OpenCTI-Platform

Use when: putting a new or existing feature behind a feature flag (dev feature) in OpenCTI, adding attributes, GraphQL endpoints, managers or UI that must be hidden until a flag is enabled, or removing a feature flag

Use when: scaffolding a new backend entity type, domain module, GraphQL schema, resolvers, or STIX converter in opencti-graphql

Use when: scaffolding a new GitHub Actions CI/CD workflow, adding automation for tests, builds, releases, or security scans

Use when: creating a new ElasticSearch database migration file, adding or transforming data at deploy time

Use when: scaffolding a creation form drawer with Formik validation and a Relay mutation for a new entity

Use when: adding a new playbook automation component, implementing a PlaybookComponent interface, or registering a new playbook step

Use when: creating a new Relay-connected React component, defining a GraphQL fragment, or wiring a component to a query

Code review checklist and conventions for Splunk Technology Add-ons (TAs) and Splunk Enterprise apps in this repo — Splunk UCC framework patterns, modular alert actions, proxy/SSL handling, AppInspect/Cloud vetting constraints, and dependency-shape mismatches.