Labels

New Product Introduction Product MDM

For Coupa Intake issues that need Procurement review and/or approval

Direct product contributions from the Security Division's Security Platforms and Architecture Team

Candidate issues for the Product Security Engineering team https://handbook.gitlab.com/handbook/security/product-security/product-security-engineering/

Work performed to build, maintain, or augment outside-of-the-product custom tooling needed to satisfy Product Security requirements.

An MR that modifies existing non-vulnerable functionality to be more robust if an “earlier” security control fails.

Label to encapsulate internal team work (Onboarding, Process, Workflow, RunBooks, Documentation, Planning Sessions, Pair Programming)

A new tool, method, class, check that, gives GitLab’s contributors an easier way to perform an activity securely.

The work type isn’t entirely clear yet, but we don’t want to block progress for now.

Functionality required by GitLab Product Security teams.

Indicates that an issue represents a specific feature or piece of functionality required to eventually deprecate a custom tool used by Product Security teams.

Work done as part of the effort to integrate functionality from custom in-house tooling into a GitLab product.

Product Security Engineering Priority Level 1. This issue requires immediate attention and should be worked on as soon as possible. Typically, it is added to the next milestone or addressed during the current one if a team member has extra capacity

Product Security Engineering Priority Level 2. This issue is essential but can wait for a few milestones.

Product Security Engineering Priority 3. This issue is a nice-to-have, but we do not commit to a specific timeline.

Used by Product Security Department Sub Teams for their workflow labels for completed requests.

Used by Product Security Department Sub Teams for their workflow labels for new requests.

Used by Product Security Department Sub Teams for their workflow labels for ongoing requests.

Used by Product Security Department Sub Teams for their workflow labels for planned requests.