DORA PBI Risk Assessment

Azure DevOps extension for DORA risk assessment and evidence tracking on Product Backlog Items.

Historical hot-reload template notes are preserved in README.old.md.

Extension surfaces

The extension contributes:

1. A project admin hub for checking and provisioning DORA PBI fields.
2. A Product Backlog Item form group for DORA evidence guidance.
3. A PBI field control for DORA no-risk assessment fields.

Local development

Prerequisites

• Node.js v20.19 or later
• mkcert — install once with winget install FiloSottile.mkcert on Windows or brew install mkcert on macOS.

First-time setup

npm install
mkcert -install
npm run init-ssl

Start the dev server

npm run start:dev

The dev server runs at https://localhost:3000 and uses certificates generated by npm run init-ssl.

Publish the dev extension

Create a local .env file and set a Marketplace publish PAT:

cp .env.example .env

Set TFX_ACCOUNT_TOKEN in .env to an Azure DevOps PAT with Marketplace (Publish) scope. The .env file is ignored by git.

Publish the dev extension:

npm run publish:dev

After publishing, install the extension in the Azure DevOps organization. The dev extension loads resources from the running local dev server.

Build and test

npm test
npm run compile -- --no-stats
npm run package:dev