kunalnagarco / action-cve

A GitHub action that sends Dependabot Vulnerability Alerts to Slack, PagerDuty, Zenduty, Microsoft Teams.
https://github.com/marketplace/actions/check-cve
MIT License
20 stars 20 forks source link

Add support for org and enterprise level alerts #187

Open mauritz-lovgren opened 1 month ago

mauritz-lovgren commented 1 month ago

Currently, the action only supports the octokit.dependabot.listAlertsForRepo(...) function.

Would be nice to support the organization and enterprise editions as well.

Instead of having to define a workflow for all repos in all organizations in the whole enterprise, one could simply create one single workflow in an org-level repo (.github) to schedule a weekly report for one or more organizations (or for the whole enterprise).