Hello Brett, Jim and LFN TAC, I am familiar with the XGVela project based on my active engagement with ONAP. I will be happy to either lead or participate in any workgroup discussion that may be

LFN Technical Advisory Council When: Wednesday, 24 February 2021 7:00am to 8:00am (GMT-08:00) America/Los

Reminder: LFN Technical Advisory Council When: Wednesday, 24 February 2021, 7:00am to 8:00am, (GMT-08:00) America/Los

Dear LFN TAC, First of all, a big thanks for considering XGvela as a LFN project. This is following up on the Action Item from 01/13 (XGVela LFN Induction) to update Governance documentation. The

TAC Members – please forward this information to your community members. Hello LFN communities, Following the success of last year’sLFN technical whitepaper, we have kicked-off the

You have been invited to the following event. AI/ML data and model sharing investigation When Wed Mar 17, 2021 8am – 9am Mountain Time - Denver Where https://zoom.us/j/95444871204

Sorry I was unable to attend. Sadly, this time will rarely work for me as it is my weekly staff meeting with my management! These meetings do get canceled sometimes, but we will see how this works.

Folks, Thank you for meeting today to discuss how we can advance our interests in AI/ML models in a collaborative fashion. While we didn't create a clear action plan, we firmly established this is an

This, I think, is The Way... Enterprises are looking at the whole pipeline, and tools that are specific to only the piece of the final artifact are not going to be sufficient. (Necessary, but not

Hi, That's true. Main issue with using only NexusIQ is that it performs the scan based on pom.xml so we can catch vulnerabilities that exist in the final "java bundle" but that's not enough. ONAP

Hi, My colleague @Krzysztof Opasiak correctly commented that scanning Java dependencies is a good start, but there are vulnerabilities that come through Docker image dependencies. Our

Brian, thank you for trying it out and getting some real metrics! Today ONAP is running NexusIQ weekly and it generates an SBOM. There is an API that to get the SBOM in JSON or XML (I believe that

Jason, Robert, Interesting tool. I added it to the parent pom.xml for one of the ONAP repo’s and did a test run quite intensive (saturated 1 cpu core for 5 minutes or so – single

Thanks Robert for the input. What do other TAC members (and, in particular, project leads) think? Regards, Jason Hunt Distinguished Engineer, IBM Phone: +1-314-749-7422 Email: djhunt@... Twitter:

Hello everyone, [snip] Maven Central has provisions for SBOMs. Would it make sense to create some guidance as how to deploy https://github.com/CycloneDX/cyclonedx-maven-plugin in Java

2021-02-10 TAC Minutes Member Representing Member Representing Member Representing Al Morton ANUKET (TAC) x Ed Warnicke FD.io (TAC) x Morgan Richomme Orange x @Anil

LFN Technical Advisory Council When: Wednesday, 10 February 2021 7:00am to 8:00am (GMT-08:00) America/Los

Reminder: LFN Technical Advisory Council When: Wednesday, 10 February 2021, 7:00am to 8:00am, (GMT-08:00) America/Los

You have been invited to the following event. TAC/EUAG - AI/ML data sharing When Wed Feb 17, 2021 7:30am – 8am Mountain Time - Denver Where https://zoom.us/j/98317498620

LFN Technical Communities, The schedule for the LFN Developer & Testing Forum is now live here. The event will be held virtually over four days, February 1-4, 2021. Once again we will be gathering the