microsoft / GHAzDO-Resources

Resources, Scripts, etc. for GitHub Advanced Security on Azure DevOps
MIT License
31 stars 14 forks source link

csv-report - script, pipeline, samples #10

Closed felickz closed 11 months ago

felickz commented 1 year ago

Script and sample pipeline for querying the GHAzDO alert APIs and uploading a CSV report of an org's alerts for each repo as an artifact.

Readme.md

See: Sample Report

felickz commented 11 months ago

I think the one metacomment I might make is whether we should consider any changes to improve support for running both in and outside of pipelines.

In a similar vein - would it make sense to support passing in a scope to grab alerts from via Param vs. the inline variable?

Script started from another template that was meant for AzDO pipeline, but i have modified it so you can run a bit easier with params. Added a scope param to control org/proj/repo reporting