OWASP / OWASP/OpenCRE

Continuity runbook: Production health

Open
#1,064 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

existing-maintainers-only
Dominant language
Python
Stars
180
Forks
137
Avg merge
3d 23h
Merged PRs (30d)
21

Description

Task

A second maintainer can tell whether production is healthy using HTTP-only checks: gap-analysis cache, chatbot shell, REST lists — without computing GA on Heroku or sending paid chat prompts.

Success criteria

  • make monitor-ga-health-prod, make verify-ga-complete-prod, make monitor-chatbot-health-prod run; exit codes recorded
  • /rest/v1/standards and /rest/v1/ga_standards non-empty
  • JSON written under tmp/ (not committed)
  • Failures name the next continuity runbook (restart / rollback / gap-analysis-ops / catalog)
  • Runbook docs/continuity/runbooks/production-health.md (skill continuity-production-health)

Context

  • Same checks as the weekly prompt in AGENTS.md
  • Unauthenticated /completion must be 401, not 404/500/503
  • Prod GA is cache-only; miss → 404, never compute on opencreorg

Constraints

  • existing maintainers only
  • No authenticated chatbot prompts
  • No heroku config dumps

Agent prompt

See Agent prompt in docs/continuity/runbooks/production-health.md.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read AGENTS.md and docs/continuity/runbooks/production-health.md, including the Agent prompt. Run the listed make targets and HTTP checks without authenticated chatbot prompts or Heroku config dumps, recording exit codes and writing JSON under tmp/. Done means the runbook exists, both REST lists are non-empty, /completion returns 401 unauthenticated, and failures name the next continuity runbook.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
devops, documentation, observability-sre
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.