Skip to content
This repository has been archived by the owner on Oct 8, 2024. It is now read-only.

This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.

License

Notifications You must be signed in to change notification settings

github/enable-security-alerts-sample

Repository files navigation

Warning

This repository has been deprecated and is no longer maintained

The features of the scripts are now natively supported in GitHub, please explore the following options:

Enable Dependabot alerts and Dependabot security updates sample

This repository contains sample scripts for Node and Bash which can be used to enable security alerts and automated security fixes in all of the repositories in a given organization.

This project is being provided as a sample only which illustrates how to enable Dependabot alerts and enable Dependabot security updates in all repositories in a given organization.

Node script

Note: This node script is also available integrated into the GitHub Administration Tool (ghad).

Prerequisites

  • Install Node
  • Clone this repository
  • At the commandline, run npm install
  • Generate a new personal access token with repo and read:org permissions
  • Copy .env.example to .env and include your new personal access token in the GH_AUTH_TOKEN value.

Calling this script to enable Dependabot alerts

  • At the commandline, run node enable-security-alerts-for-org.js myorgname where myorgname is your organization. This will enable Dependabot alerts on all repositories in your organization.

Calling this script to check for enabled Dependabot alerts

  • At the commandline, run node enable-security-alerts-for-org-check.js myorgname where myorgname is your organization. This will enable Dependabot alerts on all repositories in your organization.

Calling this script to enable Dependabot security updates

You'll need to enable security alerts before you can Dependabot security updates

  • At the commandline, run node enable-automated-security-fixes-for-org.js myorgname where myorgname is your organization. This will enable Dependabot security updates on all repositories in your organization.

Shell script

Prerequisites

Calling this script to enable Dependabot alerts

  • At the commandline, run ./shell_script/enable_vulnerability_alerts_for_entire_org.sh myorgname accessToken where myorgname is your organization, and accessToken is the personal access token you generated earlier.

Calling this script to enable Dependabot security updates

You'll need to enable Dependabot alerts before you can enable Dependabot security updates

  • At the commandline, run ./shell_script/enable_automated_security_fixes_for_entire_org.sh myorgname accessToken where myorgname is your organization, and accessToken is the personal access token you generated earlier.

Contributing

If you'd like to contribute to this sample with fixes, or support for other platforms, please follow the contribution guidelines.

License

This project is available under the MIT license.

About

This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given organization.

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published