## Release notes The [Security Inventory](https://docs.gitlab.com/user/application_security/security_inventory/) now shows scanner coverage for an entire group hierarchy at a glance. A new coverage widget rolls up every project across the group and its subgroups, showing the percentage and number of projects where each scanner is enabled, failed, stale, or not enabled. Use the scanner dropdown to focus on a scanner such as SAST or Dependency Scanning, then select a status to filter to those projects and enable scanners on the ones that aren't covered. Use **Display** to toggle the Vulnerabilities, Tool coverage, and Security attributes columns. Previously, the inventory showed coverage per subgroup but no total. Teams managing thousands of projects can now spot coverage gaps across the whole portfolio and act on them from one page. https://docs.gitlab.com/user/application_security/security_inventory/ > **Note:** The source of truth for this release note has moved to https://gitlab.com/gitlab-org/gitlab/-/merge_requests/255021. Edit the MR directly to make changes. --- ## Overview Low-lift improvements to the existing Security Inventory experience that reduce friction and improve day-to-day usability for security and platform teams managing scanner coverage at scale. ## Problems to Solve 1. Security teams cannot get an aggregated view of scanner coverage across groups and subgroups without navigating each group individually. 2. Inventory views cannot be saved or shared via link, requiring teams to recreate their filters on every visit. 3. There is no way to filter projects by created or updated date, making it difficult to identify recently added projects that may be missing the correct scanner configuration. ## Proposed Improvements - **Aggregated group view**: Surface rolled-up scanner coverage across subgroups and portfolios in a single view. - **Savable and shareable links**: Allow users to save inventory filter state as a persistent URL for recurring workflows and team sharing. Out of scope - **Date-based project filtering**: Filter inventory by project created or updated date to identify recently onboarded projects missing scanner configuration. (Backend may need more time on this) ## Success Criteria - Security teams can assess coverage across a large group hierarchy without navigating subgroup by subgroup. - A saved link to a filtered inventory view works reliably for recurring workflows. - Teams can identify projects added in the last 7/30/90 days and verify scanner configuration without manual effort.