u/Ashwith_Garlapati

Honest question — we have a strong infra team, great uptime, fast incident resolution. But every single runbook is either 2 years out of date or just doesn't exist.

The engineers who fix things are the same ones who "never have time" to document what they did. And honestly I get it — after a 2am incident nobody wants to write docs.

The knowledge just lives in Slack threads that are impossible to search, or worse, in one person's head.

Curious how other teams actually deal with this. Have you found anything that works, or is this just a universal DevOps tax everyone quietly accepts?

We manage 30+ repos and SHA-pinning our GitHub Actions for security but Dependabot can't track SHA hashes. Currently updating them manually which is a nightmare. How are you all handling this? Is there a tool that automates SHA updates and opens PRs automatically? Would you pay for something that solved this completely?