Skip to content

feat: add incident response prompt template#386

Merged
agreaves-ms merged 6 commits intomicrosoft:mainfrom
littleKitchen:feat/incident-response-prompt
Feb 6, 2026
Merged

feat: add incident response prompt template#386
agreaves-ms merged 6 commits intomicrosoft:mainfrom
littleKitchen:feat/incident-response-prompt

Conversation

@littleKitchen
Copy link
Contributor

Fixes #319

Summary

Add incident response workflow prompt for Azure operations scenarios, as outlined in the roadmap.

Changes

  • Created .github/prompts/incident-response.prompt.md with structured prompts for:

    • Initial Triage - Rapid assessment of incident scope and severity
    • Diagnostic Queries - KQL patterns for Azure Monitor, Log Analytics
    • Impact Analysis - Affected resources, services, and users
    • Mitigation Actions - Common remediation patterns
    • RCA Preparation - Root cause analysis documentation support
  • Updated .github/prompts/README.md to include the new prompt

Acceptance Criteria

  • File created at .github/prompts/incident-response.prompt.md
  • Frontmatter follows repository conventions
  • Prompt covers triage, diagnostics, mitigation, and RCA phases
  • Includes Azure-specific patterns (KQL, resource health, Activity Log)
  • References Azure Monitor and Log Analytics documentation

Testing

  • ✅ Markdown lint: 0 errors
  • ✅ Spell check: 0 errors
  • ✅ Frontmatter validates against schema

Fixes microsoft#319

Add incident response workflow prompt for Azure operations scenarios with:
- Initial triage and severity assessment
- Diagnostic KQL queries for Azure Monitor and Log Analytics
- Mitigation patterns and communication templates
- Root cause analysis documentation structure

Includes Azure-specific patterns for resource health, Activity Log,
Application Insights, and service health monitoring.
@littleKitchen littleKitchen requested a review from a team as a code owner February 1, 2026 00:40
@liyuuKitchen
Copy link

thanks for the review, will update it

littleKitchen and others added 2 commits February 2, 2026 16:15
- Replace hardcoded severity table with discovery instructions
- Remove hardcoded KQL queries, guide dynamic query building via Azure MCP
- Replace hardcoded mitigation patterns with discovery from docs/runbooks
- Extract RCA template to docs/templates/rca-template.md (Google SRE format)
- Replace static Azure docs links with microsoft-docs MCP reference
- Remove escalation criteria section

Addresses review comments from @agreaves-ms
@codecov-commenter
Copy link

codecov-commenter commented Feb 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.19%. Comparing base (25b34de) to head (e58b724).

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #386      +/-   ##
==========================================
- Coverage   76.22%   76.19%   -0.03%     
==========================================
  Files          20       20              
  Lines        3503     3503              
==========================================
- Hits         2670     2669       -1     
- Misses        833      834       +1     
Flag Coverage Δ
pester 76.19% <ø> (-0.03%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

littleKitchen and others added 2 commits February 4, 2026 09:49
- Change nested list dashes to asterisks in incident-response.prompt.md (MD004)
- Add 'MMDD' to cspell dictionary for rca-template.md
- Format tables with markdown-table-formatter
- Add frontmatter and Copilot footer to rca-template.md
- Remove duplicate H1 heading (title in frontmatter)
@WilliamBerryiii WilliamBerryiii added this to the v2.2.0 milestone Feb 5, 2026
@agreaves-ms agreaves-ms merged commit 0adb35c into microsoft:main Feb 6, 2026
16 checks passed
WilliamBerryiii pushed a commit that referenced this pull request Feb 6, 2026
🤖 I have created a release *beep* *boop*
---


##
[2.2.0](hve-core-v2.1.0...hve-core-v2.2.0)
(2026-02-06)


### ✨ Features

* add incident response prompt template
([#386](#386))
([0adb35c](0adb35c))
* add Skills and VS Code Extension categories to issue/PR templates
([#410](#410))
([108e160](108e160))
* **hve-core-guidance-instructions:** update guidance artifacts and MCP
config ([#402](#402))
([25b34de](25b34de))
* **security:** add action version consistency validation
([#423](#423))
([f3bb787](f3bb787))
* **workflows:** add copyright header validation CI workflow
([#429](#429))
([c53de22](c53de22))


### 🐛 Bug Fixes

* **docs:** add missing Copilot footers, consolidate validation
exclusions ([#419](#419))
([e40f960](e40f960))
* **scripts:** include CIHelpers module + packaging script testability
([#420](#420))
([da26edf](da26edf))


### ♻️ Refactoring

* migrate inline CI code to CIHelpers module
([#393](#393))
([adf6a5f](adf6a5f))


### 🔧 Maintenance

* **templates:** align issue templates with conventional commit format
([#427](#427))
([2d28702](2d28702))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: hve-core-release-please[bot] <254602402+hve-core-release-please[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: add incident response prompt template

5 participants