2024 - 02 - 20
Attendance: 13 Members
Agenda:
- Introductions
- Updates
- Architecture Decision Records
- Project Roadmap
- HyperLedger OEA Repository Incident
- Changes to the PRISM DID Specification (Bjorn)
- Open Issues
- Q&A
Notes:
Over the weekend (Feb12) there was a security breach that aimed to execute commands on our self hosted runners. The execution was prevented and repository security was updated.
When you see a DID, we do not know what Network it is on. We do need to maybe consider introducing a fullnetwork/subnetwork path
ACTION: To put a feature request in to consider the above
OPEN ISSUES:
- Update PR template
- File can be added to repo to reflect updated PR template
- DIDComm service URL over htpps
- This will be reviewed and a change to code (startup script) will be updated and documentation will be updated on how to run the service
- Remove the “report a vulnerability”
- Dave will have a look at the policy and update it. Security vulnerability should not be visible as people can take advantage of it
- Connection state not updated
- This has been fixed by updated the updation so it can be closed
- Missing MAINTAINERS.MD
- File has been updated
- Agent generating invalid URL for DIDComm endpoint
- This will be looked at and feedback provided accordingly
- Memory leak
- Bjorn and Dave to test together next week
- Update PR template
Questions:
- Can we provide support for with the DIDPrism method for multiple blockchains?
- When you see a DID, we do not know what Network it is on. Can we add a prefix to those DID's to identify which network they are on?
Recording:
Presentation: