Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: GitHub Org Audit Tool

github.com

Post reply on HN
Print view View original

21–24 of 24 posts

Re: Show HN: GitHub Org Audit Tool

#21

Post by LukeShu »

megamorf wrote: post #18
LukeShu wrote: post #14

Earlier quoted context omitted.

IME, the problem with the GraphQL API is that it does a poor job of indicating where permissions came from, and you have to fall back to bad heuristics. For example, if team="company" has "READ", and team="company/dev" has "WRITE", and Bob is in team="company/dev" but not team="company", then Bob will have both "READ" and "WRITE" because of his membership in team="company/dev"; the API will give no indication that th…

That's actually incorrect. Check out this query: https://gist.github.com/megamorf/9c105ac9cc13a93b5449a7b683d... I have added two output examples. One for when you only want to find users that have been directly assigned to a repo (DIRECT) and one that shows how their roles and team memberships decide what permissions they have on a repo.

If they've fixed it in the last 5 months, then hooray.

Re: Show HN: GitHub Org Audit Tool

#22

Post by nathanwallace »

FBISurveillance wrote: post #13
nathanwallace wrote: post #9

Earlier quoted context omitted.

Thanks atonse for the shout out! Steampipe [1] is an open source CLI to query your cloud resources (e.g. GitHub, AWS, Splunk, etc) with SQL. The GitHub plugin has 44 tables to query [2]. The "GitHub Sherlock" mod includes 34 automated controls for organization, repo and issue best practices. The "GitHub Compliance" mod has 35 automated controls for supply chain security. Mods are written in HCL + SQL. [3] 1 - https:/…

Quick feedback: Just noticed that you can get rid of one setup step at https://steampipe.io/downloads - you don't need to brew tap & brew install, you can just use one command: `brew install turbot/tap/steampipe` without doing `brew tap` first.

Good idea - thanks, love the feedback :-)

Re: Show HN: GitHub Org Audit Tool

#24

Post by pquerna »

kataklasm wrote: post #15
pquerna wrote: post #12

Earlier quoted context omitted.

i've also been working on a similar tool -- working towards open sourcing it too. would you be interested in taking a look? paul.quenra at conductorone com

I believe you might have a typo in your mail? Just making sure you're not missing out on something useful :)

thank you -- can't edit it anymore, but paul.querna (spelled my own name wrong)
Post reply on HN