Group Direction - Security Policies

1. You are here:
2. GitLab Direction
3. Product Stage Direction - Security Risk Management
4. Group Direction - Security Policies

• Security Policies
• Overview
• Priorities

Security Policies

Stage	Govern
Content Last Reviewed	2024-11-20
Content Last Updated	2024-11-20

Overview

Security Policies is a group in the Security Risk Management stage. There is one category in the group and details on the direction can be viewed on the following individual category page:

1. Security Policy Management

Priorities

Priority	Name	Workflow Label	BE DRI	FE DRI	Estimated start release	Effort in milestones	Target release
1	Manage scheduled scan execution pipeline concurrency (name updated)	feature flag	mc_rocha	aturinske	17.0	8	17.8
2	Compliance handling of needs statements in pipeline execution policies	feature flag	Andyschoenen	TBD	17.3	4	17.8
3	Add support for scheduled enforcement of custom CI in the pipeline execution policy type	in dev	Andyschoenen	aturinske	17.4	6	17.9
4	Enforce Required Stages in Pipeline Execution Policies (name updated)	in review	mcavoj	mcavoj	17.5	2	17.10
5	Improve compatibility between security policies and security analyzers	solution validation	mcavoj	aturinske	17.4	3	TBD
6	Support multiple distinct approval actions in merge request approval policies	in dev	sashi_kumar	arfedoro	17.5	3	17.8
7	Make ci_skip configurable in Pipeline Execution Policies	solution validation	TBD	TBD	17.8	TBD	TBD
8	Unable to edit or add new policies after project deletion	refinement	bauerdominic	TBD	17.8	2	17.10
9	Support custom roles in merge request approval policies	ready for development	sashi_kumar	aturinske	17.7	1	17.7
10	Basic Warn Mode MVC for MR Approval Policies	design	alan	aturinske	17.7	2	17.9
11	Exclude Components from Merge Request Approval Policies for License Approval Rules	planning breakdown	mc_rocha	arfedoro	17.8	3	17.10
12	Flexible Scan Execution Policy Trigger Condition	planning breakdown	bauerdominic	aturinske	17.10	3	18.0
13	Auto-resolve filter attribute	planning breakdown	TBD	TBD	TBD	TBD	TBD
14	Custom external and internal status checks approval rule in merge request approval policies	problem validation	mc_rocha	arfedoro	TBD	2	TBD
15	Enforce scan execution in spite of "disabled GitLab CI" configuration in a project	solution validation	mc_rocha	aturinske	TBD	2	TBD
16	Push rule exceptions in Merge Request Approval Policies	problem validation	Andyshoenen	arfedoro	TBD	2	TBD
17	Security Policy Impact Assessment and Audit Mode	solution validation	mcavoj	arfedoro	TBD	4	TBD
18	Refine Policy Application Limits	ready for development	bauerdominic	TBD	TBD	TBD	TBD
19	Hide the Security Policy Project and Automate Permissions	design	Andyschoenen	arfedoro	TBD	5	TBD
20	Enforce push rules via security policy	problem validation	sashi_kumar	aturinske	TBD	3	TBD
21	Add support for Organization Level Policies	ready for design	bauerdominic	arfedoro	TBD	3	TBD
22	Approval group members are not visible to MR creator	refinement	TBD	TBD	TBD	2	TBD
23	Custom SAST/Secret Detection Ruleset Support for Scan Execution Policies	design	TBD	TBD	TBD	1	TBD
24	Fix Security Approval Policy Notifications	problem validation	TBD	TBD	TBD	2	TBD
25	Granular per-rule controls for scanners used in Merge Request Approval Policies	problem validation	TBD	TBD	TBD	2	TBD
26	Provide a UI-based Policy Approval Workflow	planning breakdown	TBD	TBD	TBD	5	TBD
27	Display Security Policy Errors	problem validation	TBD	TBD	TBD	2	TBD

*This page may contain information related to upcoming products, features and functionality.

It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes.

Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.*