Show HN: GitHub Org Audit Tool

• github-audit-tool

  2 188 5.6 Python

  This is a tool for auditing github repos, users, and teams. Good for compliance, security and other stuff.

  

• steampipe

  146 6,391 9.7 Go

  Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

  

Thanks atonse for the shout out!

Steampipe [1] is an open source CLI to query your cloud resources (e.g. GitHub, AWS, Splunk, etc) with SQL. The GitHub plugin has 44 tables to query [2].

The "GitHub Sherlock" mod includes 34 automated controls for organization, repo and issue best practices. The "GitHub Compliance" mod has 35 automated controls for supply chain security. Mods are written in HCL + SQL. [3]

1 - https://steampipe.io

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• steampipe-plugin-github

  5 66 8.4 Go

  Use SQL to instantly query repositories, users, gists and more from GitHub. Open source CLI. No DB required.

  

• collaborators

  1 2 10.0 Go

  Print a summary of the permissions of all the repositories in a GitHub org

  

IME, the problem with the GraphQL API is that it does a poor job of indicating where permissions came from, and you have to fall back to bad heuristics.

For example, if team="company" has "READ", and team="company/dev" has "WRITE", and Bob is in team="company/dev" but not team="company", then Bob will have both "READ" and "WRITE" because of his membership in team="company/dev"; the API will give no indication that the "READ" indirectly came from team="company".

Anyway, here's my audit script for such things: https://github.com/datawire/collaborators

• terraformer

  109 11,763 7.6 Go

  CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

  

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project