Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable secret scanning for all repos #5

Merged
merged 1 commit into from
Aug 24, 2023
Merged

Conversation

ghost
Copy link

@ghost ghost commented Aug 24, 2023

We (security team at EF: https://www.eclipse.org/security/team/) would like to enable secret scanning for all of the repos of eclipse projects hosted on GitHub. For that purpose we suggest changes to the configuration that the project leads can review.

@ghost ghost requested review from a team as code owners August 24, 2023 12:50
@ghost ghost requested a review from pcdavid August 24, 2023 12:51
@github-actions
Copy link

Diff for af10365:
Printing local diff for configuration at '/home/runner/work/.eclipsefdn/.eclipsefdn/otterdog-configs/otterdog.json'

Actions are indicated with the following symbols:
+   create
!   modify
!   forced update
-   delete

Organization eclipse-sirius[id=eclipse-sirius]
  there have been 2 validation infos, enable verbose output with '-v' to to display them.

  
!   repository[name="sirius-emf-json"] {
!     secret_scanning                                          = "disabled" -> "enabled"
!     secret_scanning_push_protection                          = "disabled" -> "enabled"
!   }

  
!   repository[name="sirius-specs"] {
!     secret_scanning                                          = "disabled" -> "enabled"
!     secret_scanning_push_protection                          = "disabled" -> "enabled"
!   }

  
!   repository[name="sirius-web"] {
!     secret_scanning                                          = "disabled" -> "enabled"
!     secret_scanning_push_protection                          = "disabled" -> "enabled"
!   }

  
!   repository[name="sirius-website"] {
!     secret_scanning                                          = "disabled" -> "enabled"
!     secret_scanning_push_protection                          = "disabled" -> "enabled"
!   }
  
  Plan: 0 to add, 8 to change, 0 to delete.
Showing diff to a canonical version of the configuration at '/home/runner/work/.eclipsefdn/.eclipsefdn/otterdog-configs/otterdog.json'

Organization eclipse-sirius[id=eclipse-sirius]
--- original
+++ canonical
@@ -36,12 +36,14 @@
       web_commit_signoff_required: false
     }
     orgs.newRepo('sirius-web') {
+      aliases: ['sirius-components']
       allow_merge_commit: false
       allow_squash_merge: false
       allow_update_branch: false
       branch_protection_rules: [
         orgs.newBranchProtectionRule('master') {
           required_approving_review_count: 1
+          required_status_checks: []
           requires_linear_history: true
           requires_strict_status_checks: true
         }

@netomi netomi merged commit 73034b8 into main Aug 24, 2023
1 check passed
@netomi netomi deleted the enable-secret-scanning branch August 24, 2023 15:08
@netomi
Copy link
Contributor

netomi commented Aug 24, 2023

changes have been applied.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants