Workflows
Repeatable engineering workflows with explicit verification.
364 published
Page 9 of 11
Security Log Integrity Verification Workflow
Verify that security logs are complete and tamper-evident so investigations can trust the record.
Security Patch SLA Tracking Workflow
Track vulnerability patches against severity-based SLAs so high-risk findings are remediated within the agreed window.
Penetration Test Remediation Workflow
Triage penetration test findings, fix exploitable issues first, and retest to confirm the fixes hold.
Third-Party Risk Assessment Workflow
Assess a vendor for security and data-handling risk before onboarding, with conditions and periodic review.
Semantic Version Automation Release Workflow
Derive versions from conventional commit messages, generate changelogs automatically, and publish artifacts only from tagged green builds.
Service Outage Triage Workflow
Establish severity from user impact, split diagnosis from communication, and drive restoration through hypothesis testing with a time box.
Slow Query Elimination Workflow
Rank slow queries by total time (frequency times duration), fix the top offenders with index or rewrite, and verify against production load shape.
Staging Environment Data Safety Workflow
Keep production data out of staging by default, classify what may cross, and anonymize the rest with verified, scheduled refreshes.
Test Data Management Workflow
Centralize test data as versioned fixtures and factories, isolate per-test data scopes, and refresh production-shaped data on a schedule.
Test Environment Parity Workflow
Track configuration drift between staging and production, eliminate class differences systematically, and measure parity by incident origin.
Test Code Review Standards Workflow
Apply review standards to tests specifically: assertion strength, isolation, determinism, and readability, with a checklist and anti-pattern list.
Accessibility Regression Workflow
Add automated accessibility checks per pull request with a curated rule set and manual checks for the rest.
Contract Test Adoption Workflow
Introduce consumer-driven contracts so service changes are validated against real consumer expectations.
Coverage Delta Gate Workflow
Gate merges on coverage of changed lines rather than a global percentage so new code is tested without blocking on legacy debt.
Critical Path Test Prioritization Workflow
Prioritize tests that cover the highest-value user journeys so limited testing time protects what matters.
Flaky Test Quarantine and Escalation Workflow
Quarantine flaky tests out of the blocking path while tracking them to a fix with an owner and deadline.
Local-to-CI Parity Workflow
Align local and CI test execution so a test passing locally also passes in CI, eliminating environment-only failures.
Mutation Score Improvement Workflow
Use mutation testing to find assertions that do not actually detect bugs and strengthen them where it matters.
Performance Test Strategy Workflow
Define load, stress, and soak tests with clear pass criteria so performance regressions are caught before release.
Test Pyramid Balancing Workflow
Rebalance a test suite toward fast unit tests with a small, targeted set of integration and end-to-end tests.
Test Data Refresh Workflow
Refresh realistic but anonymised test data on a schedule so tests do not drift from production shape.
Third-Party Dependency Outage Workflow
Prove the outage is external, degrade dependent features gracefully, and keep a decision clock on whether to wait or to invoke the backup path.
Feature Threat Modeling Review Workflow
Model the abuse cases for a new feature before building it: assets, entry points, trust boundaries, and the mitigations the design must include.
Toolchain Version Unification Workflow
Discover the versions actually in use, converge on one supported line, and pin it everywhere from CI to editors via a single version source.
Unused Resource Cleanup Workflow
Identify resources with no traffic or reference, verify dormancy with stakeholders, and delete with recovery windows rather than accumulating forever.
Vendor Integration Security Review Workflow
Review new third-party integrations for data exposure, credential scope, and failure blast radius before connection, with renewal checkpoints.
Warehouse Cost Optimization Workflow
Attribute warehouse spend to queries and workloads, eliminate the expensive low-value tail, and set per-team budgets with visible dashboards.
Incident War-Room Communication Workflow
Run incident communication on separate channels for work, decisions, and stakeholder updates, with a scribe recording the timeline as it happens.
Web Performance Audit and Fix Workflow
Audit Core Web Vitals from field data first, attribute each failing metric to its cause, fix by impact rank, and verify in both lab and field.
Audit and Close Accidental Public Storage Buckets
Inventory storage buckets, test anonymous access, separate intentional public assets from accidental exposure, and close the gap with Block Public Access.
Decommission a Service Without Breaking Its Dependents
Retire an internal service by proving who still calls it, serving explicit 410 responses, revoking access, and deleting data only after the retention window.
Enforce Resource Tagging Across a Cloud Account
Agree a four-tag baseline, measure coverage, backfill existing resources, then block new untagged resources with a policy while an exception process stays open.
Fail Over Authoritative DNS to a Standby Provider
Keep a synced standby zone, lower TTLs ahead of time, switch registrar name servers during an outage, and verify answers from multiple public resolvers.
Migrate a Workload to Another Cloud Region Safely
Relocate a workload and its data to a second cloud region with a parallel stack, replicated data, weighted DNS cutover and a rollback that keeps the old region warm.
Purge CDN Cache Without Causing an Origin Stampede
Invalidate changed assets at the edge with tags, warm the origin first, and confirm the new release is served from every POP without an origin stampede.
Renew TLS Certificates Before They Expire
Inventory every TLS endpoint, renew through ACME or your certificate authority, deploy the full chain, and verify dates and trust from outside before expiry.