Workflows

Repeatable engineering workflows with explicit verification.

364 published

Page 5 of 11

SDK Generation from OpenAPI Workflow

Generate client SDKs from the OpenAPI contract, version them with the API, test them against a mock and the real service, and publish per language.

advanced~150 min
api · sdk · automation

Secrets Manager Migration Workflow

Inventory hardcoded and config-file secrets, migrate them to a secrets manager with references, rotate on migration, and remove the old plaintext copies.

advanced~180 min
security · secrets · migration

Self-Hosted Runner Hardening Workflow

Isolate runners per trust level, run jobs in containers or VMs, restrict network and filesystem access, and treat runners as untrusted infrastructure.

advanced~150 min
ci · security · infrastructure

Service Mesh Upgrade Workflow

Upgrade the control plane and data plane in stages, verify compatibility, watch for sidecar or ambient transition issues, and keep rollback simple.

advanced~180 min
service-mesh · kubernetes · upgrade

Session Management Audit Workflow

Review session lifetimes, cookie attributes, rotation, and revocation, and confirm that idle and absolute timeouts match the risk of the data accessed.

intermediate~90 min
security · session · audit

SLO and Error Budget Review Workflow

Review SLO attainment and error budget consumption, decide whether to slow releases or invest in reliability, and adjust SLOs that no longer reflect users.

intermediate~90 min
reliability · sre · planning

SSO Integration Testing Workflow

Test login, logout, session expiry, role mapping, and error paths against the real IdP in a controlled environment before enabling for production users.

intermediate~120 min
identity · testing · sso

Stream Processing Backfill Workflow

Backfill a derived stream from historical data, run it alongside live processing without corrupting state, and verify totals before promoting.

advanced~150 min
streaming · data · operations

Tenant Offboarding and Data Deletion Workflow

Export the tenant data for the customer, confirm the retention or deletion request, remove data across all systems and backups, and produce an attestation.

advanced~120 min
multi-tenant · privacy · operations

Terraform Module Extraction Workflow

Identify repeated resource patterns, extract a module with clear inputs and outputs, migrate consumers one by one, and validate plans before moving state.

advanced~150 min
terraform · iac · refactoring

Third-Party Dependency Adoption Workflow

Evaluate a new dependency for maintenance, security, license, and alternatives, approve deliberately, and record the decision before adopting it.

intermediate~90 min
dependencies · governance · supply-chain

Timezone and Date Handling Review Workflow

Audit storage, display, and computation of times, standardize on UTC with explicit zones at the edges, and test around DST and month boundaries.

intermediate~90 min
time · correctness · quality

Vendor Offboarding Workflow

Inventory data and integrations with a vendor, migrate or export what is needed, revoke access, delete data per contract, and confirm the dependency is gone.

intermediate~120 min
vendors · operations · compliance

WAF Rule Tuning Workflow

Run the WAF in detection mode first, triage findings against real traffic, tune or allowlist confirmed false positives, and then enable blocking.

intermediate~90 min
security · waf · operations

Alert Storm Triage Workflow

Correlate hundreds of simultaneous alerts to their common cause, silence derived noise, and work the single root incident instead of its echoes.

intermediate~25 min
incident · observability · on-call

Analytics Data Anonymization Workflow

Strip and generalize identifiers before analytics ingestion, validate anonymity with re-identification tests, and document the transformation lineage.

advanced~40 min
data-pipeline · privacy · compliance

API Latency SLO Tuning Workflow

Set percentile-based latency SLOs from traffic reality, decompose p99 into component spans, and tune the dominant path with measured verification.

advanced~40 min
performance-tuning · slo · api

Architecture Review Gate Workflow

Route changes that alter cross-team contracts, add dependencies, or shift data ownership through a lightweight architecture gate before code.

intermediate~30 min
code-review · architecture · governance

Artifact Promotion Across Environments Workflow

Build once and promote the identical artifact through dev, staging, and production gates, where each promotion is a metadata move, not a rebuild.

intermediate~30 min
release · ci-cd · supply-chain

Security Audit Log Review Workflow

Review privileged actions in audit logs on a schedule, with queries per concern class, anomaly flags, and escalation paths that close the loop.

intermediate~30 min
security-audit · logging · detection

Autoscaling Policy Tuning Workflow

Tune autoscaling from observed traffic shape: match scale-out triggers to latency signals, damp oscillation, and verify against replayed peaks.

intermediate~35 min
performance-tuning · autoscaling · capacity

Automated Bot Findings Triage Workflow

Route automated reviewer findings by signal quality, fix the high-signal classes at author time, and silence the noisy ones instead of training ignore.

beginner~20 min
code-review · automation · tooling

Bug Bounty Triage and Reward Workflow

Triage bounty submissions by validity and severity within SLA, communicate decisions with evidence, and pay promptly to keep researchers reporting.

intermediate~30 min
security-audit · bug-bounty · process

Frontend Bundle Slimming Cycle Workflow

Set a byte budget per route, measure the shipped bundle continuously, remove the biggest offenders, and hold the line with CI gates.

intermediate~30 min
performance-tuning · frontend · bundling

Cache Failure Graceful Degradation Workflow

Respond to cache layer failure by switching to degraded modes: stale-while-revalidate, direct origin with load shedding, and queue-based writes.

advanced~35 min
incident · resilience · caching

Cache Hit Ratio Optimization Workflow

Measure hit ratio by key class, diagnose misses by type (cold, capacity, or invalidation), and apply the fix matched to the miss pattern.

intermediate~30 min
performance-tuning · caching · latency

Capacity Planning and Headroom Workflow

Derive current utilization per resource, project demand growth from business signals, and size headroom against defined failure modes.

intermediate~35 min
performance-tuning · capacity · planning

API Compatibility Review Workflow

Review changes to public interfaces for backward compatibility and require a deliberate versioning decision.

advanced~55 min
review · api · contract

Design-First Review Workflow

Review the intended design before implementation so structural problems are caught before code is written.

advanced~60 min
review · design · process

Documentation Review Workflow

Verify that a change updates the docs, comments, and examples it makes stale, preventing documentation drift.

beginner~40 min
review · documentation · quality

Large Change Review Strategy Workflow

Break or review a large change so reviewers can reason about it safely instead of rubber-stamping.

intermediate~60 min
review · process · quality

Review as Mentorship Workflow

Frame review comments to teach reasoning and standards so the team improves rather than just fixing this change.

intermediate~45 min
review · mentorship · culture

Review Metrics and Quality Workflow

Use review metrics such as turnaround and rework to find process bottlenecks without gaming reviewers.

intermediate~50 min
review · metrics · process

Performance Impact Review Workflow

Assess the performance impact of a change covering query counts, algorithmic complexity, and payload size.

advanced~50 min
review · performance · quality

Security-Focused Code Review Workflow

Add a security lens to reviews covering input handling, authorization, secrets, and injection surfaces.

advanced~55 min
review · security · quality

Test Quality Review Workflow

Evaluate the tests in a change for meaningful assertions, edge cases, and isolation rather than mere presence.

intermediate~50 min
review · testing · quality