search

eclipse-tractusx / sig-release

https://eclipse-tractusx.github.io/sig-release
Apache License 2.0
7 stars 6 forks source link

24.05 SSI Credential Issuer - Release Checks #673

Closed evegufy closed 1 month ago

evegufy commented 2 months ago

[!IMPORTANT]
Follow the guidance on how to use the templates.

Release Info

Please provide information on what you want to be included in the Eclipse Tractus-X release. If you are not owner of this issue, please provide the information as comment to the issue. Make sure to assign this issue to expert(s) for their approval, as soon as you have finished preparation. Multiple assignees allowed; they will un-assign themselves once review completed.

Version to be included in Eclipse Tractus-X release: 1.0.0 [RELEASED]

Leading product repository: https://github.com/eclipse-tractusx/ssi-credential-issuer

For the QG Review the latest available Release Candidate (RC) version is to be checked, the RC versions will be kept up to date in the following: 1.0.0-rc.4

Compliance Verifications

This issue tracks all checks, that need to be performed for a product release in Eclipse Tractus-X.

General Checks

[!NOTE] Note: most criteria for documentation and security are now covered in TRGs

Security Checks

Test Results

Helpful Links

evegufy commented 2 months ago

Reviewing Committer: TBD

evegufy commented 1 month ago

Reviewing Committer: TBD

Reviewing Committer is @FaGru3n, thanks for taking it over! as discussed, just let me know in the next couple of days in case it may not be possible anyway.

ThomasObermeyer commented 1 month ago

Review of issuer component done. It s orchestrating the communication between portal and wallet. The interfaces have been defined by a joint specification process .

Approved @kelaja

pablosec commented 1 month ago

Security assessment performed on 2024-05-15 by @szymonkowalczykzf and me.

Threat modeling/risk assessment will be finalized next week, no major risks to be expected. Will update here, as soon as threat modeling has passed.

FaGru3n commented 1 month ago

Reviewing Committer: TBD

Reviewing Committer is @FaGru3n, thanks for taking it over! as discussed, just let me know in the next couple of days in case it may not be possible anyway.

just finished the big points today but not the full qg-check list... legal checks and some remaining security checks are on our list, informed my team but guess for the remaining task of legal stuff, every committer can jump in here... will be back on 27. May... many thanks for your trust. updated the issue at least IMHO no breaking points but small hints

cbrugg commented 1 month ago

INT Tests need to be documented. Testmanagement Approval cannot be given at this time.

RolaH1t commented 1 month ago

QG review 17-May data sov pending TRGs in progress / no blocker Thread modelling discussed 15-May; approval outstanding regression tests in progress user journey approval expected cw21 by @jjeroch

vialkoje commented 1 month ago

no contract offers used in this interaction. therefore criteria not applicable. Expert approval granted.

RolaH1t commented 1 month ago

@evegufy data sov considered ok

pablosec commented 1 month ago

Security assessment performed on 2024-05-15 by @szymonkowalczykzf and me.

Threat modeling passed: eclipse-tractusx/ssi-credential-issuer#139

cbrugg commented 1 month ago

INT Tests are documented. However it was discussed that the Issuer Component would be implicitly tested through the Portal. As the Portal is still not fully done with tests or maybe even still actively developing at this point, please clarify in how far all necessary tests were performed. Thank You!

jjeroch commented 1 month ago

Tests are finished (all credential related tests from portal) and user journey approved with this comment. The Issuer Component works as expected/designed

cbrugg commented 1 month ago

Thank you for your efforts! TM approval can be given then.

FaGru3n commented 1 month ago

Thx for your effort @evegufy , guess last remaining step for QG the following enablement for the workflow https://github.com/eclipse-tractusx/ssi-credential-issuer/issues/136 after we have now an official release

RolaH1t commented 1 month ago

... and the 2 checkboxes on top of this issue shall be checked, so we can formally approve QG ;-)

evegufy commented 1 month ago

Version to included in R24.05: 1.0.0 [RELEASED]

RolaH1t commented 1 month ago

Congrats: Quality Gate fully approved with all necessary pre-requisites fulfilled! Thanks for all your efforts, Roland