search

eclipse-tractusx / sig-release

https://eclipse-tractusx.github.io/sig-release
Apache License 2.0
8 stars 10 forks source link

R24.03 Semantic Hub - Release Checks #505

Closed kelaja closed 7 months ago

kelaja commented 8 months ago

Release Info

Please provide information on what you want to be included in the Eclipse Tractus-X release. If you are not owner of this issue, please provide the information as comment to the issue.

Version to be included in Eclipse Tractus-X release: helm version: semantic-hub- 0.1.35 Image version: 0.2.16

Leading product repository: https://github.com/eclipse-tractusx/sldt-semantic-hub

Compliance Verifications

This issue tracks all compliance related checks, that need to be performed for a product release in Eclipse Tractus-X.

Documentation

Security Checks

General Checks

Test Results

Helpful Links

tunacicek commented 8 months ago

Gaia-X compliance: @kelaja : No changes since Release 23.12 with respect to Gaia-X compliance -> Could you please tick this checkbox?

tunacicek commented 8 months ago

@kelaja : GDPR Compliance: No changes since Release 23.12 Catena-X.GDPR.Declaration.and.Requirements_V2024.03_SemHub.xlsx

tunacicek commented 8 months ago

Interoperability Check: Interoperability was ensured to Release 23.12. Since then no changes have been made. @kelaja : Could you please tick this checkbox?

tunacicek commented 8 months ago

Data Sovereignty Check: @vialkoje : Could you please tick this checkbox? No significant changes since Release 23.12. See also Description for R24.03 image

tunacicek commented 8 months ago

Verification of foreseen CX Standards: @thomas-henn : Could you please confirm? See also previous task for R23.12: https://github.com/eclipse-tractusx/sig-release/issues/125

tunacicek commented 8 months ago

Documentation

@vialkoje : No significant changes since Release 23.12. Could you please check and approve the checkboxes?

tunacicek commented 8 months ago

Security Checks- Thread Modelling Analysis: No changes since Release 23.12. See also Security Assessment diagram: https://github.com/eclipse-tractusx/sldt-semantic-hub/blob/main/docs/documentation.md#:~:text=s%20%3Fp%20%3Fo%20.%0A%7D-,Security,-Assessment

@guenterban : Could you please check and approve it?

tunacicek commented 8 months ago

User Journey : @thomas-henn : Could you please confirm? See also previous task for R23.12: https://github.com/eclipse-tractusx/sig-release/issues/128

thomas-henn commented 8 months ago

Verification of foreseen CX Standards: @thomas-henn : Could you please confirm? See also previous task for R23.12: #125

Yes, Semantic Hub is compliant with relevant published CX Standards.

thomas-henn commented 8 months ago

User Journey : @thomas-henn : Could you please confirm? See also previous task for R23.12: #128

Yes, user journey of Semantic Hub is aligned along with e.g. Digital Twin Registry, Discovery Services and Semantic Hub.

tunacicek commented 8 months ago

Security Checks - Dynamic Application Security Testing (DAST): Invicti scan has been made - the results can be seen here: https://www.netsparkercloud.com/scans/report/098b72536de448934397b11101ec06f6/

@PiotrStys : Could you please review and approved it?

PiotrStys commented 8 months ago

Hi @tunacicek, DAST approved.

tunacicek commented 8 months ago

Security Check- Secret scanning:

Secret Scanning (gitleaks) is activated and available: https://github.com/eclipse-tractusx/sldt-semantic-hub/actions/workflows/gitleaks.yml

@DnlZF Could you please review and approved it?

tunacicek commented 8 months ago

Security Checks - Static Application Security Testing (SAST): See the results here: https://analysiscenter.veracode.com/auth/index.jsp#ReviewResultsAllFlaws:47240:1397649:32851557:32821215:32836865::4406299

@BANANAS1337 : Could you please review and approved it?

tunacicek commented 8 months ago

Security Checks - Software Composition Analysis (SCA): https://analysiscenter.veracode.com/auth/index.jsp#ReviewResultsSCA:47240:1397649:32851557:32821215:32836865:::::4406299: @BANANAS1337 : Could you please review and approved it?

tunacicek commented 8 months ago

Security Checks - nfrastructure as Code https://github.com/eclipse-tractusx/sldt-semantic-hub/actions/workflows/kics.yml @RoKrish14 : Could you please review and approved it?

tunacicek commented 8 months ago

General Checks - Compliant with the Style Guide No changes since Release 23.12 UI is part of the Portal and considered there https://portal.int.demo.catena-x.net/semantichub @jjeroch : Could you please review and approve it?

tunacicek commented 8 months ago

Test Results - E2E Integration Test Tests done: See result here: https://jira.catena-x.net/browse/A1SLDT-1505

RoKrish14 commented 8 months ago

@tunacicek : As discussed-

SAST: Approved SCA: Approved IAC: Approved Secret Scanning: Approved

jjeroch commented 8 months ago

General Checks - Compliant with the Style Guide No changes since Release 23.12 UI is part of the Portal and considered there https://portal.int.demo.catena-x.net/semantichub @jjeroch : Could you please review and approve it?

@tunacicek we have a open defect from last release. We approved last release with the condition that the defect is getting solved in release 24.03. - whats the status. It looks still "undone" - https://github.com/eclipse-tractusx/sldt-semantic-hub/issues/157

tunacicek commented 8 months ago

General Checks - Compliant with the Style Guide No changes since Release 23.12 UI is part of the Portal and considered there https://portal.int.demo.catena-x.net/semantichub @jjeroch : Could you please review and approve it?

@tunacicek we have a open defect from last release. We approved last release with the condition that the defect is getting solved in release 24.03. - whats the status. It looks still "undone" - eclipse-tractusx/sldt-semantic-hub#157

Hi @jjeroch We updated in the backend to the newest sdk and enabled the diagram API again. The adjustments need to be done on the Portal UI side. @ma3u Do you have any updates on the UI part?

vialkoje commented 8 months ago

Expert Approval granted for Documentation and data sovereignty.

DirkBTSI commented 8 months ago

INT test performed/documented. E2E test performed/documented. No high defect. TM approved @kelaja : please approve for "E2E Integration Test passed"

RolaH1t commented 8 months ago

Open: InterOP ThreatModeling & Container Scans StyleGuide TRG QG approval postponed until topics addressed / no follow-up mtg required.

RoKrish14 commented 8 months ago

Discussed with @tunacicek Container Scans: Approved

szymonkowalczykzf commented 8 months ago

Security Assessment Process (Threat Modeling Analysis) approved.

No significant changes detected since last release (23.12). No open critical & high finding remaining for this release.

Documentation of the assessment will be moved out to the GitHub repositories of the Products before the next release.

HiHenrik commented 8 months ago

According to team no interoperability relevant changes for this release, therefore expert approval granted for interoperability

carslen commented 8 months ago

TRG checks completed.

RolaH1t commented 7 months ago

@tunacicek any update or conclusion on StyleGuide/UI? This is the only blocker from QG approval...

FaGru3n commented 7 months ago

Hi all,

will this be also in your interest?

  • [ ] Compliant with the Style Guide, fix will be delivered by @thomas-henn on release 24.05

@thomas-henn please provide a information / draft for the current release note.

Thanks in advance.

thomas-henn commented 7 months ago

@FaGru3n: With the support of @jjeroch and @mkanal the issue is under https://github.com/eclipse-tractusx/portal-frontend/issues/446 Currently in clarification if this can be solved for release 24.05.

RolaH1t commented 7 months ago

yes, @thomas-henn , no changes to our alignment yesterday. but in order to pass this current QG here we need two things: 1) a short "OK" from @jjeroch that she approves this approach for Release 24.03 and 2) your draft description of the "knownknown" which will remain unresolved for 24.03 Thx

RolaH1t commented 7 months ago

@thomas-henn & @jjeroch pls add your final conclusion here

jjeroch commented 7 months ago

@FaGru3n: With the support of @jjeroch and @mkanal the issue is under eclipse-tractusx/portal-frontend#446 Currently in clarification if this can be solved for release 24.05.

Hi, its a must with 24.05. I think it was really a miss to approach the ticket in the given time. Now after we offered to take it over again; a different team was approached. Thats not ideal. However we can not change this anymore but should improve in future. 24.03. approved

RolaH1t commented 7 months ago

all pre-conditions fulfilled, QG approval granted. Congrats.