Labels

Label to indicate the Security Risk team is engaged on this issues/epic/MR

These are just problems that need to be solved that don't have proposed solutions.

Issues that are blocked and need a resolution plan or escalation. Move to ~"secrisk-workflow::in progress" or ~"secrisk-workflow::ready" once unblocked.

Issue closed because the work was cancelled because it was no longer needed or relevant.

Issue closed because work is completed as described.

Issues that are being actively worked by the team and should have a health status and an assignee. Stale issues with this label should be moved to blocked or cancelled.

An idea or opinion on how to proceed. It's been triaged/scoped but not yet considered "ready".

Issue is well-defined, ready to be picked up, and assigned to the correct epic. No assignee. These issues will be picked up as other issues are closed. (To Do)

The issue has been deprioritized or is stale, but otherwise is not blocked by any other dependency. Consider moving moving to ~"secrisk-workflow::cancelled" (closes issue) or back to ~"secrisk-workflow::ready".

Skip to ::ready if work is well defined. These issues need peer review or further refinement and prioritization so they can be included in the Ready bucket. (Should Do)