Monthly Open Community Call

[seb-kw]

Note

Join the monthly DevGuard Open Community Call starting from 23.04.26 - always at 17 pm (UTC+2). Help discussing new features, contributions and the development of the project.
For support please check out the community matrix space.

---

Agenda 23.04.26

1. Welcome & intros

Quick round — who's in the room, how folks are using DevGuard.

2. Status update: what's in flight

• Release 1.3.0
• Dependency Proxy Improvements — current state, what's next
• Instance Admin Dashboard — scope so far, what we want to cover
• Config files - current state

3. Current themes from the issue tracker

A walk-through of topics that keep popping up in our open issues - we would like to discuss these issues and their priority:

S: Short-term
M: Mid-term
L: Long-term

• Add config option to disable organisation creation for an DevGuard instance #1720

• User Management (M)

  • Invite memebers to org - email invite should be functional #888
  • Inivite members: display invitation states (pending, expired in...) in members list #889
  • Add secondary option on new org screen to join an existing org by pasting the invitation code #897
  • Add user groups and make it possible to assign those to projects #1717

• Add option to open issues as confidential issues #906 (M)

• Implement support for ingesting OpenVeX files #1405 (M)

• Add additional Info to SBOM Upload window - usability #1674 (M)

• Security Improvements (M)

  • Security Feature Request: PATs should have a configurable expiry data with a reasonable default #1807
  • Security Feature Request: App side encryption for critical values #1808
  • Setup and document formal CVD process - ISO/IEC 29147 (vulnerability disclosure) and ISO/IEC 30111 (vulnerability handling processes) #1825
  • per-project tokens #1268

• Sync GitHub Advisory DB Malware entries to the Malicious Package DB #1834 (M)

• Add Visual Studio Extension #1032 (L, exploration)

Goal here: figure out which of these we want to prioritize — not solve them on the call.

4. Community wishlist

Open floor — what are you missing, blocked on, or excited about?

5. Drafting the roadmap

Based on the discussion, group topics into:

• Short-term (next ~4–6 weeks)
• Mid-term (next quarter)
• Parking lot (good ideas, not now)

6. Wrap-up & next steps (~5 min)

Date of the next call etc.

[seb-kw]

Ideas

• DevGuard Playground/ Test Projects/ Demo ready to set up in DevGuard directly, no need for scanning setup.
  • Onboarding Tour (Side-Drawer)
• Useful changelogs
• Ensure new features are properly documented

On this call

• Calendar Invite for Download
• Promote this event more

[seb-kw]

Next one: #2096