OWASP / OWASP/OpenCRE

Continuity runbook: Staging bootstrap

Open
#1,070 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

existing-maintainers-only
Dominant language
Python
Stars
180
Forks
137
Avg merge
3d 23h
Merged PRs (30d)
21

Description

Task

A second maintainer can bootstrap or refresh Heroku staging with scripts/setup-heroku-staging.sh without ever targeting opencreorg as STAGING_APP.

Success criteria

  • Lists required env: PROD_APP, STAGING_APP, LOCAL_SQLITE_DB
  • Knows --embeddings / --gap_analysis vs full sync, and --delete needs DESTROY_STAGING
  • Runbook docs/continuity/runbooks/staging-bootstrap.md (skill continuity-staging-bootstrap)
  • No env files pasted into GitHub

Context

  • Deploy workflow: .github/workflows/deploy-staging.ymltmp-cre from branch staging
  • Script copies prod config to staging — treat output as secret

Constraints

  • existing maintainers only
  • Do not run teardown or full bootstrap in the first drill without named apps and paths
  • Never STAGING_APP=opencreorg

Agent prompt

See Agent prompt in docs/continuity/runbooks/staging-bootstrap.md.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read scripts/setup-heroku-staging.sh and .github/workflows/deploy-staging.yml, then create docs/continuity/runbooks/staging-bootstrap.md. Verify the runbook covers the listed environment variables, sync modes, deletion safeguard, secret-handling rule, named-app/path requirements, and the prohibition on STAGING_APP=opencreorg; do not perform teardown or a full bootstrap.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, shell
Domain
devops, documentation
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.