UX Theme: Relate security and quality findings with their context

UX Theme

Relate security and quality findings with their context, making them easier to discover, understand, and act on.

Beneficiary:

• Persona: Software developer

User need:

• I need to understand the context of security and quality issues so that I can determine next steps
• I want to know about existing security and quality issues related to the code I’m working on so that I can proactively fix them while making other updates.

JTBD:

• Security
  • When I want to start incorporating security into my org, I want to integrate it seamlessly into my existing workflow so that there's more likelihood it will be used and without disruption.
  • When committing changes to my project, I want to be made aware if I am adding risk through vulnerable code, so that I know my changes can be merged without increasing the risk of my project.
• Code Quality:
  • When I am reviewing code in a merge request or a file, I want to see a list of code quality issues identified in the file, so that I can help improve code quality in the project.
  • When I make changes to my project, I want to automatically see how those changes impacted the quality of the code, so that I can be confident my change improves the readability of the project.

Outcome:

• Easier to triage and act on findings
• Greater visibility and awareness

Business objective:

• Increase retention by making security and quality issues easier to discover and act on.

Confidence

• Medium / high

Supporting Research

• PV: Understanding the needs/goals/workflow of C... (ux-research#1886 - closed)
• JTBD Validation: Static Analysis Group (gitlab-design#1166 - closed)

Subthemes

Feature/solution subthemes

Opportunity	Issue link	UX weight	Workflow status	Notes
Design MVC: Inline findings in the MR	#322689 (closed)		workflowdesign
Show Code Quality findings in the Source Code Viewer	To be created
Group identical code quality issues by file - in MR widget - in full code quality report	#320961, #293656 (closed), #301122			Multiple similar issues have been combined into a single "sub-theme"
Show code quality report for changed files only	#3607
Show multiple indicators for inline findings on mobile devices	#382332 (comment 1207663827)

Research subthemes

Opportunity	Issue link	Research type	Notes