18.6 AST::CA planning issue

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

• General info
  • Theme
  • Feature
    • Active Development
  • Maintenance and bugs
    • Standalone issues
      • Bugs
      • Other
        • Feature
        • Maintenance

General info

Theme

We need to focus on roadmap deliverables.

• Period:  11/Oct/2025 - 14/Nov/2025
• Planning board
• Reaction rotation: @nilieskou @onaaman (issue)

Feature

Active Development

Description	DRI	Due	Notes
Maturing Static Reachability - Post GA	@onaaman	18.5	We will improve Java and hopefully we can have feedback for the other languages in order to improve there as well.
Enabling Metrics for the DS analyzer	@nilieskou		@nilieskou will continue working on this providing what we need for DS GA.
Dependency Scanning GA	@gonzoyumo	18.5	@ifrenkel is supporting Olivier for this deliverable
Better support scanning of multiple container images	@zmartins	18.7
Auto-Remediation with automatic bumping of depe... (&17403)	@hacks4oats	Q4	@albi.yusupova Will work with Oscar on this.
SPDX license expressions ingestion in PMDB	@ifrenkel	Q4	This deliverable is currently de-prioritised due to DS GA.

Maintenance and bugs

Standalone issues

Bugs

---
display: table
fields: title, labels("priority*"), labels("severity*"), labels("Deliverable"),  labels("Stretch"), healthStatus, assignees, state
---
label = "group::composition analysis" AND label = "type::bug" AND label != "vulnmapper" AND milestone = "18.6"

Other

Feature

---
display: table
fields: title, labels("Deliverable"), labels("Stretch"), labels("workflow::*"), healthStatus, assignees, state
---
label = "type::feature" AND label = "group::composition analysis" AND milestone = "18.6"

Maintenance

---
display: table
fields: title, labels("Deliverable"),  labels("Stretch") ,labels("workflow::*"), healthStatus, assignees, state
---
label = "type::maintenance" AND label = "group::composition analysis" AND milestone = "18.6" AND label != "docs-only" AND state = opened