Workflows
Repeatable engineering workflows with explicit verification.
364 published
Page 8 of 11
Post-Release Verification Workflow
Verify a release after shipping with production smoke tests, metric comparisons against baseline, and a structured closeout report.
Privileged Access Review Workflow
Inventory every privileged account and grant, verify continued business need with owners, and revoke the excess with an auditable trail.
Pull Request Review Workflow
Keep PRs small and single-purpose, distribute review load fairly, enforce response SLAs, and separate blocking findings from suggestions.
Queue Throughput Tuning Workflow
Measure end-to-end throughput, find the slowest stage in the consumer pipeline, tune its concurrency and batching, and verify lag drains.
Change-Based Regression Test Selection Workflow
Select regression tests by code-change to test mapping, run the full suite nightly, and validate selection recall against escaped defects.
Regression Triage and Priority Workflow
Grade production regressions by user impact and blast radius, route each to hotfix, fast-follow, or backlog, and verify the routing holds.
Release Announcement Drafting Workflow
Draft a release announcement that distinguishes user impact from internal detail and links to the changelog.
Release Artifact Signing Workflow
Sign every release artifact in CI and record provenance so the deployed bytes can be traced to a specific commit and pipeline.
Release Branch Cut and Freeze Workflow
Cut a release branch from main, freeze feature merges into it, and channel last-minute changes through cherry-picks with review gates.
Release Candidate Sign-off Workflow
Distribute one candidate to staged sign-offs from QA, security, product, and operations, tracking each as a gate before final tagging.
Release Checklist Automation Workflow
Turn a manual release checklist into pipeline checks so steps cannot be skipped under time pressure.
Release Compliance Checklist Workflow
Turn regulatory and contractual release obligations into a machine-checked list that blocks shipping rather than reminding people.
Customer Impact Notification Workflow
Notify impacted customers before, during, and after a release that changes behaviour they depend on, with clear actions.
Database Migration Release Gate Workflow
Gate a release on backward-compatible migrations that can run before and after the code deploy without breaking either version.
Release Dependency Pinning Workflow
Freeze dependency versions before a release, verify the locked build, and record the resolved dependency set.
Feature Flag Cleanup Workflow
Retire flags that have been fully rolled out, remove dead branches, and prove the code still behaves the same.
Release Freeze Window Workflow
Declare and enforce a freeze window with exceptions and a documented rollback plan so risky changes do not land before a key event.
Hotfix Patch Release Workflow
Branch from the exact production tag, apply the minimal fix, run targeted tests, and release a patch without pulling in unreleased work.
Release Notes Generation and Review Workflow
Generate user-facing notes from commit and PR history, classify entries by audience impact, and route them through a two-person review.
Release Rollback Readiness Workflow
Define and rehearse the rollback path before releasing so a fast revert is possible when a change goes wrong.
Post-Rollout Verification Workflow
Verify key user journeys, error rates, and latency after a rollout and roll back quickly if any threshold is breached.
Scheduled Release Train Workflow
Run releases on a fixed cadence where features board the next train or wait, keeping the schedule independent of feature anxiety.
Version Tagging and Changelog Workflow
Decide the semantic version bump from commit history, create a signed tag, and generate a changelog grouped by change type.
Resilience Verification Workflow
Verify resilience mechanisms (timeouts, retries, circuit breakers, fallbacks) by injecting the faults they exist for, on a schedule, in production-like conditions.
Review Checklist Enforcement Workflow
Encode the checklist that reviewers repeat into automation where possible and structured prompts where not, keeping humans for judgment.
Review Mentorship Pairing Workflow
Pair junior reviewers with seniors on real reviews, calibrate with shared rubrics, and graduate reviewers by demonstrated finding quality.
Review Quality Feedback Workflow
Give reviewers feedback on their reviews using escaped-defect evidence: what a second look would have caught, delivered as learning not blame.
Rollback Decision Workflow for Bad Deploys
Define rollback triggers and decision authority in advance, execute rollback as a first-class action, and learn forward-fix versus undo per signal.
Secret Rotation Compliance Audit Workflow
Verify every secret class rotates within its policy window, detect stale credentials mechanically, and drive exceptions to zero or documented expiry.
Data Schema Evolution Governance Workflow
Evolve event and table schemas through compatibility classes, consumer-aware reviews, and dual-write transition windows instead of breaking swaps.
Access Certification Workflow
Run periodic access reviews where owners confirm or revoke permissions so stale entitlements do not accumulate.
Attack Surface Mapping Workflow
Enumerate externally reachable services and entry points so exposure can be reduced deliberately rather than discovered by attackers.
Breach Notification Workflow
Assemble facts, assess regulatory obligations, and notify affected parties within required timelines.
Cloud Misconfiguration Scan Workflow
Continuously scan cloud accounts for risky configurations and remediate high-impact findings by exposure.
Dependency Vulnerability Response Workflow
Triage a new dependency advisory, assess reachability, and patch or mitigate within the agreed time window.
Least-Privilege Review Workflow
Review IAM policies and roles to remove wildcard permissions and confirm each principal has only what it uses.