github-as-code
github-as-code copied to clipboard
Create a permission inspection tool on top of YAML
I know we have talked about different ideas to improve the json structure. Another idea may be to have a quick tool that one can run and answer "after these changes, what repos do I have permissions for, what permissions do I have, and why (because part of a team, or direct repo)". I know the terraform doesn't take a user-focused view, but it could be a nice CI step to generate a user-focused view so folks can audit easily. Something like:
[
{
"user" : "name",
"reposHasAccessTo" : [
"go-libp2p" : {"permissionsLevel" : "admin", "via" : "admins"},
"docs" : {"permissionsLevel" : "maintain", "via" : "DIRECT_ACCESS"},
...
]
}, {
...
}
]