ||
| uses: eclipse-tractusx/sig-infra/.github/actions/run-dash@main | ||
| with: | ||
| dash_input: "package-lock.json" | ||
| fail_on_restricted: "true" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,38 @@ | ||
| --- | ||
| slug: office-hour-19-01-2024 | ||
| title: Office hour 19.01.2024 | ||
| authors: | ||
| - harald_zierer | ||
| tags: [meeting-minutes, community] | ||
| --- | ||
|
|
||
| ## office hour meeting minutes | ||
|
|
||
| ### System team | ||
| - No update | ||
|
|
||
| ### Security team | ||
| - Many open cases (>10) from GitGuardian, please check you inboxes (or spam folders) | ||
| - A bug bounty program is in the making | ||
|
|
||
| ### FOSS | ||
| - Happy new year: Don't forget to update the year in your copyright headers | ||
| - some corner cases will be clarified until next office hour | ||
| - There is a new draft [TRG 2.06](https://eclipse-tractusx.github.io/docs/release/trg-0/trg-2-6) regarding dependabot usage | ||
| - please update your `DEPENDENCIES` file(s) to ensure that the suggested changes are license compliant | ||
|
|
||
| ### Open planning / community | ||
| - Last open planning session went very well | ||
| - There's a new [open meetings](https://eclipse-tractusx.github.io/community/open-meetings) page | ||
|
|
||
| ### Open discussion | ||
| - discussion regarding the "Notice for docker image" to be moved into a separate file. | ||
| - [TRG 4.06](https://eclipse-tractusx.github.io/docs/release/trg-4/trg-4-06) will be updated to mandate a dedicated file. | ||
| - Please keep in mind to update your docker build workflow to include the new file instead of the `README.md`. See [example of TRG 4.05](https://github.com/eclipse-tractusx/eclipse-tractusx.github.io/blob/204cfddb5531fd6430001c0baf0ca12a97bb9718/docs/release/trg-4/trg-4-05.md?plain=1#L99-L100) for reference. | ||
| - discussion on where to discuss about new / changes to existing TRGs: TRG draft section, within the PR or GitHub discussions | ||
| - Sebastian is going to create a PR so everybody can vote on it | ||
| - As multiple people struggle with our current docusaurus[^1] setup, there will be a training/hands-on session soon. It's will be announced on the mailing list. | ||
| - Content updates for KITs: Please ensure that no copyrighted content (incl. Catena-X) is contributed to Tractus-X. | ||
| - False-positive issues opened by Trivy - please raise a "tooling support" issue in the [sig-security](https://github.com/eclipse-tractusx/sig-security) repository | ||
|
|
||
| [^1]: [docusaurus](https://docusaurus.io/docs): the generator for the pages you are reading right now |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| --- | ||
| slug: office-hour-26-01-2024 | ||
| title: Office hour 26.01.2024 | ||
| authors: | ||
| - almadi_gabor | ||
| tags: [meeting-minutes, community] | ||
| --- | ||
|
|
||
| ## office hour meeting minutes | ||
|
|
||
| ### System team | ||
|
|
||
| - Whenever a new room is created in the Eclipse Matrix chat, please announce it in the main [Tractux-X](https://matrix.to/#/#tractusx:matrix.eclipse.org) room, | ||
| office hour and mailing list so everybody can learn about it and join. | ||
|
|
||
| ### Security team | ||
|
|
||
| - New issue templates are available for the following topics: | ||
| - [OSS Tool membership request](https://github.com/eclipse-tractusx/sig-security/issues/new?assignees=SSIRKC&labels=security%2C+tool&projects=&template=tractus-x-oss-tool-membership-request.md&title=Requesting+access+to+%22%5BTOOL+NAME%5D+YOUR_REPOSITORY%22) | ||
| - [Ask the community](https://github.com/eclipse-tractusx/sig-security/discussions/categories/q-a) for security help via Discussions | ||
| - Keep an eye out on the [Security Announcements](https://github.com/eclipse-tractusx/sig-security/discussions/categories/announcements) where news | ||
| about security topics are announces regularly | ||
| - Get in touch with the Security Team for testing with [Snyk](https://snyk.io/) | ||
|
|
||
| ### FOSS | ||
|
|
||
| - There was a new election for a project lead role for [Stephan Bauer](https://github.com/stephanbcbauer) | ||
| - The Eclipse Project Handbook changed the section about handling copyright headers. A year range is not longer necessary, only the year when | ||
| the file was created so there is no need to keep an eye on updating the headers. It is still allowed to put year range (creation date and | ||
| last modification year) in the header but they have to be separated with comma character. | ||
| - Please sign the Eclipse Contributor Agreement when trying to contribute to the webpage. Without that it is not possible to merge commits | ||
| to the main branch. | ||
| - ❗ Please don't put any Catena-X content or resource on the website without permission. | ||
|
|
||
| ### Open planning / community | ||
|
|
||
| - New [Open Meetings Links](https://eclipse-tractusx.github.io/community/open-meetings) are listed directly on our webpage to participate and separate calendar files can be downloaded from there. | ||
| - Office hours will probably start a few minutes later so the people don't have to wait until everyone gets there. | ||
| - Commiters and Contributors Meeting could be a new form of communication where the committers are more involved getting some pressure off the System Team. | ||
| - Newjoiner rounds for basic introductions would be held every 2 weeks in a separate session. | ||
|
|
||
| ### Open discussion | ||
|
|
||
| - [Umbrella chart](https://github.com/eclipse-tractusx/e2e-testing): | ||
| - Currently there is a temporary solution for the Managed Identity Wallet by SAP until the [open source version](https://github.com/eclipse-tractusx/managed-identity-wallet) is fixed. This is a COTS | ||
| application and it raises questions like how it can be integrated into an open source software stack like the umbrella chart. It is not confirmed yet | ||
| whether the version from SAP can be used without a license. Currently all components can run without MIW but data exchange functionality won't work. | ||
| - Public API versioning is still an open topic where no decision has been made to create a TRG or guide the Tractus-X community to follow | ||
| one versioning strategy. | ||
| - An alternative for MS Teams should be found as it is hard to manage for an open community (e.g. Discord). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| --- | ||
| slug: office-hour-02-02-2024 | ||
| title: Office Hour 02.02.2024 | ||
| authors: | ||
| - fabian_gruen | ||
| tags: [meeting-minutes, community] | ||
| --- | ||
|
|
||
| ## office hour meeting minutes | ||
|
|
||
| ### System team | ||
|
|
||
| - Please be aware of our Markdown lint problem in the eclipse-tractusx.github.io that currently only the [`/docs`](https://github.com/eclipse-tractusx/eclipse-tractusx.github.io/blob/main/package.json#L15) folder is checked and should be extended to more markdown file directories | ||
| - TRG Update information about [TRG 3-1](https://github.com/eclipse-tractusx/eclipse-tractusx.github.io/pull/618) that was superseded by [TRG 5-09](https://eclipse-tractusx.github.io/docs/release/trg-5/trg-5-09) | ||
| - Upcoming Office Hours meeting minutes will be reported in the community section of our webpage and you can find [here](https://eclipse-tractusx.github.io/community/meeting-minutes) | ||
|
|
||
| ### Security team | ||
|
|
||
| - New [security issue templates](https://github.com/eclipse-tractusx/sig-security/issues/new/choose) for sig-security repository | ||
| - Security assessments [template](https://github.com/eclipse-tractusx/sig-security/issues/new?assignees=szymonkowalczykzf&labels=security%2C+assessment&projects=&template=security-assessment-request.md&title=%5BSecurity+Assessment%5D+SUBJECT_HERE) and [contact](https://github.com/szymonkowalczykzf) | ||
| - Access to security tools [template](https://github.com/eclipse-tractusx/sig-security/issues/new?assignees=RoKrish14&labels=security%2C+tooling&projects=&template=security-tooling-support-request.md&title=%5BSecurity+Tooling%5D+YOUR_ISSUE_TITLE_HERE) like Snyk and other tools | ||
| - [Snyk](https://snyk.io/) tool will be available after consortia time | ||
|
|
||
|
|
||
| ### FOSS | ||
|
|
||
| - Please take your vote on a new [Committer Election](https://projects.eclipse.org/projects/automotive.tractusx/elections/election-f%C3%A1bio-mota-committer-eclipse-tractus-x) for [Fábio Mota](https://github.com/fabiodmota) | ||
| - Please participate in [Eclipse Committer Office Hour Meetings](https://www.eclipse.org/projects/calendar/) and join the discussion about changes to the Eclipse IP Policy and Due Diligence Process | ||
|
|
||
| ### Open planning / community | ||
|
|
||
| - Open [Meetings Links](https://eclipse-tractusx.github.io/community/open-meetings) with ics invitation files are available for the community | ||
|
|
||
| ### Open discussion | ||
|
|
||
| - No open discussion |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| --- | ||
| slug: office-hour-09-02-2024 | ||
| title: Office Hour 09.02.2024 | ||
| authors: | ||
| - tomasz_barwicki | ||
| tags: [meeting-minutes, community] | ||
| --- | ||
|
|
||
| ## office hour meeting minutes | ||
|
|
||
| ### System team | ||
|
|
||
| - Kube Prometheus Stack upgraded to latest release [56.6.2](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-56.6.2). | ||
| - Committer Election for [Tuncay Tunc](https://github.com/tuncaytunc-zf) on Eclipse Tractus-X has started. | ||
| - The Committer Election for [Fábio Mota](https://github.com/fabiodmota) on project Eclipse Tractus-X concluded successfully. | ||
| - Committer volunteers wanted to participate/shadow next Quality Gate process. | ||
|
|
||
| ### Security team | ||
|
|
||
| - New TRG/s from security team was presented requesting for feedback [Security TRG 8.0](https://github.com/eclipse-tractusx/eclipse-tractusx.github.io/pull/657). | ||
| - Suggested to contact security team directly for any support required to use, complete Invicti related issues/tasks. | ||
| - Update for static application security testing/source code scanning, ongoing transition from Veracode to CodeQL. Reach out to security team for any assistance. | ||
| - Reminder on available onboarding process to [Snyk](https://snyk.io/). | ||
| - There will be separate security office hours meeting, biweekly Thursdays 8:30 - 9:30. | ||
|
|
||
| ### FOSS | ||
|
|
||
| - N/A | ||
|
|
||
| ### Open planning / community | ||
|
|
||
| - Open meetings [PR](https://github.com/eclipse-tractusx/eclipse-tractusx.github.io/pull/658). | ||
|
|
||
| ### Open discussion | ||
|
|
||
| - Question related to [TRG 1.04 Diagrams as code](https://eclipse-tractusx.github.io/docs/release/trg-1/trg-1-4), if there a need/requirement to convert already existing .png diagrams. It is recommended to use described in the TRG toolset to keep good level of maintainability of the diagrams, not a hard requirement though in case there is lack of source. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.