17.10 AST::CA planning issue

• General info
  • Theme
• Priorities
  • Feature
    • Active Development
    • Refinement and breakdown
  • Maintenance and bugs
    • Standalone issues
      • Bugs
      • Other
        • Feature
        • Maintenance

General info

Theme

We're moving to quality over quantity. We need to focus on roadmap deliverables.

• Period:  15/02/2025 - 14/03/2025
• Planning board
• Reaction rotation: @gonzoyumo @hacks4oats / handing over from @onaaman (Composition Analysis - Reaction Rotation 17.10 (gitlab-org/secure/general#371 - closed) • Olivier Gonzalez • 17.10)

Priorities

Anchored around Static Reachability & Dependency Scanning GA.

Feature

Active Development

ס

Description	DRI	Due	Notes
Static reachability Beta - Display	@hacks4oats	This quarter	Two blocking backend issues on the epic, unblock @sming-gitlab
Static reachability Beta - Detection	@nilieskou	This quarter	Take the epic with a grain of salt, ensure we're getting everything we can out of it
License metrics guiding aliasing	@onaaman	Max 17.11	I'd like this to be part of reaction rotation next milestone
Dependency Scanning GA	@ifrenkel	This quarter	Epic is currently empty, requires to collect status from @zmartins @hacks4oats and @gonzoyumo
Auto remediation	@gonzoyumo	Q4	Take over rom Joey, we need to start breaking this down. It's a big project. Work with @johncrowley and @estrike to ensure we're meeting two goals: Our customers get what they expect to get, Security can use it

Refinement and breakdown

• Support license scanning of OS packages
• Provide .tar file support to scan multiple images
• User provided license information for components Beta

Maintenance and bugs

Standalone issues

Bugs

---
display: table
fields: title, labels("priority*"), labels("severity*"), labels("Deliverable"), healthStatus, assignees, state
---
epic = none AND label = "group::composition analysis" AND label = "type::bug" AND label != "vulnmapper" AND milestone = "17.10"

Other

Feature

---
display: table
fields: title, labels("Deliverable"), labels("workflow::*"), healthStatus, assignees, state
---
epic = none AND label = "type::feature" AND label = "group::composition analysis" AND milestone = "17.10"

Maintenance

---
display: table
fields: title, labels("Deliverable"),labels("workflow::*"), healthStatus, assignees, state
---
epic = none AND label = "type::maintenance" AND label = "group::composition analysis" AND milestone = "17.10"