Advanced-Security-Enforcer
What this repository does
This code is for an active GitHub Action written in Python to check (on a schedule) for new repositories created in the last 24 hours and open pull requests in the new repositories to enable GitHub advanced security code scanning.
Support
If you need support using this project or have questions about it, please open up an issue in this repository. Requests made directly to GitHub staff or support team will be redirected here to open an issue. GitHub SLA's and support/services contracts do not apply to this repository.
Example workflow
name: Enforce advanced security scanning
on:
repository_dispatch:
schedule:
- cron: '00 5 * * *'
jobs:
build:
name: Enforce advanced security scanning
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/[email protected]
- name: Run enforcer tool
uses: github/[email protected]
env:
GH_ACTOR: ${{ secrets.GH_ACTOR }}
GH_TOKEN: ${{ secrets.GH_TOKEN }}
ORGANIZATION: ${{ secrets.ORGANIZATION }}
PR_BODY: your text goes here
- Be sure to fill out the
envvalues above with your information. More info on creating secrets can be found here. - Your GitHub token will need to have read/write access to all the repos in the organization
How it does this
- A CRON job on GitHub actions triggers a nightly run of this script
- The script checks for new repositories by storing the known repositories to a file
- It then iterates over new repositories and opens a pull request for the codeql.yml file stored in this repository
Contributions
We would
Instructions to run locally
- Clone the repository
- Create a personal access token with read only permissions
- Copy the
.env-examplefile to.env - Edit the
.envfile by adding your Personal Access Token to it and the desired organization - Install dependencies
pip install -r requirements.txt - Run the code
python3 enforcer.py - Note the log output for details on any pull requests that were opened
- After running locally this will have changed your git config user.name and user.email so those should be reset for this repository
35 Dec 25, 2022
206 Dec 31, 2022
368 Jan 02, 2023
31 Nov 22, 2022
133 Dec 18, 2022
1 Nov 12, 2021
14 Aug 17, 2022
12 Nov 22, 2022
![Trewis [work] Scotch](https://avatars.githubusercontent.com/u/92666826?v=4&s=60)
4 Sep 23, 2022
4.3k Jan 05, 2023
355 Aug 03, 2022
2 Oct 29, 2022
9 Jun 05, 2022
6 Dec 08, 2022
153 Nov 09, 2022
1 Feb 12, 2022
48 Dec 19, 2022
11 Dec 06, 2022
101 Jan 04, 2023
194 Jan 01, 2023