Policy to check for publicly writeable wiki

Open artis3n opened this issue 3 years ago • 4 comments

Allstar should have a check for whether a repo has configured their wiki to be publicly writeable (and therefore open to defacement, manipulation).

Dec 08 '22 15:12 artis3n

Yes, this would be good, but there is currently not an API for it I believe.

Dec 08 '22 17:12 jeffmendoza

I think you're right - you could script some manual browsing but I think that's going to have to remain unfulfilled unless GitHub exposes an API.

Dec 08 '22 19:12 artis3n

Yeah, some GitHub automation tools resort to browser emulators. Not sure I want to go down that route. We would probably need a robot user to accompany the app, as the app can't auth to the website.

Dec 08 '22 20:12 jeffmendoza

Opened a discussion thread for Github product feedback https://github.com/orgs/community/discussions/51582

Mar 31 '23 15:03 Gby56