18.3 Planning - Dynamic Analysis

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Milestone Themes

This milestone, we're focused on:

1. FY26Q2 & Q3 Roadmap deliverables
2. User identified bugs

➡️ Kanban board with all features, bugs, and maintenance items picked up to work in this milestone.

⬅️ 18.2 Planning Issue

Priorities

Roadmap initiatives

Priority	Initiative	Area	DRI	Label
1	Remove unused configuration mechanisms (#487378 - closed) • Arpit Gogia • 18.3	Category:DAST	@arpitgogia	Deliverable
2	https://gitlab.com/gitlab-org/gitlab/-/issues/554444+s https://gitlab.com/gitlab-org/gitlab/-/issues/558032+s DAST/Browserker: Fix credit card number matching (#479538 - closed) • Arpit Gogia • 18.3 Duplicated crawl results when `sitemap.xml` red... (#474132 - closed) • Arpit Gogia • 18.4	Category:DAST	@arpitgogia	typebug
3	Verbose logging enabled by default (&17207 - closed) • Unassigned • 18.3 • On track	Category:DAST	@DavidNelsonGL	Deliverable
4	Metrics gathering for dark launching new form a... (&17708) • David Nelson, Hannah Baker	Category:DAST	@hbakergitlab @DavidNelsonGL	Stretch
5	https://gitlab.com/groups/gitlab-org/-/epics/18227+s	Category:DAST	@hbakergitlab @arpitgogia
6	DAST authentication steps script (&17018 - closed) • Michael Eddington • 18.5	Category:DAST	@mikeeddington	Deliverable
7	Collecting CI-based analyzer metrics (&14266) • Michael Eddington • On track	Category:DAST	@mikeeddington	Stretch
8	Clean up and re-organise DAST release image (#534865 - closed) • David Nelson • 18.4	Category:DAST	@DavidNelsonGL
9	Concise job console output MVC (#553625 - closed) • Hannah Baker • 18.3 • On track	Category:DAST	@hbakergitlab	Deliverable

Severity 2 Bugs

1. Investigate if har files with multipart/form-da... (#438760) • Unassigned • 18.6
2. `DAST_EXCLUDE_URLS` affects URLs from non-match... (#457799) • David Nelson • 18.6
3. Browser throws ERR_NETWORK_CHANGED during DAST ... (#467845 - closed) • Unassigned • 18.3

Severity 3 Bugs

1. Fix panic while parsing version string in DAST ... (#465738 - closed) • Unassigned • 18.3
2. FIPS build broken on RHEL9 host platforms (#462227) • Michael Eddington • 18.6
3. Duplicated crawl results when `sitemap.xml` red... (#474132 - closed) • Arpit Gogia • 18.4

Maintenance and bugs

1. Using DAST without Ultimate license gives uncle... (#548565) • Hannah Baker • Backlog
2. https://gitlab.com/gitlab-org/gitlab/-/issues/548652+s
3. DAST scanner profile uses old variable name for... (#548088) • Unassigned • Backlog
4. Partially observed requests cause scanner to ha... (#517039 - closed) • David Nelson • 18.5
5. DAST Crawler: Minimize disruption to the browser (&16579) • Unassigned
   1. Partially observed requests cause scanner to ha... (#517039 - closed) • David Nelson • 18.5
   2. Navigations failing with "this element is not r... (#480909) • David Nelson • 18.6