search

ossf / staff

Repository to keep track of staff operations
Apache License 2.0
0 stars 1 forks source link

Instructions for enabling secret scanning and push protection for the Security Baseline #5

Closed bbpursell1 closed 3 months ago

bbpursell1 commented 3 months ago

Some simple instructions for updating the Enterprise policy for enabling the secret scanning and push protection per the recent TAC approval of this for the security baseline. This is intended to be done simply with the API to minimize human error in the UI and that there has been more than one person reviewing what is being implemented.

bbpursell1 commented 3 months ago

@omkhar I've added a python script that will implement the changes, and has methods for doing a rollback as well as for testing similar API endpoints. As discussed, there is no means to do a test of the actual changes without making the changes, unless we have a test enterprise. So far as I can tell, there is no means of doing a "dry run".

I can provide evidence of the testing of this script doing similar calls on a different endpoint, or of the execution against the get function, if needed.