PI 13 Iteration 6

[RazvanZmau]

Sprint Goal:

1. Local setup using helmcharts for external contributors
2. Data Sovereignity from a specification documentation perspective is done.

Role rotation:

• @ds-mwesener responsible for release
• @ds-mwesener firefighter & DevOps meeting participant
• @ds-mmaul responsible for docu guru. With the support of @ds-crehm
• @ds-lcapellino responsible for security minister
• @mkanal test management

Minister Security

Timebox: 1h

• Trivy shows no high or critical findings in github security tools tab. Pipeline runs successful
• Kics shows no high or critical findings in github security tools tab. Pipeline runs successful
• Dashtool on Tractus-X checked? Release Manager has been informed about rejected licenses.
• Security Tab Issues reduced by 10 until it is by 0
• There are no Security Bumps on Tractus-X left. Everything has been either merged, mitigated or story created.
  chore(security): xxx bumps catenax-ng/tx-traceability-foss#1160
• Invicti tool has been executed on the latest catena release. There are no high / critical findings.
• Dependency Check has been executed and high / critical dependencies have been updated / mitigated / story created.
  mvn --batch-mode clean package dependency-check:aggregate -pl tx-models,tx-backend -Pdependency-check -DskipTests
• All of the catena pipelines run green on main
• Reviewed by the team and approved (Last Friday Sprint-Daily of the current sprint.)

Release Champion:

Timebox: 1h

• Trace-X Release created for catena
• Helm-Chart Release created for catena
• Release created for tractus-x
• Helm-Chart Release created for tractus-x
• Deployed release on int-a
• Deployed release on int-b
• Verified the release on int-a and int-b is ready for Sprint Review
• Reviewed by the team and approved
• Update COMPATIBILITY_MATRIX

Docu-Guru:

Timebox: 1h

• GitHub Documentation has been updated - see outdated tags
• At least 1 TODO-Comment has been added in the source code to reflect technical dept
• Added todo comment: chore(docs): xxx added authors and todo technical debt #1159
• New colleague on board - added to authors.md, team calendar updated
• Added authors from GitHub Contributors list to AUTHORS.md chore(docs): xxx added authors and todo technical debt #1159
• Identify doc which is not used and add a comment / address it for removal (only in GitHub)
• Reviewed by the team and approved

Testmanager

@mkanal

• Update Test Status - PI13 https://confluence.catena-x.net/x/RobrBw

Update Test Status is not necessary as we are in between the move from consortia to assosiation.

Firefighter

• Maintenance of our community in Matrix Chat https://matrix.to/#/#tractusx-trace-x:matrix.eclipse.org
• Response to Github issues https://github.com/eclipse-tractusx/traceability-foss/issues
• To be defined, eg: Onboarding of new colleague, quality-gates, escalation topics
• Communicating and discussing with external contributors in Eclipse Matrix Chat
• Participate in "[TRACE-X] Trace-X Open Meeting