18.7 AST::Static Analysis planning issue

• General info
• Priorities
  • Feature
    • 1. https://gitlab.com/groups/gitlab-org/-/epics/18369+
  • Maintenance and bugs
    • 1. https://gitlab.com/groups/gitlab-org/-/epics/20060+
  • Standalone issues
    • Bugs
      • P1
      • P2
      • P3
    • Other
      • Feature
      • Maintenance
• Engineering allocation

General info

• Period: 2025-10-15 to 2025-12-12
• Planning board
• Reaction rotation: @mtolpin (primary), @philipcunningham (secondary)

Priorities

Feature

Our highest priority feature work this milestone.

1. SAST support for C and C++: GA release (&18369)

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow", labels("Deliverable", "Spike") as "Other info"
---
project = "gitlab-org/gitlab" and epic = &18369 and milestone = "18.7"

Maintenance and bugs

1. https://gitlab.com/groups/gitlab-org/-/epics/20060+

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow", labels("Deliverable", "Spike") as "Other info"
---
project = "gitlab-org/gitlab" and epic = &20060 and milestone = "18.7"

Standalone issues

Bugs

Bugs board (no vulnerabilities, no milestone).

Vulnerabilities are handled by the reaction rotation.

P1

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow"
---
label = "group::static analysis" AND label = "priority::1" AND label = "type::bug" AND label != "vulnmapper"  AND milestone = "18.7"

P2

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow"
---
label = "group::static analysis" AND label = "priority::2" AND label = "type::bug" AND label != "vulnmapper" AND milestone = "18.7"

P3

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow"
---
label = "group::static analysis" AND label = "priority::3" AND label = "type::bug" AND label != "vulnmapper" AND milestone = "18.7"

Other

Feature

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow", labels("Deliverable", "Spike") as "Other info"
---
label = "type::feature" AND label = "group::static analysis" AND milestone = "18.7"

Maintenance

---
display: table
fields: title, healthStatus, assignees, state, labels("workflow::*") as "Workflow", labels("Deliverable", "Spike") as "Other info"

---
label = "type::maintenance" AND label = "group::static analysis" AND milestone = "18.7"

Engineering allocation

• everyone: work on one typebug before picking-up a new issue.
• @hyan3:typefeatureDRI for &18369
• @mtolpin:
• @julianthome: typemaintenance Transition of Automatic Detection of SAST False... (&19781) • Julian Thome • 18.8 • On track and https://gitlab.com/gitlab-org/gitlab/-/issues/556627+s
• @mtolpin, @adamcohen: typefeature contributing to other
• @mtolpin typemaintenance primary rotation
• @philipcunningham: typemaintenance secondary rotation, typemaintenance DRI for https://gitlab.com/groups/gitlab-org/-/epics/20060+s