|
Re: [VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
Matt Hogstrom
My +1
toggle quoted messageShow quoted text
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: [zowe-zlc] [VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
Jean-Louis Vignaud
+1
On Wed, Jun 12, 2019 at 9:16 PM Matt Hogstrom <matt@...> wrote:
--
Jean-Louis Vignaud Product Management Broadcom, MF Business Division +420 770 146 136
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: [zowe-zlc] [VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
Maciej_Serafin@...
+1
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: [zowe-zlc] [VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
Mark.Ackert@...
+1
On Wed, Jun 12, 2019 at 5:22 PM <jlinardon@...> wrote:
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: [zowe-zlc] [VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
jlinardon@...
+1
Jean-Philippe Linardon Director, Software Engineering Rocket Software 77 Fourth Avenue • Waltham, MA • 02451 • USA T: +1 781 684 2350 • E: jlinardon@... • W: www.rocketsoftware.com
From: zowe-zlc@... <zowe-zlc@...>
On Behalf Of Matt Hogstrom via Lists.Openmainframeproject.Org
Sent: Wednesday, June 12, 2019 3:16 PM To: zowe-zlc@... Cc: zowe-user@...; zowe-dev@... Subject: [zowe-zlc] [VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
As discussed in the ZLC meeting security is a critical aspect for Zowe as it is in all projects. To increase security all Committers (members of the Zowe organization in GitHub) should have multi-factor authentication enabled.
After July 17th those members of the community that have not enabled MFA in GitHub will have their write access suspended until their account is secured with MFA.
ZLC members have binding votes but all are welcome to express their view.
Please respond to this e-mail with +1 - Approve 0 - No opinon -1 - Disagree (please respond with specific objections)
================================
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
[VOTE] Require Multi-Factor Authentication for Committers to Zowe Projects in GitHub
Matt Hogstrom
As discussed in the ZLC meeting security is a critical aspect for Zowe as it is in all projects. To increase security all Committers (members of the Zowe organization in GitHub) should have multi-factor authentication enabled.
After July 17th those members of the community that have not enabled MFA in GitHub will have their write access suspended until their account is secured with MFA. ZLC members have binding votes but all are welcome to express their view. Please respond to this e-mail with +1 - Approve 0 - No opinon -1 - Disagree (please respond with specific objections)
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Zowe CLI profile data at rest
Zowe CLI stores credentials in plain text. However, you don't need to always store your credentials in the CLI. Zowe CLI is able to accept credentials from other sources such as environment variables. Using it from automation tools like Jenkins which has its own secure credential storage capability https://jenkins.io/doc/developer/security/secrets/ allows the CLI to consume secure credentials via environment variables. In the case where you're using it from your laptop and you'd like to store your credentials securely, there are 3rd party plugins available for Zowe that accomplish this. Thanks, Sujay Solomon Global Product Manager | Mainframe DevOps Advisor Helping Enterprises Achieve Integrated Mainframe DevOps Broadcom, Pittsburgh, PA
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Zowe CLI profile data at rest
Morten Schiønning
Hi
I’m a security professional, working for an infrastructure provider for major financial institutions in Denmark. I’m tasked with doing a risk assessment (and subsequent security approval) of Zowe, and, as part of that, Zowe CLI.
I am reading through the documentation and learn that users can create profiles, saving them from retyping, among other things, username and password.
I am lacking a description of how that information is stored. Is it saved in a regular file? Is it in clear text? Please provide as many details as you can J
From what I can tell about the other aspects of operation of Zowe (and Zowe CLI) the culture around seems to be pretty security aware, so I keep my fingers crossed. J
Regards
”De dygtigste vinder sammen, stræber efter enkelhed, fokuseret på kundens bedste”
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
ZLC Meeting for Wed @ 0900 ET
Matt Hogstrom
ZLC Agenda for 2019-05-15 at 0900 ET can be found here https://github.com/zowe/zlc/tree/2019-05-15 @Alvin Tan offered to help facilitate the meeting in my absence, thanks Alvin.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Zowe Enterprise Installer Play-Forward
Tim Brooks
Mark Your Calendars - We want to hear from you! Calendar Event Link: https://lists.openmainframeproject.org/g/zowe-dev/viewevent?eventid=469263&calstart=2019-04-23
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Zowe Install Help
Adding the Zowe-user email list on CCing for the community to help chime in here. Thank you, John Mertic Director of Program Management - Linux Foundation ASWF, ODPi, and Open Mainframe Project
On Fri, Apr 12, 2019 at 3:56 PM Prucker,Dylan S <DPRUCKER@...> wrote:
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Zowe v1.1.0 Release
Tim Brooks
The Zowe community has just released v1.1.0. To learn about what's new, changed, removed and known issues visit the release notes here:
https://zowe.github.io/docs-site/latest/getting-started/summaryofchanges.html#version-1-1-0-april-2019 There will also be a community system demo scheduled for Monday, 4/8, from 9-10am ET. This demo is open to all interested parties and community members are encouraged to attend. Add to your calendar here: https://lists.openmainframeproject.org/g/zowe-dev/viewevent?eventid=462628&calstart=2019-04-08 Congratulations to everyone who helped ship v1.1.0!
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
DevOps.com Zowe Webinar - Register Today!
Tim Brooks
John Mertic, the Director of Program Management for The Linux Foundation, Joe Winchester, Senior Technical Staff Member at IBM, and Rose Sakach, Product Manager at Broadcom, will discuss the challenges and opportunities that led to the creation of the the Open Mainframe Project and the Zowe initiative. Launched last August, Zowe is the first open source project based on z/OS and serves as an integration platform for the next generation of tools for administration, management and development on z/OS mainframes. By utilizing new interfaces and an API mediation layer, enterprises can now more easily integrate rich mainframe resources and extend ‘API-first’ to the mainframe. Click here to register.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Zowe v1.0.0 Webinar
Tim Brooks
For anyone who was not able to attend the Zowe webinar last month, the Open Mainframe Project has posted the recording here (Zowe talks start at 11:45):
https://www.openmainframeproject.org/resources/videos
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: Zowe v1.0.0 Webinar
Tim Brooks
If you are joining the Zowe webinar - here's the dial-in info! The webinar starts at 9 am PST/12 EST! Join Zoom Meeting
https://zoom.us/j/102386605 One tap mobile +16699006833,,102386605# US (San Jose) +16465588656,,102386605# US (New York) Dial by your location +1 669 900 6833 US (San Jose) +1 646 558 8656 US (New York) +1 877 369 0926 US Toll-free +1 855 880 1246 US Toll-free +1 647 558 0588 Canada 855 703 8985 Canada Toll-free +49 69 8088 3899 Germany +49 30 3080 6188 Germany +49 30 5679 5800 Germany 800 724 3138 Germany Toll-free +852 5808 6088 Hong Kong, China 800 906 780 Hong Kong, China Toll-free +81 524 564 439 Japan +81 3 4578 1488 Japan +81 800 100 5040 Japan Toll-free +44 203 966 3809 United Kingdom +44 203 695 0088 United Kingdom +44 800 031 5717 United Kingdom Toll-free +86 10 87833177 China +86 10 53876330 China 400 669 9381 China Toll-free 400 616 8835 China Toll-free Meeting ID: 102 386 605 Find your local number: https://zoom.us/u/abaBPKHfVn
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Zowe v1.0.0 Webinar
Tim Brooks
Earlier this month, the Open Mainframe Project announced that Zowe, an open source software framework for the mainframe that strengthens integration with modern enterprise applications, is now production ready less than six months after launching. Any enterprise or solution developer can access the Zowe 1.0 source code or convenience build and incorporate it into their products or services with agility and scalability. Join this webinar on Friday, February 22 at 9-10 am PST (noon-1pm ET) to learn more about how Zowe makes the z/OS environment more “cloud-like” and aims to improve integration in hybrid cloud environments and how to get more involved. Steven Dickens, Open Mainframe Project Marketing Committee Chair and Global Sales Leader at IBM, will host the webinar as Zowe developers Sujay Solomon, Global Product Manager at Broadcom, Alex Kim, Systems z Solutions Architect with Vicom, and Sean Grady, Software Engineer at Rocket Software will share an overview and best practices, walk through a demo and answer questions.Register here today: https://www.openmainframeproject.org/event/zowe-webinar
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Announcing Zowe 1.0!
Tim Brooks
The Zowe community is proud to announce the release of Zowe 1.0.0! To learn about what's new in this release and how it differs from the previous beta releases, be sure to check out the notes here:
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
OMP and Zowe @THINK 2019
Tim Brooks
If you are going to be at THINK next week, be sure to check out the OMP/Zowe sessions and event to connect with other community members.
https://www.openmainframeproject.org/event/ibm-think-2019
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Weekly ZLC Meeting tomorrow 0900 ET
Matt Hogstrom
We have posted agenda items https://github.com/zowe/zlc/tree/2018-08-22-hog/meetings/2018-08-22 in this branch for discussion tomorrow. The document is Agenda.md. For those not on the ZLC your welcome to attend. I’ll post the meeting in #zowe-dev and #zowe-user this evening. We use Zoom for the call and it is recorded.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Re: ZLC Meeting Schedule
Did you want to provide a few time slots and get feedback on preferences? That’s Asia friendly but west coast unfriendly.
On Thu, Aug 16, 2018 at 10:23 Matt Hogstrom <matt@...> wrote:
--
Mike
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
