►
From YouTube: GitLab 13.0 Kickoff - Secure:Composition Analysis
A
So
we're
going
to
be
doing
a
lot
of
work
that
is
not
visible
as
new
features,
but
it
is
going
to
improve
the
reliability
and
quality
of
our
product.
We're
going
to
be
removing
the
requirement
of
darker
and
darker
for
the
composition,
analysis,
scanners,
we're
going
to
continue
work
on
the
post,
MVC
offline
scanning
tools.
That's
basically
some
license
compliant
scanners,
making
those
available
so
that
you
can
run
them
in
a
offline,
air-gapped,
limited
availability
environment,
and
these
are
also
going
to
start
looking
at
improvements
to.
A
How
do
you
do
offline
scanning
in
an
easier
way?
I
need
to
have
some
back-end
work
to
finish,
actually
renaming
license
management
to
license
compliance
in
effort
to
get
that
name
to
be
more
consistent
with
what
everyone
is
expecting,
because
we
had
a
bunch
of
people
originally
not
understanding
the
purpose
of
that
scanner.
A
We're
fixing
some
bugs
we're
looking
into
some
performance
items
and
technical
debt
items,
as
well
as
improving
some
of
our
testing
to
help
avoid
four
aggressions
and
there's
a
couple.
Ux
debt
and
UI
I
polish
items,
hopefully
improve
the
user
experience.
So
it's
more
pleasant
thing
to
use
what
we're
getting
to
next
is
dependency
scanning.
A
Our
goal
for
this
year
is
to
get
dependency
scanning
to
complete
right
now
we
aren't
introducing
any
new
features,
but
we're
making
some
minor
UI
improvements
and
some
bug
fixes
and
some
quality
improvements
to
lay
the
groundwork
to
help
us
get
there.
We're
also
working
on
adding
a
bot
to
our
auto
remediation,
offering
so
that,
instead
of
having
to
click
to
merge
in
our
Justin's
solution,
you
can
just
have
a
bot.
Do
it
for
you.
A
We're
also
going
to
be
doing
a
little
bit
of
work
around
improving
the
way
that
third
parties
integrate
their
security
scanners
into
our
solution.
As
we
say,
we
play
well
with
others,
and
we
want
other
companies
to
be
able
to
integrate
into
the
security
offerings
if
they
follow
the
guidelines
that
we
have
set
up
for
our
partners.
A
I
hope
that
some
of
these
end
a
little
bit
interesting
to
you
and
I,
know
they're,
not
big
WOW
factor
items,
but
we're
really
working
towards
having
this
be
a
solid
product
with
you
know
great
tests
and
quality,
and
that
does
take
some
time
to
dig
ourselves
out
of
tech
debt
bugs
that
get
found
as
we
have
more
users
and
just
really
improving
the
speed
of
our
product.
Thanks
a
lot
for
watching.