Skip to content

Adding Support for Repository Related Security Actions #176

Open
@TotalDwarf03

Description

@TotalDwarf03

Describe the feature or problem you’d like to solve

Enable functionality for Dependabot, Secret Scanning and Push Protection for repositories.

It would be good to be able to:

  • check if the security feature is enabled for a repo
  • enable/disable the security feature.

Proposed solution

Add endpoints for Dependabot, Secret Scanning and Push Protection for repositories.

Additional context

Secret Scanning & Push Protection

Within the REST API's GET /repos/{owner}/{repo}, there is a security_and_analysis block:

"security_and_analysis": {
      "advanced_security": {
        "status": "enabled"
      },
      "secret_scanning": {
        "status": "enabled"
      },
      "secret_scanning_push_protection": {
        "status": "disabled"
      },
      "secret_scanning_non_provider_patterns": {
        "status": "disabled"
      }

https://docs.github.com/en/rest/repos/repos?apiVersion=2022-11-28#get-a-repository

Dependabot

Replication of GET /repos/{owner}/{repo}/automated-security-fixes

https://docs.github.com/en/rest/repos/repos?apiVersion=2022-11-28#check-if-dependabot-security-updates-are-enabled-for-a-repository

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions