![toc-me[bot]](https://avatars.githubusercontent.com/in/13885?v=4&s=144)
Commit activity
Last 12 weeks · 0 commits
Community health
2 of 6 standards met
42
✓README✓License○Contributing○Code of Conduct○Issue Template○PR Template
Recent PRs & issues
Quiet · 3 in progress · Last activity 6mo ago
See all on GitHub →
Draft to support proposed change here: https://github.com/kubernetes/security/issues/56 https://github.com/kubernetes/community/pull/5398 We might also want to temporarily disable secping from running in test-infra, during the migration from SECURITY_CONTACTS to OWNERS: https://github.com/kubernetes/test-infra/blob/master/config/jobs/kubernetes/test-infra/fejta-bot-periodics.yaml#L333
Currently this is hard-coded to jessfraz: https://github.com/jessfraz/secping/blob/eb0c7abc31ba2d68472c9ee18c7e8db7f0e81565/main.go#L329-L331 We should probably use this api instead: https://developer.github.com/v3/users/#get-the-authenticated-user
If you call this with --token=foo then the program prints an error with foo in the name (which leaks out to gubernator and gcs) https://github.com/jessfraz/secping/blob/eb0c7abc31ba2d68472c9ee18c7e8db7f0e81565/main.go#L176-L179
Recent fixes
Search for issue opened by anyone, not just Jess ;-) Create new issue when previous one was closed without creating the SECURITY_CONTACTS file () Ping open issues on a regular basis () Auto-assign people (, , ) Auto-close issues once there is a SECURITY_CONTACTS file () Add flags to modify behavior: : control which orgs to scan : do not scan this repo : do not log email addresses in the file : actually created/edit issues, otherwise pretend. : read token from this file instead of putting the value in Require go-github to be on the local path until https://github.com/google/go-github/pull/1076 is addressed
https://github.com/jessfraz/secping/blob/eb0c7abc31ba2d68472c9ee18c7e8db7f0e81565/main.go#L119 Looks like t.TokenType = "token" will fix this: https://godoc.org/golang.org/x/oauth2#Token.Type
Structured data for AI agents
Repository: jessfraz/secping. Description: A tool for reading the SECURITY_CONTACTS file in a kubernetes repository. Stars: 11, Forks: 4. Primary language: Go. Languages: Go (69.6%), Makefile (27.7%), Dockerfile (2.7%). License: MIT. Open PRs: 3, open issues: 2. Last activity: 6mo ago. Community health: 42%. Top contributors: jessfraz, fejta, toc-me[bot].