Framework for source code rules

Opportunity to investigate

GitLab offers a number of controls that can be implemented as safeguards. These controls can be put in place to keep changes from having a negative or enforce adherence to policies. Integrating features like protected branches, approval rules, code owners (approvals) and soon “status checks” should have an experience that easy to set up, maintain, and consume downstream.

Research insights

• Video walk through of the CM Scorecard Recommendations - Create:Source Code:Code Review FY21-Q2 (see video description for chapter markers and references)
• Issues related to CM Scorecard Recommendations - Create:Source Code:Code Review FY21-Q2
  • Specific issue: Improve the organization of repository and merge request policy settings. Explanation of the severity of the issue: #258577 (comment 450874492)

Feature comparison

Figma 👉 https://www.figma.com/file/NKRTU2J6fsprk0dHq20NVy/Integrate-the-experience-for-safeguards?node-id=2%3A0

🤝 Cross-stage Collaboration

cc groupcode review Kai, Pedro

cc groupcompliance Sam, Austin