Secure & Protect Team Planning Issue for 15.1

Product Designer's Available Capacity

Designer Group Capacity Flex Capacity TOTAL Capacity
Andy 13 2 15
Becka 15 0 15
Camellia -- -- --
Michael 15 3 18

Product Designer's Out Of Office (OOO)

Designer OOO Start - End
Andy
Becka
Camellia Out through 2022-06-30
Michael

Review Existing UX SUS Related Issues

NOTE: We need to strive to act upon these issues quickly as they will impact our usability

Composition Analysis UX Needs - UX Roadmap Theme: <theme link here>

Priority Issue/Epic State 💯 Need / 💪 Nice to have Designer Ready for Build By ≅ Weight Carryover Notes
1 Add SBOM Subheading In Progress 💪 @beckalippert %15.2
2 Improve Dependency List Empty State 💪 ? 1 ?
3 🎨 Design: License Approval Policies 💪 ? ?
4 🎨 Design: Group/Sub-Group Level Dependency List 💪 ? ?
5 🎨 Design: Add Dependency List Filtering and Searching Ready for Design 💪 ? This should probably be done together with Threat Insights work
6 🎨 Design: Dependency List Grouping 💪 ?
- Make state of approval more clear 💪 ? 4 ?
- Make state of license database clear 💪 ? ? ?
- Automatic remediation states When unblocked will then need to progress by finding edge cases and working them 💪 ? ? ?

Container Security UX Needs

Current Design Theme: Decrease Container Scanning Noise

Priority Issue/Epic State 💯 Need / 💪 Nice to have Designer Ready for Build By ≅ Weight Carryover Notes
1 🎨 Design: Support Additional Filtering for Scan... (#356808 - closed) workflowready for design 💪 %15.3
2 🎨 Design: Scanner-specific criteria in scan res... (#356809 - closed) workflowready for design 💪 n/a - this is a research spike
3 Allow configurable allowlist path workflowready for design 💪
4 Better support scanning of multiple container images workflowready for design 💪
5 Identify if a finding is fixable workflowready for design 💪
6 🎨 Design Follow-up: Investigate validation of required approvals to avoid dead-end-rules workflowready for design 💪 This is important but not urgent. Timeline can be flexible.
7 Assistance with MR reviews

Dynamic Analysis:DAST/Fuzz UX Needs - UX Theme: Increase user efficiency by reducing ... (#357445 - closed)

Priority Issue/Epic State 💯 Need / 💪 Nice to have Designer Ready for Build By ≅ Weight Carryover Notes
1 Problem validation: How do DevOps teams want to configure their security tools Analysis complete 💯 @mfangman 5 Session tagging complete, data synthesis required next
2 Design: DAST pre-flight config validation Solution validation 💯 @mfangman 3 Design were updated and solution validation planning was started in %15.0
3 Preperation for DAST CMS - Complete maturity 💯 @mfangman Recuriting to start around %15.2 3
4 🎨 Design: Allow security profiles to be used by other scanners 💪 @mfangman 3 Important design update, but not critical at the moment

SAST UX Needs - UX Roadmap Theme: <theme link here>

Priority Issue/Epic State 💯 Need / 💪 Nice to have Designer Ready for Build By ≅ Weight Carryover Notes
1 DUPLICATE FROM DAST Problem validation: How do DevOps teams want to configure their security tools Analysis complete 💯 @mfangman – Session tagging complete, data synthesis required next
2 SAST UX Roadmap In progress 💯 @mfangman 2 Refine themes and record walkthrough
3 Bring Code Quality inline diff display closer t... (#359847 - closed) Designs started in %15.0, small changes and support likely needed 💯 @mfangman 2

Vulnerability Management UX Needs - UX Roadmap Theme: <theme link here>

Priority Issue/Epic State 💯 Need / 💪 Nice to have Designer Ready for Build By ≅ Weight Carryover Notes
1 Solution Validation: Advanced filtering on the Vulnerability Report workflowsolution validation 💯 @beckalippert %15.1 5
2 Show "pipeline security tab" ingestion status workflowdesign 💯 @beckalippert %15.1 3
3 Design: Auto-dismiss irrelevant vulnerabilities workflowdesign 💪 @beckalippert %15.2 3

OKR/Extra UX Needs

Priority Issue/Epic State 💯 Need / 💪 Nice to have Designer Ready for Build By ≅ Weight
1 Configure/Monitor Collaboration - 💯 @andyvolpe 15.1 6
1 Q2 OKR: UX Roadmaps part 2 Planning 💯 @andyvolpe 15.1 4
- UX Roadmap for Threat Insights and Container Security - follow up tasks - 💯 @beckalippert %15.1 5
- Crucial conversations - 💯 @beckalippert %15.1 1
- Michael's career development – 💯 @mfangman 3
- Persona & JTBD research Planning 💯 @andyvolpe TBD 2

What research is happening right now? (Link to Sheet)

Project Title Issue Support Level Section or Group Status Timeline DRI
Usability Benchmarking Study &7918 🥇 End-to-End TBD Planning Michael Oliver
How do DevOps teams want to configure their security tools? #1618 (closed) 🥇 End-to-End Secure Summarizing Data Michael Fangman
Internal Interviews for new Secure user Personas &7363 🥇 End-to-End Secure Planning Michael Oliver
Finish Investigating current state of open Actionable Insight (AI) issues & Create Strategy #1878 (closed) 🥈 Task Specific UXR Team Summarizing Data Michael Oliver
Understanding the needs/motivations/goals of Code Quality Users #1886 (closed) 🥈 Task Specific Code Quality (Static Analysis group) Planning Connor Gilbert
Vulnerability Prioritization #1890 (closed) 🥈 Task Specific Both Protect and Secure: Threat Insights In-Waiting 11/1/2022 Sam White
Vulnerability groups and customizable saved views #1869 (moved) 🥉 Consult & Review Threat Insights Summarizing Data 6/1/2022 Matt Wilson
Solution Validation: Advanced filtering on the Vulnerability Report #1904 (closed) 🥉 Consult & Review Threat Insights Planning Becka Lippert
  • Set the Milestone (current Milestone)
  • Set the Due Date for the end of the current Milestone
  • Assign the entire team PMs and PDs
Edited by Sam White