GitHub

Workflow

1. Confirm organization constraints (compliance, branch policy, release cadence, risk tolerance).
2. Standardize repository structure and ownership conventions.
3. Define branching, release, and tagging strategy.
4. Enforce pull request quality gates and review governance.
5. Implement CI/CD workflows with deterministic checks.
6. Enable dependency, secret, and code security protections.
7. Configure access control, audit visibility, and incident response paths.
8. Track developer-experience metrics and iterate on process.

Preflight (Ask / Check First)

• Repository model: mono-repo, multi-repo, or hybrid.
• Required checks for merge and release readiness.
• Branch model (trunk-based, GitHub Flow, release branches).
• Compliance requirements (signed commits, review count, audit retention).
• Automation maturity (Actions runners, caching, artifact strategy).
• Existing pain points: PR cycle time, flaky CI, security alert debt.