Security Insights 17.7 Planning Issue

Summary

Areas of focus	DRI	Delivery Scope for current milestone	Completion Milestone	Status (mid-milestone checkpoint)
typefeatureDuo Vulnerability Resolution GA (&14847)	frontend @sming-gitlab backend @subashis	GA release	17.7	Neil: On Track for 17.7.
typefeatureAuto-resolve vulnerabilities when not found in subsequent scans	backend @bwill frontend @lorenzvanherwaarden	MVC release	17.7	Neil: This project is worked on between groupsecurity insights and groupsecurity infrastructure team members. @ryaanwells is the EM.
typefeatureCVSS / EPSS / KEV in vulnerability report and vulnerability details	frontend @svedova	Full release	17.7	Neil: @svedova is collaborating with groupcomposition analysis to understand data readiness and how that influences the frontend delivery timeline.
typefeatureFilter by Identifier on the Vulnerability Report (&13340)	backend @bala.kumar frontend @svedova	Limited release	17.7	Limited to Project only, without pagination. Limited by Postgres capabilities Neil: This project is worked on between groupsecurity infrastructure and groupsecurity infrastructure team members. @ryaanwells is the EM.
typefeatureDependency list - Filter by specific version in... (#504984 - closed)		Specific capability to be defined in Status	17.7	Neil: We do not have backend capacity for this unless prioritized above other work.
typefeaturehttps://gitlab.com/groups/gitlab-org/-/epics/15372+	groupsecurity infrastructure	Full coverage according to defined in issue	17.7	Neil: Scope for 17.7 is being done in groupsecurity infrastructure
typefeaturehttps://gitlab.com/gitlab-org/gitlab/-/issues/425327+ -	@beckalippert	Eng - [TBD] design	17.8	Neil: We need to align a Backend DRI for this, but are limited capacity in 17.7.
typefeatureDesign: End-user Static Reachability UX/UI (#480356 - closed)	@beckalippert	Eng - [TBD] design	17.8	Neil: Per Dean this is highest priority of the design scope. We need to align a Backend DRI for this, but are limited capacity in 17.7.
typefeature Enhanced Bulk Actions for the Vulnerability Report (&13216 - closed)	@beckalippert	Eng - [TBD] design	17.8
typebug Add Vulnerabilities Detected Headline to Depend... (#502335 - closed)	backend @wandering_person frontend @charlieeekroon	Full Resolution	17.7
typebugSplit the "Tool" filter into separate filters f... (#503371 - closed)	backend @charlieeekroon	Full Resolution	17.7	Neil: This may be a complex item. We are committed to doing refinement in 17.7, and starting development once better understood.

Team member focuses

Name		Focus Areas	Notes
@bwill	backend	Auto-resolve vulnerabilities when not found in ... (&5708 - closed)	At capacity
@charlieeekroon	backend	Add commit link that removed vulnerability (#372799 - closed) • Brian Williams • 17.9 • On track Add Vulnerabilities Detected Headline to Depend... (#502335 - closed) Refinement and possible start of Split the "Tool" filter into separate filters f... (#503371 - closed)	At capacity
@subashis	backend	Duo Vulnerability Resolution GA (&14847)	At capacity
@wandering_person	backend	Duo Vulnerability Resolution GA (&14847) Add Vulnerabilities Detected Headline to Depend... (#502335 - closed)	Some capacity, but can't disrupt AI GA.
@dpisek	frontend	Duo Vulnerability Resolution GA (&14847)	Some capacity
@lorenzvanherwaarden	frontend	Auto-resolve vulnerabilities when not found in ... (&5708 - closed) Centralize vulnerability report query string sy... (&15948 - closed) as lower priority [frontend] Add resolve limit info message (#505706 - closed)	Some capacity
@svedova	frontend	Show EPSS, CVSS, KEV on vulnerabilities Centralize vulnerability report query string sy... (&15948 - closed) as lower priority	Some capacity
@sming-gitlab	frontend	Duo Vulnerability Resolution GA (&14847)	At capacity