Contributing to Azure Bootstrap Library¶

Thank you for contributing to the Azure Bootstrap Library! This document provides guidelines and standards for contributing to this project.

Table of Contents¶

Code of Conduct
Getting Started
Git Workflow
Quality Standards
Development Process
Pull Request Process
Release Process

Code of Conduct¶

Our Standards¶

Be Respectful: Treat all contributors with respect and professionalism
Be Collaborative: Work together to improve the library
Be Constructive: Provide helpful feedback and suggestions
Be Responsible: Take ownership of your contributions

Scope¶

This library is used across 17+ production Azure Functions applications. Changes impact multiple teams and projects, so quality and reliability are paramount.

Getting Started¶

Prerequisites¶

Python 3.11 or higher
Git
GitHub account
Familiarity with Azure Functions, App Configuration, and Key Vault

Setup Development Environment¶

# Clone the repository
git clone https://github.com/TheViziusGroup/azure-bootstrap
cd azure-bootstrap

# Create virtual environment
python -m venv .venv

# Activate virtual environment
# Windows:
.venv\Scripts\activate
# Linux/Mac:
source .venv/bin/activate

# Install in editable mode with all dependencies
pip install -e ".[dev,test,all,docs]"

# Verify setup
pytest

# Verify the documentation site builds (optional, but CI gates on it)
mkdocs build --strict

Git Workflow¶

We use Gitflow with the following branch structure:

Branch Structure¶

main (protected)
├── develop (protected)
    ├── feature/feature-name
    ├── bugfix/bug-description
    ├── hotfix/critical-fix
    └── release/v1.1.0

Branch Types¶

1. `main` Branch (Production)¶

Purpose: Production-ready code only
Protection: Direct commits disabled, requires PR approval
CI/CD: Triggers automatic publish to PyPI, and deploys the documentation site to GitHub Pages
Tags: All releases tagged here (e.g., v1.0.0)

Rules: - ✅ Only merge from develop or hotfix/* - ✅ Must pass all tests and quality checks - ✅ Requires 2 approvals - ❌ No direct commits - ❌ No force push

2. `develop` Branch (Development)¶

Purpose: Integration branch for features
Protection: Requires PR approval, runs tests
CI/CD: Runs tests and publishes a timestamped dev build (3.0.0.devYYYYMMDDHHMMSS) to TestPyPI — never to PyPI
Merge From: feature/*, bugfix/*, release/*

Rules: - ✅ Merge features here first - ✅ Must pass all tests - ✅ Requires 1 approval - ❌ No direct commits to develop - ❌ No force push

3. `feature/*` Branches¶

Purpose: New features and enhancements
Naming: feature/short-description (e.g., feature/add-feature-flags)
Base: Branch from develop
Merge To: develop via pull request

Lifecycle:

# Create feature branch
git checkout develop
git pull origin develop
git checkout -b feature/add-feature-flags

# Make changes, commit often
git add .
git commit -m "feat: add feature flag support"

# Push and create PR
git push origin feature/add-feature-flags
# Create PR: feature/add-feature-flags → develop

4. `bugfix/*` Branches¶

Purpose: Non-critical bug fixes
Naming: bugfix/short-description (e.g., bugfix/fix-config-loading)
Base: Branch from develop
Merge To: develop via pull request

Lifecycle:

# Create bugfix branch
git checkout develop
git pull origin develop
git checkout -b bugfix/fix-config-loading

# Fix bug, add test
git add .
git commit -m "fix: resolve config loading race condition"

# Push and create PR
git push origin bugfix/fix-config-loading
# Create PR: bugfix/fix-config-loading → develop

5. `hotfix/*` Branches¶

Purpose: Critical production fixes
Naming: hotfix/critical-issue (e.g., hotfix/auth-failure)
Base: Branch from main
Merge To: BOTH main AND develop

Lifecycle:

# Create hotfix branch
git checkout main
git pull origin main
git checkout -b hotfix/auth-failure

# Fix critical issue
git add .
git commit -m "fix: resolve authentication failure in production"

# Merge to main first
git checkout main
git merge hotfix/auth-failure
git tag v1.0.0
git push origin main --tags

# Then merge to develop
git checkout develop
git merge hotfix/auth-failure
git push origin develop

# Delete hotfix branch
git branch -d hotfix/auth-failure
git push origin --delete hotfix/auth-failure

6. `release/*` Branches¶

Purpose: Prepare new version for release
Naming: release/v1.1.0
Base: Branch from develop
Merge To: main and back to develop

Lifecycle:

# Create release branch
git checkout develop
git pull origin develop
git checkout -b release/v1.1.0

# Update version numbers
# - pyproject.toml: version = "1.1.0"
# - azure_bootstrap/__init__.py: __version__ = "1.1.0"
# - CLAUDE.md Version History: Add release notes

git add .
git commit -m "chore: bump version to 1.1.0"

# Merge to main
git checkout main
git merge release/v1.1.0
git tag v1.1.0
git push origin main --tags

# Merge back to develop
git checkout develop
git merge release/v1.1.0
git push origin develop

# Delete release branch
git branch -d release/v1.1.0

Commit Message Convention¶

We follow Conventional Commits specification:

<type>(<scope>): <subject>

<body>

<footer>

Commit Types¶

feat: New feature
fix: Bug fix
docs: Documentation changes
style: Code style changes (formatting, no logic change)
refactor: Code refactoring (no feature change)
perf: Performance improvements
test: Adding or updating tests
build: Build system changes
ci: CI/CD pipeline changes
chore: Other changes (dependencies, config)

Examples¶

# Feature
git commit -m "feat(config): add feature flag support for config loading"

# Bug fix
git commit -m "fix(telemetry): resolve race condition in App Insights initialization"

# Documentation
git commit -m "docs: update installation instructions"

# Breaking change
git commit -m "feat(bootstrap)!: change initialize_application signature

BREAKING CHANGE: initialize_application now requires explicit secrets_repository parameter"

Quality Standards¶

1. Code Quality¶

Style & Formatting¶

Formatter: Black (line length: 100)
Linter: Ruff
Type Hints: Required for all public APIs

# Format code
black azure_bootstrap/ test/

# Lint code
ruff check azure_bootstrap/ test/

# Type check
mypy azure_bootstrap/

Code Standards¶

✅ Use descriptive variable names
✅ Write docstrings for all public functions/classes
✅ Keep functions focused and small (< 50 lines)
✅ Use type hints for function signatures
✅ Follow PEP 8 style guide
❌ No magic numbers (use constants)
❌ No commented-out code
❌ No print statements (use logging)

2. Testing Requirements¶

Coverage Requirements¶

Minimum: 85% overall coverage (raised from 80% at v2.0.0)
Current: 87.48%, 469 passing tests
New Code: 90% coverage
Critical Paths: 100% coverage (bootstrap flow, exception classifier, alert dispatcher, magic-byte gate)

# Run tests with coverage
pytest --cov=azure_bootstrap --cov-report=term-missing --cov-report=html

# View HTML report
open htmlcov/index.html

pytest automatically sets AZURE_BOOTSTRAP_ALLOW_RESET=1 via test/conftest.py so the library's gated reset_state() / _reset_* helpers work in tests. Don't set this in production code.

Test Structure¶

class TestFeatureName:
    """Tests for FeatureName functionality."""

    def setup_method(self):
        """Setup before each test."""
        self.original_env = os.environ.copy()

    def teardown_method(self):
        """Cleanup after each test."""
        os.environ.clear()
        os.environ.update(self.original_env)

    def test_specific_behavior(self):
        """Test specific behavior with clear description."""
        # Arrange
        expected = "value"

        # Act
        result = function_under_test()

        # Assert
        assert result == expected

Test Categories¶

Unit Tests: Test individual functions/classes in isolation
Integration Tests: Test component interactions
Mock External Dependencies: Azure services, environment variables

Testing Checklist¶

✅ Test happy path
✅ Test error cases
✅ Test edge cases
✅ Test with mocked Azure services
✅ Test environment variable fallbacks
✅ Test configuration precedence
✅ Verify no side effects

3. Security Standards¶

Security Checklist¶

✅ Never commit secrets or credentials
✅ Use Azure Key Vault for secrets
✅ Validate all user inputs
✅ Use secure defaults
✅ Log security events appropriately
❌ No hardcoded passwords/keys
❌ No sensitive data in logs
❌ No SQL injection vulnerabilities

Dependency Security¶

# Check for known vulnerabilities
pip-audit

# Update dependencies regularly
pip install --upgrade pip setuptools wheel

4. Complexity Standards¶

Cyclomatic Complexity¶

Target: < 10 per function
Maximum: < 15 per function
Tool: Radon or Ruff

# Check complexity
radon cc azure_bootstrap/ -a -nb

Maintainability Index¶

Target: > 20 (good)
Minimum: > 10 (acceptable)

# Check maintainability
radon mi azure_bootstrap/

5. Documentation Standards¶

Required Documentation¶

✅ Docstrings for all public functions/classes
✅ Type hints for all function signatures
✅ README examples for new features
✅ Version History entries in CLAUDE.md for all changes
✅ CLAUDE.md updates for architectural changes
✅ mkdocs build --strict passes (no warnings)

Documentation Site¶

Docstrings are not just for readers of the source — they are rendered into the documentation site, which is assembled at build time from the repo-root markdown plus every package's docstrings. Two consequences for contributors:

A new subpackage must be added to [tool.setuptools] packages in pyproject.toml. That list drives the API-reference navigation as well as what ships in the wheel; omitting it means the package is missing from both.
Edit the repo-root markdown, never a copy under docs/. README.md is the PyPI long description and must stay correct as read on GitHub; docs/gen_pages.py adapts it for the site (rewriting links and translating heading anchors). In particular, do not "fix" the emoji-prefixed anchors in README's table of contents — they are correct for GitHub and are translated automatically.

Build it locally with pip install -e ".[docs,all]" then mkdocs serve.

Docstring Format¶

def initialize_application(secrets_repository: Optional[SecretsRepositoryInterface] = None) -> EnhancedConfigRepository:
    """
    Initialize application bootstrap with configuration and telemetry.

    This function orchestrates the complete bootstrap sequence:
    1. Configure bootstrap logging
    2. Setup telemetry
    3. Load configuration from App Config/Key Vault
    4. Upgrade telemetry if App Insights available
    5. Load all configs to os.environ

    Args:
        secrets_repository: Optional custom secrets repository.
                          If not provided, creates default Key Vault repository.

    Returns:
        EnhancedConfigRepository instance with loaded configuration.

    Raises:
        ConfigurationError: If configuration loading fails critically.

    Example:
        >>> config_repo = initialize_application()
        >>> db_host = os.getenv("DATABASE_HOST")
    """

Git Hooks¶

The repository includes pre-commit and pre-push hooks that enforce code quality standards.

Installation¶

Windows (PowerShell):

powershell -ExecutionPolicy Bypass -File .githooks\install-hooks.ps1

Linux/Mac/Git Bash:

bash .githooks/install-hooks.sh

Manual:

git config core.hooksPath .githooks

What Gets Checked¶

pre-commit (~30-60 seconds)¶

Runs on every git commit: 1. Black - Code formatting (line length 100) 2. isort - Import sorting (Black-compatible) 3. Ruff - Linting (pycodestyle, pyflakes, bugbear, etc.) 4. MyPy - Type checking (with ignore_missing_imports) 5. Bandit - Security vulnerability scanning 6. pip-audit - Dependency security audit (warning only) 7. pytest - Full test suite with 85%+ coverage requirement

pre-push (~60-90 seconds)¶

Runs on every git push: 1. All pre-commit checks 2. Full verbose test suite 3. Package build verification

Quick Fix Commands¶

# Auto-fix formatting and imports
black azure_bootstrap/ test/
isort azure_bootstrap/ test/
ruff check --fix azure_bootstrap/ test/

# Run all checks manually
bash .githooks/pre-commit

Bypassing Hooks¶

Not recommended, but available:

git commit --no-verify   # Skip pre-commit
git push --no-verify     # Skip pre-push

Disabling / Re-enabling Hooks¶

git config core.hooksPath ""          # Disable
git config core.hooksPath .githooks   # Re-enable

Hook Troubleshooting¶

"Virtual environment not found": Run pip install -e ".[dev]"
"Permission denied" (Linux/Mac): Run chmod +x .githooks/pre-commit .githooks/pre-push
Hooks not running: Check git config core.hooksPath outputs .githooks

All tool configurations are in pyproject.toml ([tool.black], [tool.isort], [tool.ruff], [tool.mypy], [tool.bandit], [tool.coverage.report]).

VS Code Setup¶

The .vscode/ directory contains workspace configuration for development.

Configuration Files¶

settings.json - Python testing (pytest), formatting (Black, line length 100), linting (Ruff), coverage gutters, file exclusions
launch.json - Debug configurations: Debug Tests, Debug Current Test File, Debug Tests with Coverage
tasks.json - Quick tasks: Run Tests, Run with Coverage, Format Code, Lint Code, Type Check, Build Package, Clean Artifacts, Full Quality Check
extensions.json - Recommended extensions: Python/Pylance, Black, Ruff, Test Explorer, Coverage Gutters, TOML support

Key Shortcuts¶

F5 - Start debugging (with selected launch config)
Ctrl+Shift+B - Run default build task (Build Package)
Ctrl+Shift+T - Run default test task (Run All Tests)
Ctrl+Shift+P → "Tasks: Run Task" - Access all custom tasks

Coverage Integration¶

After running tests with coverage, install the "Coverage Gutters" extension and click "Watch" in the status bar. Green/red gutters show line coverage in code files.

Note: The virtual environment path is configured as ${workspaceFolder}/.venv/Scripts/python.exe. Update python.defaultInterpreterPath in settings.json if using a different venv location.

Development Process¶

1. Before You Start¶

✅ Check existing issues and PRs
✅ Discuss major changes in advance
✅ Create an issue for tracking
✅ Update your local branches

2. During Development¶

# Keep your branch updated
git checkout develop
git pull origin develop
git checkout feature/your-feature
git merge develop

# Commit often with good messages
git add specific-files  # Not git add .
git commit -m "feat: descriptive message"

# Run tests frequently
pytest

# Check code quality
black azure_bootstrap/ test/
ruff check azure_bootstrap/ test/

3. Before Submitting PR¶

Pre-PR Checklist¶

✅ All tests pass: pytest
✅ Coverage meets requirements: pytest --cov
✅ Code formatted: black .
✅ No lint errors: ruff check .
✅ Type hints added: mypy azure_bootstrap/
✅ Documentation updated
✅ Version History in CLAUDE.md updated
✅ Examples added/updated if needed
✅ Branch up to date with develop

# Run full quality check
black azure_bootstrap/ test/
ruff check azure_bootstrap/ test/
mypy azure_bootstrap/
pytest --cov=azure_bootstrap --cov-report=term-missing

Pull Request Process¶

1. Creating a Pull Request¶

# Push your branch
git push origin feature/your-feature

# Create PR via GitHub CLI
gh pr create \
  --base develop \
  --title "feat: Add feature flag support" \
  --body "Implements feature flags using Azure App Configuration"

2. PR Template¶

## Description
Brief description of changes

## Type of Change
- [ ] Bug fix (non-breaking change)
- [ ] New feature (non-breaking change)
- [ ] Breaking change
- [ ] Documentation update

## Changes Made
- Item 1
- Item 2

## Testing
- [ ] Unit tests added/updated
- [ ] Integration tests added/updated
- [ ] All tests passing
- [ ] Coverage >= 85% (90% for new code)

## Checklist
- [ ] Code follows style guidelines
- [ ] Self-review completed
- [ ] Documentation updated
- [ ] Version History in CLAUDE.md updated
- [ ] No breaking changes (or documented)

3. PR Review Process¶

Reviewer Checklist¶

✅ Code quality and readability
✅ Test coverage and quality
✅ Documentation completeness
✅ No security vulnerabilities
✅ Backwards compatibility
✅ Performance implications

Review Response Time¶

Standard PRs: 2 business days
Hotfixes: 4 hours
Small fixes: 1 business day

4. Addressing Feedback¶

# Make requested changes
git add changed-files
git commit -m "refactor: address PR feedback"

# Push updates
git push origin feature/your-feature

# PR automatically updates

5. Merging¶

Merge Strategy: Squash and merge (for features/bugfixes)
Hotfixes: Regular merge (preserve history)
Release branches: Regular merge

Release Process¶

Version Numbering (Semantic Versioning)¶

Major (X.0.0): Breaking API changes
Minor (0.X.0): New features (backwards compatible)
Patch (0.0.X): Bug fixes

Release Checklist¶

Create Release Branch

git checkout develop
git pull origin develop
git checkout -b release/v1.1.0

Update Version Numbers
pyproject.toml: version = "1.1.0"
azure_bootstrap/__init__.py: __version__ = "1.1.0"

Update Version History in CLAUDE.md

## [1.1.0] - 2025-11-22

### Added
- Feature flag support

### Changed
- Improved error messages

### Fixed
- Configuration race condition

Test Release

pytest
python -m build
pip install dist/azure_bootstrap-1.1.0-py3-none-any.whl

Merge to Main

git checkout main
git merge release/v1.1.0
git tag v1.1.0
git push origin main --tags

Merge Back to Develop

git checkout develop
git merge release/v1.1.0
git push origin develop

Verify Pipeline
Check the GitHub Actions CI/CD Pipeline runs successfully
Verify package published to PyPI
Confirm the Validate Installation job installed the exact new version
Check the Documentation workflow deployed, and that https://theviziusgroup.github.io/azure-bootstrap/ shows the new version's changelog entry
Announce Release
Update documentation
Notify consuming teams
Post release notes

Additional Guidelines¶

Dependencies¶

Adding Dependencies: Justify new dependencies, prefer stdlib
Updating Dependencies: Test thoroughly, update in minor releases only
Security Updates: Patch releases acceptable

Breaking Changes¶

Avoid When Possible: Breaking changes disrupt 17+ projects
Deprecation Period: Deprecate for 1 minor version before removal
Communication: Announce breaking changes in advance
Documentation: Provide migration guide

Performance¶

Benchmark: Measure performance impact of changes
No Degradation: Changes shouldn't slow bootstrap time
Profile: Use profiling tools for optimization

Getting Help¶

Questions?¶

Library overview + extras: README.md
Examples (37 numbered + 3 e2e): examples/README.md
AI-assistant context + version history: CLAUDE.md
Full release surface: CHANGELOG.md
v1 → v2 adoption: MIGRATING-FROM-V1.md
Issues: Create an issue on GitHub
Discussion: Use Teams channel or email team

Reporting Bugs¶

Check if bug already reported
Create detailed bug report with:
Steps to reproduce
Expected vs actual behavior
Environment details
Error messages/logs
Add bug label

Requesting Features¶

Check if feature already requested
Create feature request with:
Use case and benefit
Proposed solution
Alternative solutions considered
Add enhancement label

Thank You!¶

Your contributions help maintain and improve a critical library used across multiple organizations. Thank you for following these guidelines and maintaining high quality standards!

Contributing to Azure Bootstrap Library¶

Table of Contents¶

Code of Conduct¶

Our Standards¶

Scope¶

Getting Started¶

Prerequisites¶

Setup Development Environment¶

Git Workflow¶

Branch Structure¶

Branch Types¶

1. main Branch (Production)¶

2. develop Branch (Development)¶

3. feature/* Branches¶

4. bugfix/* Branches¶

5. hotfix/* Branches¶

6. release/* Branches¶

Commit Message Convention¶

Commit Types¶

Examples¶

Quality Standards¶

1. Code Quality¶

Style & Formatting¶

Code Standards¶

2. Testing Requirements¶

Coverage Requirements¶

Test Structure¶

Test Categories¶

Testing Checklist¶

3. Security Standards¶

Security Checklist¶

Dependency Security¶

4. Complexity Standards¶

Cyclomatic Complexity¶

Maintainability Index¶

5. Documentation Standards¶

Required Documentation¶

Documentation Site¶

Docstring Format¶

Git Hooks¶

Installation¶

What Gets Checked¶

pre-commit (~30-60 seconds)¶

pre-push (~60-90 seconds)¶

Quick Fix Commands¶

Bypassing Hooks¶

Disabling / Re-enabling Hooks¶

Hook Troubleshooting¶

VS Code Setup¶

Configuration Files¶

Key Shortcuts¶

Coverage Integration¶

Development Process¶

1. Before You Start¶

2. During Development¶

3. Before Submitting PR¶

Pre-PR Checklist¶

Pull Request Process¶

1. Creating a Pull Request¶

2. PR Template¶

3. PR Review Process¶

Reviewer Checklist¶

Review Response Time¶

4. Addressing Feedback¶

5. Merging¶

Release Process¶

Version Numbering (Semantic Versioning)¶

Release Checklist¶

Additional Guidelines¶

Dependencies¶

Breaking Changes¶

Performance¶

Getting Help¶

Questions?¶

Reporting Bugs¶

Requesting Features¶

Thank You!¶

1. `main` Branch (Production)¶

2. `develop` Branch (Development)¶

3. `feature/*` Branches¶

4. `bugfix/*` Branches¶

5. `hotfix/*` Branches¶

6. `release/*` Branches¶