search

yaleman / github_linter

Automating all the little things I need to check in my repos.
MIT License
2 stars 0 forks source link

check for secret scanning being enabled - public repos #207

Open yaleman opened 1 year ago

yaleman commented 1 year ago

Raw response from get a repo should have:

"security_and_analysis": {
      "advanced_security": {
        "status": "enabled"
      },
      "secret_scanning": {
        "status": "enabled"
      },
yaleman commented 1 year ago

push protection

For push protection and secret scanning, I believe you will still use the Update a repository endpoint. When calling that endpoint, you can pass the security_and_analysis object in the request body with the specific configurations you desire (more details on this are provided under the Body parameters section of the documentation for that endpoint).

vuln scanning

Private vulnerability reporting should be available through the Privately report a security vulnerability endpoint.