Skip to content

Commit

Permalink
Merge branch 'eclipse-tractusx:main' into docs-kits/trace-block-notif…
Browse files Browse the repository at this point in the history
…ication-release-24.12
  • Loading branch information
johannsvarela authored Oct 15, 2024
2 parents 2ec8099 + ea9e89e commit c80d242
Show file tree
Hide file tree
Showing 40 changed files with 2,377 additions and 596 deletions.
60 changes: 60 additions & 0 deletions .github/workflows/trufflehog.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,60 @@
#********************************************************************************
# Copyright (c) 2024 Contributors to the Eclipse Foundation
#
# See the NOTICE file(s) distributed with this work for additional
# information regarding copyright ownership.
#
# This program and the accompanying materials are made available under the
# terms of the Apache License, Version 2.0 which is available at
# https://www.apache.org/licenses/LICENSE-2.0.
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# SPDX-License-Identifier: Apache-2.0
#*******************************************************************************/

name: "TruffleHog"

on:
push:
branches: ["main"]
pull_request:
# The branches below must be a subset of the branches above
branches: ["main"]
schedule:
- cron: "0 0 * * *" # Once a day
workflow_dispatch:

permissions:
actions: read
contents: read
security-events: write
id-token: write
issues: write

jobs:
ScanSecrets:
name: Scan secrets
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@v4
with:
fetch-depth: 0 # Ensure full clone for pull request workflows

- name: TruffleHog OSS
id: trufflehog
uses: trufflesecurity/trufflehog@7e78ca385fb82c19568c7a4b341c97d57d9aa5e1
continue-on-error: true
with:
path: ./ # Scan the entire repository
base: "${{ github.event.repository.default_branch }}" # Set base branch for comparison (pull requests)
extra_args: --filter-entropy=4 --results=verified,unknown --debug

- name: Scan Results Status
if: steps.trufflehog.outcome == 'failure'
run: exit 1 # Set workflow run to failure if TruffleHog finds secrets
34 changes: 34 additions & 0 deletions blog-meeting-minutes/2024-08-02-community-hour.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
---
slug: community-office-hour-2024-08-02
title: Community Office Hour 2024-08-02
authors:
- tom-rm-meyer-ISST
tags: [community, meeting-minutes]
---

## Office Hour meeting minutes

### Infrastructure

- Discussion on catenax-ng
- @matbmoser: please cross-check your own repository, if you reference it!
- @lgblaumeiser: we noticed that the R24.03 MIW needs catenax-ng resources. It temporarily stays up. (see [issue](https://github.com/eclipse-tractusx/managed-identity-wallet/issues/342))
- Consortia teams are gone. Thanks, it was a pleasure!

### Security team

- @matbmoser: Please do check for your security issues on the tab. High and critical issues need to be fixed. We should check this on high level / project level regularly in this meeting
- @tom-rm-meyer-ISST: For Truffle Hog, make sure that the workflow runs before merging. (see [e.g.](eclipse-tractusx/puris#531))

### FOSS

- @AngelikaWittek is gone. Thanks for your work!

### Open planning / community

- @stephanbcbauer:
- Refinement Phase went well overall. Committers please join the planning meetings.
- Some QGates are still open, please check.
- Review together the [release preparation](https://github.com/eclipse-tractusx/tractus-x-release/pull/34)


23 changes: 23 additions & 0 deletions blog-meeting-minutes/2024-08-30-community-hour.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
---
slug: community-office-hour-2024-07-26
title: Community Office Hour 2024-07-26
authors:
- arno_weiss
tags: [community, meeting-minutes]
---

## Office Hour meeting minutes

### Infrastructure

- @ds-hzimmer will continue to report from the monthly infrastructure updates that are to happen every month's last sunday.
- product teams will have to check their deployments after that

### Security team

- Trufflehog has now officially replaced GitGuardian as secret-scanning tool for Eclipse Tractus-X. [This is encoded by TRG8.03](https://eclipse-tractusx.github.io/docs/release/trg-8/trg-8-03)
- @ds-hzimmer reports about the sporadic use of the current sonarcloud instance for Eclipse Tractus-X. There's no TRG for it. It's unclear what additional benefit it will bring to those tools that are backed up with TRGs (Trufflehog, trivy, codeql).

### Q&A

- @tom-rm-meyer-ISST reports issues with the tls provider which will be checked with the infrastructure team.
13 changes: 12 additions & 1 deletion blog-meeting-minutes/authors.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ almadi_gabor:
title: Consortia System Team Member
url: https://github.com/almadigabor
image_url: https://github.com/almadigabor.png

fabian_gruen:
name: Fabian Grün
title: Consortia System Team Member
Expand Down Expand Up @@ -51,3 +51,14 @@ evelyn_gurschler:
name: Evelyn Gurschler
title: Tractus-X Project Lead
url: https://github.com/evegufy

arno_weiss:
name: Arno Weiß
title: Tractus-X Committer
url: https://github.com/arnoweiss

tom-rm-meyer-ISST:
name: Tom Meyer
title: PURIS Architect, Eclipse Committer
url: https://github.com/tom-rm-meyer-ISST
image_url: https://github.com/tom-rm-meyer-ISST.png
103 changes: 103 additions & 0 deletions blog/2024-10-16-refinement-day-1-R25.03.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,103 @@
---
title: Refinement Day 1 for Release 25.03
description: Tractus-X Community Update - Refinement Day 1 for Release 25.03
slug: refinement-day-1-R25.03
date: 2024-10-09T09:00
hide_table_of_contents: false
authors:
- name: Stephan Bauer
title: Platform Domain Manager
url: https://github.com/stephanbcbauer
image_url: https://github.com/stephanbcbauer.png
email: [email protected]
---

import RenderImage from './RenderImage'

![eclipse tractus x logo](@site/static/img/Tractus-X_openplanning.png)

Hello, Eclipse Tractus-X Community!

We’re excited to announce **Refinement Day 1**, taking place on **October 16th, from 09:05 to 12:00**. This event is focused on refining features for the
upcoming **Release 25.03**. Unlike previous meetings, this won't just be a feature presentation day — we’ll be diving into hands-on work, helping each other
refine features and identify dependencies.

The blocker and overall teams session link can be found on our [open-meetings](https://eclipse-tractusx.github.io/community/open-meetings#Refinement%20Day%201%20-%20Release%2025.03) page. We look forward to seeing you all there!

<!--truncate-->

## Agenda for Refinement Day 1

Here’s the plan for the day:
- **09:05 - 09:30**: Welcome, Introduction, and Expectations
- **09:30 - 11:15**: Refinement in dedicated groups, grouped by expert groups
- **11:15 - 11:45**: Presenting the results, grouped by expert groups
- **11:45 - 12:00**: Closing and Next Steps

During the refinement sessions, each group will focus on the first steps of skeleton-building for their features (based on the [feature template](https://github.com/eclipse-tractusx/sig-release/issues/new?assignees=&labels=&projects=&template=1_feature_template.md),
mapping them to the related roadmap items. Don’t worry about completing every section of the feature template just yet this is a time for brainstorming and forming initial ideas.

It's essential, however, to use the **feature template** and identify **dependencies** with other components or groups, which will help us add the correct labels to the features.
You’re encouraged to collaborate across groups as needed, and we’ll provide **Teams sessions** for each group to work in.

## Group Work & Presenting Results

The goal of the refinement is to **identify the first ideas and dependencies** within your group. The **General Teams session** will be available for any questions that come up during this collaborative work.

Important for the session:
- Use the [feature template](https://github.com/eclipse-tractusx/sig-release/issues/new?assignees=&labels=&projects=&template=1_feature_template.md) to structure your work
- Identify dependencies with other components or groups and add the correct labels to the features
- Use the supported-by field to map the feature with your expert group

At the end of the refinement session, we’ll regroup and present the progress made. Each expert group will present their refined features, focusing on what’s been developed so far and the key insights.

### Committee/Expert Groups and Teams Sessions:

:::tip
The sessions for the committees can be used to sync within the underlying expert groups. Feel free to switch between groups if necessary!
:::

- [Network Service Committee](https://teams.microsoft.com/l/meetup-join/19%3ameeting_MDM1MjE2NmQtMDU5NC00MjM2LTlkOGEtZWI1YTM0MzBjMTkw%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Business Partner Data Management](https://teams.microsoft.com/l/meetup-join/19%3ameeting_YThmNzMzODAtM2M0NS00MGVjLWJiNjMtODA5Njk3OWY4ODFi%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Self-Sovereign Identity](https://teams.microsoft.com/l/meetup-join/19%3ameeting_MGY3YzE1OTAtMDgxMS00YTVhLWE2ODYtMzM4MDMxZTk5MWJh%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Dataspace Connectivity](https://teams.microsoft.com/l/meetup-join/19%3ameeting_ZTJmYzdmOGMtOGE3Mi00YjkzLThlZTEtMTliNzJiZDljMTZl%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Digital Twins](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NDkyMWZmNDMtYmYzYi00MGM4LTg5NmUtNDIzZGJiZjFmZTIz%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Company Certificate Management](https://teams.microsoft.com/l/meetup-join/19%3ameeting_ZDVhNGMzYjAtNTk1MC00NTZlLWI1NzgtYjE0MjQ2NDgxOTJj%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Sustainability Committee](https://teams.microsoft.com/l/meetup-join/19%3ameeting_Y2Y1YTY3ZGQtMzEzOC00MGJmLTk1ZjEtOTBhZjgxMWVkZjBi%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Digital Product Pass](https://teams.microsoft.com/l/meetup-join/19%3ameeting_ZTQxMWY0YzgtYmM5MS00ZTA4LWE2YTUtMzk5Y2Y2NmZmNjJl%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Circularity](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NDMxOGM2YTItZGVhOC00N2EzLTlmMGEtYWJmYjYwOWFmMjk4%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Product Carbon Footprint - Methodology & Verification](https://teams.microsoft.com/l/meetup-join/19%3ameeting_MDIwMmQ3MGQtZWQ1Mi00YzQ5LTg3MjMtMmM3MWY1OGRlYmM2%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Product Carbon Footprint - Architecture & Interoperability](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NjFlZWYzNWYtNTViMy00NmExLTljOGYtYWE0N2U5MmQ3MzI3%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Product Carbon Footprint - on Electronics](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NWI1MzJmMzQtODliOC00ZDM0LTk0ZDgtMDdmYTljMGUxZjE3%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Product Lifecycle, Quality and Resiliency Committee](https://teams.microsoft.com/l/meetup-join/19%3ameeting_YmFhNDllOWItMWFiYi00MzBhLTkwZDMtM2FiOGZjOTAwY2E4%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Traceability](https://teams.microsoft.com/l/meetup-join/19%3ameeting_MTRmZjI5Y2EtZmZjYy00ZDcxLWIyMTItMzc0YzYwMzMwZGI3%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Demand & Capacity](https://teams.microsoft.com/l/meetup-join/19%3ameeting_MzhhMDMwZDQtMWM5Ny00YjNlLWEyZDYtNjg1MTRlZTM0ZGI5%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Online Simulation](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NjUyMzRiYTItMDNhNC00YzJhLWE0MmItOGZjZGU2MDEzNWE1%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [PURIS](https://teams.microsoft.com/l/meetup-join/19%3ameeting_OWZhODUxZGMtMGExNS00Y2NiLThlM2YtM2ExMjYyM2IzZTkw%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Data-driven Quality](https://teams.microsoft.com/l/meetup-join/19%3ameeting_ZDNjYTg5NjEtMGU1Mi00MWQ4LWI2ZTctZmQ5NDQwNmYzOGM1%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Industry Core Committee](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NzUxYzNlZjYtNzdkMi00NTExLWEzMWItMDc0NTM1YjM4ZGM5%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Architecture Management Committee](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NjI5YjNiNjItYTY4Ny00YTY0LTllNDAtZGRkMmMwYjA4OGRl%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Data Space Operations Committee](https://teams.microsoft.com/l/meetup-join/19%3ameeting_Mzk3N2ExMWMtNTk4ZS00ZjI0LWEzZjgtZDliOTM1MjE0ZmY0%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Data Sovereignty](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NWIwOGFiOGYtMjQ3Ni00YjA0LTg1N2MtNDJmMTQ0OGQ0ZTBm%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Working Groups](https://teams.microsoft.com/l/meetup-join/19%3ameeting_NjdmMTk2ZGEtMjFiMy00ZWIxLTllZDYtNTVlNTMwZDE5MjQ5%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)
- [Data Integration Pattern](https://teams.microsoft.com/l/meetup-join/19%3ameeting_OTk4NTYxZDctYmQzMy00ZTRmLTg0YzctZjBiZGExODUxM2Uw%40thread.v2/0?context=%7b%22Tid%22%3a%221ad22c6d-2f08-4f05-a0ba-e17f6ce88380%22%2c%22Oid%22%3a%22a8b7a5ee-66ff-4695-afa2-08f893d8aaf6%22%7d)

:::note
Feel free to switch between groups if necessary!
:::

### Special Note for KITs

For KITs, we understand that not all sections of the template are necessary right now. The most important things to include at this stage are:
- The **Feature Team** responsible for the work
- A brief **explanation of the feature** (just 2 sentences)

## Next Steps & Refinement Day 2

By the end of the session, we expect to have features that may not be fully refined but will be in good shape for further refinement or proactive work on dependencies. You’ll have the opportunity
to connect with other groups and components that you’re dependent on.

As we look ahead to **[Refinement Day 2](https://eclipse-tractusx.github.io/community/open-meetings#Refinement%20Day%202%20-%20Release%2025.03)**, our focus will shift towards **dependency components**. It will be crucial to have those dependencies properly tagged with labels on the features.

We look forward to a productive Refinement Day - Happy Refining! 🚀

Loading

0 comments on commit c80d242

Please sign in to comment.