-
Bug
-
Resolution: Done
-
Medium
-
Guilin Release
-
None
-
master weekly CI
A version scan has been implemented in Guilin as part of the security tests run in CI
it is run in the master weekly chain
onap-multicloud-6f44c794c5-sfbn5 filebeat-onap 2.7.5
onap-multicloud-6f44c794c5-sfbn5 multicloud 3.7.7
onap-multicloud-azure-6487d4b655-2w9np filebeat-onap 2.7.5
onap-multicloud-azure-6487d4b655-2w9np multicloud-azure 2.7.16
onap-multicloud-fcaps-56b7f7b75f-vvrj9 filebeat-onap 2.7.5
onap-multicloud-fcaps-56b7f7b75f-vvrj9 multicloud-fcaps 3.7.7
onap-multicloud-k8s-85fcf9c6cd-csw6p framework-artifactbroker 2.7.16
onap-multicloud-k8s-85fcf9c6cd-csw6p framework-artifactbroker 3.6.9
onap-multicloud-pike-75546fb5c4-wn7tq filebeat-onap 2.7.5
onap-multicloud-pike-75546fb5c4-wn7tq multicloud-pike 3.7.7
onap-multicloud-starlingx-57f7bc7ccf-xtzz9 filebeat-onap 2.7.5
onap-multicloud-starlingx-57f7bc7ccf-xtzz9 framework-artifactbroker 2.7.16
onap-multicloud-starlingx-57f7bc7ccf-xtzz9 framework-artifactbroker 3.6.9
onap-multicloud-starlingx-57f7bc7ccf-xtzz9 multicloud-starlingx 3.7.7
onap-multicloud-vio-5bc8bd5559-qf77r filebeat-onap 2.7.5
onap-multicloud-vio-5bc8bd5559-qf77r multicloud-vio 3.7.4
onap-multicloud-windriver-5859d4db85-kq9kv filebeat-onap 2.7.5
onap-multicloud-windriver-5859d4db85-kq9kv framework-artifactbroker 2.7.16
onap-multicloud-windriver-5859d4db85-kq9kv framework-artifactbroker 3.6.9
onap-multicloud-windriver-5859d4db85-kq9kv multicloud-windriver 3.7.7
The scanner detected Python2.7 on some of your pods.
As a version 3 has also been detected (SECCOM recommended version is 3.8.3 or higher), Python 2.7 is maybe not used anymore and could be removed (just installed by default on the distro)
If your Python 3 migration is done you can close this ticket
Note if you do not use python (python just installed with the base image), you can optimize your image (using available baseline images) and/or close the ticket.
If your changes are already in the gate, it is great, please update the tickets.
The scan will be run every week.
SECCOM recommended versions: https://git.onap.org/integration/seccom/tree/recommended_versions.yaml