Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/gitarmor-on-demand.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,9 +12,9 @@ on:
required: true
default: 'dearmory'
level:
description: 'Level'
description: 'Level (repository_only, organization_only, or organization_and_repository)'
required: true
default: 'repository'
default: 'repository_only'

jobs:
run-gitarmor:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/gitarmor-scheduled.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
repo: ${{ github.repository }}
org: ${{ github.repository_owner }}
token: ${{ steps.app-token.outputs.token }}
level: 'organization'
level: 'organization_only'
policy-dir: './policies'

- name: Get the output
Expand Down
3 changes: 2 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -132,4 +132,5 @@ out

.env
my.secrets
output-report.*
output-report.*
dist/
10 changes: 6 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -64,10 +64,12 @@ DEBUG=false
POLICIES_PATH=policies
```

where `LEVEL` is the scope of the checks:
- `repository_only` for repository-level checks
- `organization_only` for organization-level checks
- `organization_and_repository` for organization-level and repositorty_level checks for all the repos in the organization
where `LEVEL` controls which checks GitArmor will run:
- `repository_only` - runs repository-level checks only for the specified repository (requires REPO setting)
- `organization_only` - runs organization-level checks only, without any repository checks
- `organization_and_repository` - runs organization-level checks first, then automatically runs repository-level checks for ALL repositories in the organization

**Note**: Use `organization_only` if you want to run organization checks without automatically scanning all repositories. Use `organization_and_repository` if you want both organization and repository checks for all repos in the org.

Next, generate a Personal Access Token (PAT) from GitHub and input your settings into the `.env` file. Ensure your token has these permissions:
- `repo: admin`
Expand Down
2 changes: 1 addition & 1 deletion action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ inputs:
description: 'GitHub Token (GITHUB_TOKEN) with admin access to the repository/organization'
required: true
level:
description: 'Level on which to run GitArmor - repository or organization'
description: 'Level on which to run GitArmor - repository_only, organization_only, or organization_and_repository'
required: true
policy-dir:
description: 'Location of the directory containing the policies'
Expand Down
68 changes: 0 additions & 68 deletions dist/evaluators/OrgPolicyEvaluator.js

This file was deleted.

97 changes: 0 additions & 97 deletions dist/evaluators/RepoPolicyEvaluator.js

This file was deleted.

40 changes: 0 additions & 40 deletions dist/evaluators/multipurpose/FilesExistChecks.js

This file was deleted.

32 changes: 0 additions & 32 deletions dist/evaluators/organization/OrgAuthenticationChecks.js

This file was deleted.

51 changes: 0 additions & 51 deletions dist/evaluators/organization/OrgCustomRolesChecks.js

This file was deleted.

Loading