



App Advisor
SITUATION
Spring is an open source runtime for java workloads used by 46% of all custom enterprise workloads. We wanted to leverage that market and bring it to Tanzu, our platform solution that enables companies to build and deploy software quickly and securely.
Application development organizations find their Spring applications lagging behind on Spring OSS updates resulting in those applications being outside of OSS support and with security vulnerabilities. Current tools help with aspects of the lagging upgrade issues, but they are not reliable enough to meet all the needs.
Problem Statement
How might we enable platform teams to perform automatic code refactoring across hundreds or thousands of repos to fix OSS vulnerabilities by upgrading the corresponding libraries and minimize the required manual work introduced by the breaking changes of those versions?
Coaching
As the design manager responsible for this project, I worked with the UX designer to help them improve their presentation skills.
I checked in with designer and had coaching sessions to help them decipher what they should start, continue, stop doing in their process.
​
Management
Ensured designer had what they needed to do their work.
Managed stakeholders and prioritization of the UX work - When more work was asked of designer, I led alignment meetings with PM and team to make sure we were investing designer time in the right priorities. Occasionally, I allocated another designer to additional work to make sure we met deadlines.
​
Providing Feedback
Provided feedback about design process and artifacts during 1:1s with designer.
Participated on stakeholder reviews, helped analyze feedback and made suggestions for improvements and next steps.
Designing
When designer was on parental leave, I led strategy work sessions to figure out North Star user flows.
Roadmap

1
Now
As a portfolio manager,
I can add repositories to be continually scanned;
I can see the results for previous scans;
I can see how critical the vulnerabilities are:
I can see the level of upgrades needed for their libraries.
2
Next
As an app developer,
I can see the details of my libraries vulnerabilities;
I can follow a plan to upgrade my libraries.
3
Later
As an app developer I can run automated remediation jobs to upgrade my libraries based on user approval to AI/ML recommendations.
Results
"I have never had a bad conversation about App Advisor" - Technical Sales Representative
At least 7 clients who had left, came back because of Compliance requirements.





