Gitlab hero border pattern left svg Gitlab hero border pattern right svg

Group Direction - Security Policies

  1. You are here:
  2. GitLab Direction
  3. Product Stage Direction - Security Risk Management
  4. Group Direction - Security Policies

Security Policies

   
Stage Govern
Content Last Reviewed 2024-10-18
Content Last Updated 2024-10-18

Overview

Security Policies is a group in the Govern stage. There is one category in the group and details on the direction can be viewed on the following individual category page:

  1. Security Policy Management

Priorities

Priority Name Workflow Label BE DRI FE DRI Estimated start release Effort in milestones Target release
1 Stagger or batch scheduled pipelines executed by scan execution policies in dev mc_rocha aturinske 17.0 7 17.6
2 Prevent jobs with empty needs from starting before .pipeline-policy-pre finishes in dev Andyschoenen TBD 17.3 3 17.6
3 Add support for scheduled enforcement of custom CI in the pipeline execution policy type in dev Andyschoenen aturinske 17.4 6 17.9
4 Enhance Pipeline Execution Policies with Configurable Stage Placement refinement mcavoj mcavoj 17.5 2 17.7
5 Improve compatibility between security policies and security analyzers solution validation mcavoj aturinske 17.4 3 TBD
6 Prevent branch modification when a policy disables the setting for the given group protected branches in dev mc_rocha aturinske 17.5 2 17.6
7 Support multiple distinct approval actions in merge request approval policies in dev sashi_kumar arfedoro 17.5 3 17.7
8 Unable to edit or add new policies after project deletion refinement Andyschoenen TBD 17.7 2 17.9
9 Support custom roles in merge request approval policies ready for development sashi_kumar aturinske 17.7 1 17.7
10 Basic Warn Mode MVC for MR Approval Policies design TBD aturinske 17.7 TBD TBD
11 Exclude Components from Merge Request Approval Policies for License Approval Rules planning breakdown mc_rocha arfedoro 17.7 3 17.9
12 Flexible Scan Execution Policy Trigger Condition planning breakdown Andyschoenen aturinske 17.6 3 17.9
13 Auto-resolve filter attribute planning breakdown TBD TBD TBD TBD TBD
14 Custom external and internal status checks approval rule in merge request approval policies problem validation mc_rocha arfedoro TBD 2 TBD
15 Enforce scan execution in spite of "disabled GitLab CI" configuration in a project solution validation mc_rocha aturinske TBD 2 TBD
16 Push rule exceptions in Merge Request Approval Policies problem validation Andyshoenen arfedoro TBD 2 TBD
17 Security Policy Impact Assessment and Audit Mode solution validation mcavoj arfedoro TBD 4 TBD
18 Refine Policy Application Limits ready for development bauerdominic TBD TBD TBD TBD
19 Hide the Security Policy Project and Automate Permissions design Andyschoenen arfedoro TBD 5 TBD
20 Enforce push rules via security policy problem validation sashi_kumar aturinske TBD 3 TBD
21 Add support for Organization Level Policies ready for design bauerdominic arfedoro TBD 3 TBD
22 Approval group members are not visible to MR creator refinement TBD TBD TBD 2 TBD
23 Custom SAST/Secret Detection Ruleset Support for Scan Execution Policies design TBD TBD TBD 1 TBD
24 Fix Security Approval Policy Notifications problem validation TBD TBD TBD 2 TBD
25 Granular per-rule controls for scanners used in Merge Request Approval Policies problem validation TBD TBD TBD 2 TBD
26 Provide a UI-based Policy Approval Workflow planning breakdown TBD TBD TBD 5 TBD
27 Display Security Policy Errors problem validation TBD TBD TBD 2 TBD

*This page may contain information related to upcoming products, features and functionality.

It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes.

Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.*

Edit this page View source