risk-management-template/scripts/setup-boards-gitlab.sh at main · forschungsgruppe-digital-health/risk-management-template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
#!/usr/bin/env bash
# GitLab twin of setup-project-board.sh / setup-harm-risk-board.sh — configures the
# project's issue board with LABEL LISTS for both registers. IDEMPOTENT: existing
# lists are skipped.
#
# This adds the lifecycle label lists to the project's DEFAULT board (delivery-risk +
# harm-risk side by side; Open/Closed columns are built in). Multiple PROJECT boards are
# available on Free (since GitLab 12.1), so you can instead create separate "Risk
# Register" and "Harm Risk File" boards and move the harm-risk:: lists there — the lists
# below are the recipe either way. (Only GROUP boards are capped at one on Free.)
#
# Usage: scripts/setup-boards-gitlab.sh <group/project>
# Needs: glab authenticated; jq. Run setup-labels-gitlab.sh (both label files) FIRST.

set -euo pipefail

PROJECT="${1:?usage: setup-boards-gitlab.sh <group/project>}"
ENC="$(printf '%s' "$PROJECT" | sed 's|/|%2F|g')"

command -v jq >/dev/null || { echo "jq is required" >&2; exit 1; }

BOARD_ID="$(glab api "projects/$ENC/boards" | jq -r '.[0].id')"
[ -n "$BOARD_ID" ] && [ "$BOARD_ID" != "null" ] || { echo "no issue board found (enable Issues for the project)" >&2; exit 1; }
echo "Default board: $BOARD_ID"

existing_label_ids="$(glab api "projects/$ENC/boards/$BOARD_ID/lists" | jq -r '.[].label.id')"

add_list() { # scoped label name, in board-column order
  local label="$1"
  local label_id
  label_id="$(glab api "projects/$ENC/labels?search=$(printf '%s' "$label" | sed 's/:/%3A/g')&per_page=100" \
    | jq -r --arg n "$label" '.[] | select(.name == $n) | .id' | head -1)"
  if [ -z "$label_id" ]; then
    echo "skip (label missing — run setup-labels-gitlab.sh first): $label"
    return
  fi
  if grep -Fxq "$label_id" <<<"$existing_label_ids"; then
    echo "skip list (exists): $label"
  else
    glab api -X POST "projects/$ENC/boards/$BOARD_ID/lists" -f "label_id=$label_id" >/dev/null
    echo "created list:       $label"
  fi
}

# Delivery-risk lifecycle (docs/RISK_MANAGEMENT.md §5) — Closed column covers risk::closed
add_list "risk::open"
add_list "risk::mitigated"
add_list "risk::accepted"
# Harm-risk lifecycle (docs/HARM_RISK.md §7)
add_list "harm-risk::open"
add_list "harm-risk::controlled"
add_list "harm-risk::residual-accepted"

cat <<'EOF'

Lists done. Working views (filter the board or the issue list):
  - Severity table:      filter label risk-sev::critical / risk-sev::high / …
  - Matrix walk (§7):    board as-is, sorted by weight (= Score, set via /weight at triage)
  - Residual audit:      filter label harm-risk::residual-accepted
Split option (Free too): create a second project board ("Harm Risk File") and move the
harm-risk:: lists there — multiple project boards are available on Free.
EOF