-
Bug
-
Resolution: Done
-
High
-
Guilin Release
-
CI weekly master
A version scan has been implemented in Guilin as part of the security tests run in CI
it is run in the master weekly chain
The scanner detected Python 2.7 on some of your pods.
onap-modeling-etsicatalog-6dd86ffc95-z8xwl modeling-etsicatalog 3.6.10
onap-modeling-etsicatalog-6dd86ffc95-z8xwl modeling-etsicatalog-filebeat-onap 2.7.5
onap-modeling-mariadb-0 modeling-mariadb 2.7.5
onap-modeling-mariadb-1 modeling-mariadb 2.7.5
onap-modeling-mariadb-2 modeling-mariadb 2.7.5
A Guilin requirement consists in migrating to Python 3
for modeling etsicatalog a version 3.6 has been detected (recommendation is 3.8),it maybe means that the 2.7 is the one from the distro and not used. It could make sense to optimize and/or use the exsiting basline image )
Note if you do not use python (python just installed with the base image), you can optimize your image (using available baseline images) and/or close the ticket.
Please fix it or contact SECCOM if you cannot do it.
SECCOM recommended versions: https://git.onap.org/integration/seccom/tree/recommended_versions.yaml