Workflows

Repeatable engineering workflows with explicit verification.

364 published

Page 4 of 11

Data Loss Prevention Review Workflow

Identify sensitive data egress paths, monitor and block their misuse, review findings, and tune rules with the data owners to reduce false positives.

intermediate~120 min
security · dlp · privacy

Data Residency Compliance Workflow

Map where each data class may be stored, verify deployments and backups stay in region, and add controls so new features do not silently move data across borders.

advanced~150 min
compliance · privacy · infrastructure

Database Connection Pool Audit Workflow

Compare the application pool size, database connection limit, and instance count, then size the pool so total connections never exceed the database capacity.

intermediate~75 min
databases · performance · reliability

Database Reindex Maintenance Workflow

Assess index bloat, build replacements concurrently, swap or drop old indexes with minimal locking, and monitor the effect on query latency.

advanced~120 min
databases · maintenance · performance

Database Upgrade and Rollback Workflow

Plan a major version upgrade with a rehearsal, extension and replication checks, a tested rollback, and a defined cutover and revert window.

advanced~240 min
databases · upgrade · operations

DDoS Readiness Workflow

Establish absorption and rate-limit capacity, configure scrubbing and caching in front, rehearse a response, and agree on thresholds and communication before an attack.

advanced~180 min
security · resilience · operations

Devcontainer Parity Workflow

Define a devcontainer that matches CI tool versions, mount caches for speed, document ports and services, and verify a clean clone builds inside it.

intermediate~120 min
dx · containers · onboarding

Disaster Recovery Test Workflow

Define recovery objectives, test restoring in an isolated environment, measure actual RTO and RPO, and close gaps before a real disaster.

advanced~240 min
reliability · dr · operations

Encryption Key Rotation Workflow

Generate a new key version, make new writes use it, rewrap or lazily re-encrypt old data, and retire the old key only when no data depends on it.

advanced~150 min
security · encryption · operations

Event Schema Evolution Workflow

Version event schemas, migrate producers and consumers compatibly, and use a registry to block incompatible changes before they reach the broker.

intermediate~90 min
events · schema · messaging

A/B Experiment Testing Workflow

State the hypothesis and metric, define the sample and duration, guard against peeking, run the experiment, and act on the result honestly.

intermediate~120 min
experimentation · product · analytics

Feature Flag Lifecycle Workflow

Create a flag with an owner and expiry, roll out by cohort, monitor the feature, and remove the flag once it is fully released or abandoned.

intermediate~90 min
release · feature-flags · operations

GraphQL Schema Governance Workflow

Review schema changes for breaking impact, enforce deprecation instead of removal, track field usage, and gate the schema in CI.

intermediate~90 min
graphql · api · governance

Growth Capacity Forecast Workflow

Project growth from real trends, model the capacity and cost at each threshold, identify the next bottleneck, and plan the change before the threshold is hit.

intermediate~90 min
capacity · reliability · planning

gRPC Service Migration Workflow

Introduce the gRPC service alongside REST, run both in parallel, shift consumers over using client-generation and observability, then retire the old surface.

advanced~180 min
grpc · migration · api

Hermetic Build CI Workflow

Pin all inputs, fetch dependencies from a controlled mirror with locked versions, disable network during the build step, and prove the build only uses declared inputs.

advanced~150 min
build · security · ci

i18n Localization Release Workflow

Extract strings, hand off to translators with context, validate the imported translations for placeholders and length, and test the localized build.

intermediate~120 min
i18n · release · frontend

Identity Federation Onboarding Workflow

Exchange metadata with the identity provider, map claims to roles, test in a sandbox, and roll out federation with a fallback for break-glass access.

advanced~150 min
identity · sso · security

Internal Library Release Workflow

Version and document the internal library, provide a migration guide for breaking changes, publish to the private registry, and announce to internal consumers.

intermediate~90 min
release · internal-libraries · dx

Keyboard Accessibility Review Workflow

Traverse every critical journey with keyboard only, check focus order, visibility, traps, and skip links, and fix findings before release.

intermediate~90 min
accessibility · testing · quality

Kubernetes Version Upgrade Workflow

Check deprecated APIs in use, drain and upgrade nodes in controlled batches, verify workloads reschedule, and stay within supported version skew.

advanced~180 min
kubernetes · upgrade · operations

Poison Message Handling Workflow

Detect a message that repeatedly fails, cap redeliveries, route it to a dead-letter queue, and provide a safe replay path after the fix.

intermediate~60 min
messaging · reliability · operations

Monorepo Versioning Workflow

Define which packages are published, choose independent or fixed versioning, automate version bumps and changelogs, and publish in dependency order.

intermediate~90 min
monorepo · release · versioning

Multi-Tenant Onboarding Workflow

Provision a tenant with isolated data, scoped configuration, seeded defaults, and a verified access boundary so the first user lands in a correct, secure space.

intermediate~90 min
multi-tenant · provisioning · security

On-Call Fairness Review Workflow

Measure page distribution and out-of-hours load across the rotation, look for unfair clustering, and adjust the schedule and alerting to balance the burden.

beginner~60 min
oncall · operations · wellbeing

Open Source Contribution Workflow

Review the project license and CLA, follow contribution guidelines, keep commits scoped, sign off where required, and coordinate on the issue before writing large changes.

intermediate~90 min
opensource · collaboration · licensing

Open Source License Compliance Workflow

Collect license metadata for all dependencies, classify obligations, flag incompatible or unknown licenses, and produce notices before release.

intermediate~90 min
compliance · licensing · supply-chain

Package Publishing Workflow

Build and test the package, bump the version with a changeset, publish with provenance to the registry, and verify installation from a clean environment.

intermediate~60 min
release · packaging · ci

PII Discovery and Classification Workflow

Scan data stores for personally identifiable patterns, classify and tag columns, review hits with owners, and drive protection and retention from the classification.

advanced~180 min
privacy · data-governance · security

Postman Collection Maintenance Workflow

Generate or update the collection from the contract, keep environments and variables out of the collection, and validate that requests still match the API.

beginner~60 min
api · testing · tooling

Product Analytics Event Schema Workflow

Define a tracking plan for events and properties, enforce it in code review, validate incoming events, and keep naming consistent over time.

intermediate~90 min
analytics · data-quality · product

Release Notes Quality Review Workflow

Review generated notes for accuracy and audience, lead with impact and breaking changes, add migration steps, and remove internal noise.

beginner~60 min
release · communication · quality

Reproducible Build Verification Workflow

Build the same revision twice in different environments, compare hashes, and fix the sources of nondeterminism such as timestamps and paths.

advanced~150 min
build · security · supply-chain

Runbook Quality Review Workflow

Test runbooks by having someone unfamiliar execute them, fix ambiguous steps and missing prerequisites, and keep them linked from alerts.

beginner~60 min
operations · runbooks · quality

SBOM Generation and Review Workflow

Generate an SBOM per build in a standard format, store it with the artifact, review it for unapproved licenses and vulnerable components, and use it to answer supply chain questions fast.

intermediate~90 min
security · supply-chain · compliance

Screenshot Visual Baseline Workflow

Capture stable screenshots in a controlled environment, review diffs deliberately, accept intentional changes, and flag unexpected ones.

intermediate~90 min
testing · frontend · quality