17.9 AST::Static Analysis planning issue

• General info
• Priorities
  • Feature
  • Maintenance and bugs
  • Standalone issues
    • Bugs
      • P1
      • P2
      • P3
    • Other
      • Feature
      • Maintenance
• Engineering allocation

General info

• Period: 2025-01-11 to 2025-02-14
• Planning board

• Reaction rotation: @mbenayoun (primary), @julianthome (secondary).

Priorities

Feature

Our Highest Priority feature work this milestone is:

Priority	Initiative	Issues	DRI
1	https://gitlab.com/groups/gitlab-org/-/epics/16104+	confidential; see epic	@mtolpin
2	Advanced SAST support for PHP (&14273 - closed)	- https://gitlab.com/gitlab-org/gitlab/-/issues/510615+s - https://gitlab.com/gitlab-org/gitlab/-/issues/508715+s - https://gitlab.com/gitlab-org/gitlab/-/issues/510616+s	@philipcunningham
3	Duo Vulnerability Resolution: Add support for r... (&15716 - closed)	DRI is on rotation	@mbenayoun
4	Enable GitLab Advanced SAST by default (&15145)	- TBC - TBC ...	@adamcohen
5	Understanding the Vulnerability Deduplication P... (&14805 - closed)	- Run data-analysis comparing old and new version... (#478026 - closed) • Julian Thome • 17.9 • On track - tracking-calculator scope_offset_compressed alg... (#470168 - closed) • Julian Thome • 17.9 • On track - Semgrep-based SAST reports does not report all ... (#469038 - closed) • Julian Thome • 17.11	@julianthome

Maintenance and bugs

Standalone issues

Bugs

Bugs board (no vulnerabilities, no milestone).

Vulnerabilities are handled by the reaction rotation.

P1

---
display: table
fields: title, healthStatus, assignees
query: epic = none AND label = "group::static analysis" AND label = "priority::1" AND label = "type::bug" AND label != "vulnmapper"  AND milestone = "17.9"

P2

---
display: table
fields: title, healthStatus, assignees
query: epic = none AND label = "group::static analysis" AND label = "priority::2" AND label = "type::bug" AND label != "vulnmapper" AND milestone = "17.9"

P3

---
display: table
fields: title, healthStatus, assignees
query: epic = none AND label = "group::static analysis" AND label = "priority::3" AND label = "type::bug" AND label != "vulnmapper" AND milestone = "17.9"

Other

Feature

---
display: table
fields: title, healthStatus, assignees
query: epic = none AND label = "type::feature" AND label = "group::static analysis" AND opened = true AND milestone = "17.9"

Maintenance

---
display: table
fields: title, healthStatus, assignees
query: epic = none AND label = "type::maintenance" AND label = "group::static analysis" AND opened = true AND milestone = "17.9"

Engineering allocation

• everyone: work on one typebug before picking-up a new issue.
• @adamcohen: typefeature DRI for &15145.
• @hyan3: typefeature contributing to other features.
• @jleasure: typefeature typemaintenance contributing to other maintenance, other features.
• @julianthome: typemaintenance secondary rotation. typefeature DRI for &14805 (closed).
• @mbenayoun: typemaintenance primary rotation. typefeature DRI for &15716 (closed).
• @mtolpin: typefeature DRI for https://gitlab.com/groups/gitlab-org/-/epics/16104.
• @philipcunningham: typefeature DRI for &14273 (closed).
• @smtan: typemaintenance other maintenance.