youtube image
From YouTube: Steering Committee 20181205

Description

Notes: http://bit.ly/k8s-steering-wd

Chat transcript (times may be off):

00:13:14 Michelle Noorali: I was looking at the autoscaling sig earlier today and will review today
00:13:38 Michelle Noorali: +1
00:13:41 Timothy St. Clair: +1
00:14:37 Brandon PHilips: Aaron, if it will be available by Wed next week I can do it.
00:32:23 briangrant: https://github.com/kubernetes/steering/issues/57
00:35:03 Clayton Coleman: Red Hat has this service
00:35:05 Clayton Coleman: It’ll cost you
00:36:16 Michelle Noorali: dope
00:37:32 Clayton Coleman: https://marketplace.visualstudio.com/items?itemName=redhat.fabric8-analytics
00:37:43 Clayton Coleman: The go stuff is still in preview, let me check with them
00:41:07 Michelle Noorali: Yes absolutely
00:41:11 Phillip Wittrock: +1
00:41:34 briangrant: Go itself: https://www.cvedetails.com/vulnerability-list/vendor_id-14185/product_id-29205/Golang-GO.html
00:42:30 Clayton Coleman: Brendan there is a CVE DB they’re maintaining but it’s supposed to be preview jan
00:42:33 Clayton Coleman: I’ll connect you to them to get details
00:43:09 Brandon PHilips: We need to work with the Go community to enable developers to add CVE data
00:43:27 Michelle Noorali: true
00:44:08 Dims: ++ Brandpn
00:48:23 Clayton Coleman: As a fun aside, reading their design proposal for golang detection support this gem jumped out:
00:48:25 Clayton Coleman: Moreover, an analysis of the 10000 most popular Golang packages across Github by comparing at the source file level shows that the most popular dependencies are those from the Kubernetes ecosystem/Kubernetes API itself, see [11]
00:48:38 Dims: :)
00:48:41 Michelle Noorali: cool
00:49:01 Michelle Noorali: We need an owner for the issue
00:49:23 Clayton Coleman: The net result though was a lack of high quality CVE source but they are motivated to make it happen
00:49:30 Michelle Noorali: https://github.com/kubernetes/steering/issues/85
00:50:08 Michelle Noorali: great to know @clayton
00:51:52 briangrant: SIG Diagram: https://twitter.com/bgrant0607/status/862091393723842561
00:53:01 Michelle Noorali: I could get with that
00:54:07 Michelle Noorali: Dan mentioned this to me a bit but it would be nice to know who is leading this effort
00:54:17 Michelle Noorali: Seems like something Brandon and I should be involve din.
00:54:21 Michelle Noorali: Involved in*