In order to fix the issue with log4j vulnerability, we have to identify all the projects and repositories where vulnerable version exists. List shall be shared with SECCOM and ONAP community.

DoD:

All ONAP repositories and containers are scanned, so we know where the vulnerability exists.

Information is shared with SECCOM and ONAP community.