[RELEASE24.8] Release Checks R24.8

[mkanal]

As team
I want to fulfill release checks successfully
so that product is official released and part of release 24.8.

Link

• relates to [R24.08] [Trace-X] Release Checks sig-release#741

Hints / Details

• ...

Acceptance Criteria

• Release checks R24.8
• Participation in E2E test phase
• Participation in E2E phase and kickoff
• [TRACE-X] QG 4 checks (Release 24.08) #1222

Security Checks

There are no Consortium checks for Rel 24.08 and following. Everything is described in the TRG. (Security is TRG 08)
It is the task of the committers to check this if necessary

• Threat Modeling Analysis passed
  • trg-8-01 https://eclipse-tractusx.github.io/docs/release/trg-8/trg-8-01
  • trg-8-02 https://eclipse-tractusx.github.io/docs/release/trg-8/trg-8-02
  • trg-8-03 https://eclipse-tractusx.github.io/docs/release/trg-8/trg-8-03
  • trg-8-04 https://eclipse-tractusx.github.io/docs/release/trg-8/trg-8-04

Out of Scope

• ...

[mkanal]

BLOCKED ** Clarification how the process is executed in association . @ds-jhartmann and @mkanal is currently in alignment with association how this will be proceeded.

[mkanal]

Security release check TRG 8-01 - 8-04

@ds-lcapellino / @ds-mwesener

Open security topics

• https://github.com/eclipse-tractusx/traceability-foss/security/code-scanning/5191
• https://github.com/eclipse-tractusx/traceability-foss/security/code-scanning/5170
• https://github.com/eclipse-tractusx/traceability-foss/security/code-scanning/5169
• KICS is not executed properly
• QG BE failes https://sonarcloud.io/summary/new_code?id=eclipse-tractusx_traceability-foss-backend
• QG FE failes https://sonarcloud.io/summary/new_code?id=eclipse-tractusx_traceability-foss-frontend

[mkanal]

BLOCKED was removed as the procedure is clear now.

[ds-crehm]

E2E-tests done with one finding that will be added to Known Knowns: #1122

[ds-mwesener]

Currently fixxing sonar of frontend.

[ds-mwesener]

Sonar has been fixed. Everything done.