Group Security Dashboard metrics MVC

Problem to solve

The Security Dashboard should target not just Security specialists, but also Director of Security as a tool to track how the handling of security vulnerabilities is going. This requires metrics and historical data about how many vulns have been spotted, addressed, solved, and how much time was spent for the complete cycle.

Further details

As a Director of Security, I expect to see in the Security Dashboard how the team is performing, if our process is working fast enough, if process changes are increasing or decreasing the performances of the team.

Proposal

Add a graph to the group security dashboard to show how many vulnerabilities are affecting the group of projects.

We can show daily numbers for the total amount of vulnerabilities, and independent values based on the severity. This data will be fetched from vulnerabilities reports stored in the database.

Design

Final Design	Mobile

Popover 1-variable	Pop-over for 2 variables of the same number

Design Specs: Spec previews for metrics in group security dashboard

A ~"product discovery" for this topic is available in https://gitlab.com/gitlab-org/gitlab-ee/issues/7091.