Introduction

This handbook outlines the software development life cycle (SDLC) methodology used at Sourcegraph. It serves as a reference guide for all team members involved in the software development process. Our SDLC methodology is designed to ensure effective planning, execution, and delivery of software projects while maintaining transparency and accountability.

Overview

At Sourcegraph, we utilize a structured approach to software development. Our SDLC methodology is primarily driven by GitHub issues, which act as the central repository for tracking and managing changes to our software applications. This methodology includes the following key components:

  1. Roadmap Items: We maintain a roadmap tracker to list objectives for each quarter, with individual issues detailing these objectives. Each issue is tagged with ownership information, including the owning organization, team, and assignees responsible for updates.
  2. Tracking Issues: Tracking issues are used to capture planned and ongoing work related to milestones, projects, RFCs (Request For Comments), goals, and more. They serve as a planning tool, facilitate progress check-ins, and aid in stakeholder communication.
  3. Standard Issues: Standard issues represent tasks, bugs, or exploratory work owned by specific teams, indicated by labels such as team/NAME. Teams have flexibility in defining the content and labels for standard issues.
  4. Additional Artifacts: In addition to GitHub issues, we use PRDs to communicate product plans and RFCs to discuss specific issues and make decisions.

Workflow

Our software development process follows a structured workflow:

Design Phase

The design phase involves defining the solution to a problem. Detailed design processes are described in our Design process.

Product Lifecycle Labels

We use labels to communicate the quality and support level of our products and features to our customers. These labels are assigned subjectively but not arbitrarily, following these guidelines:

Verification and Testing

The testing phase ensures that the solution meets the specified product requirements for the feature. Automated vulnerability scanning and SAST (Static Application Security Testing) are integrated into our CI/CD pipeline to assess security. Features may initially be behind feature flags for testing and continuous releasability.