Risk Center

The Risk Center (CI/CD > Risk Center) shows how Bytebase evaluates the risk level of database changes.

Bytebase automatically assigns one of three risk levels — High, Moderate, or Low — to each database change. Currently, the risk level is determined purely based on the SQL statement types, with more sophisticated analysis planned.

Show Current Risk Level Assignment

Risk Level	Statement Types
High	DROP_DATABASE, DROP_TABLE, DROP_SCHEMA, TRUNCATE
Moderate	DELETE, UPDATE, ALTER_TABLE, DROP_INDEX
Low	Everything else

If a change contains multiple statements, Bytebase takes the highest risk level found across all statements.

Usage

Custom Approval

Custom Approval is mostly used by UI workflow. If you use GitOps workflow, we recommend you to configure approval in the PR/MR process.

Risk levels are available as the risk_level variable when defining custom approval flows. You can use conditions like:

risk_level == "HIGH"
risk_level == "MODERATE" && resource.environment_id == "prod"

SQL Review

SQL review returns the associated risk level for the checked SQL statement. Bytebase GitHub action can also surface the risk level under a PR.