SECCOM shared their view for Guilin: https://wiki.onap.org/display/DW/Integration+and+Built+Tests+For+Releases

this will require the creation of new security tests

• check recommended versions of third party components (https://wiki.onap.org/display/DW/Database%2C+Java%2C+Python%2C+Docker%2C+Kubernetes%2C+and+Image+Versions)
• check pod limits
• test certificate validity
• improve CIS (more for OOM)
• harden simulators/emulators

+ SECCOM: zwarico  Pawel_P  kopasiak