Show HN: GitHub Org Audit Tool

Unfortunately, it leaves a lot to be desired. I've actually had to do a fair bit of GH access reporting myself recently and I can recommend the GraphQL API as it allows you to properly list direct and indirect permissions on repositories (org + team + direct collaborator) that are alot harder to do with the REST API due to its inconsistent permissions model.

Why audit when you can declare all of this in Terraform? <a href="https:&#x2F;&#x2F;registry.terraform.io&#x2F;providers&#x2F;integrations&#x2F;github&#x2F;latest&#x2F;docs" rel="nofollow">https:&#x2F;&#x2F;registry.terraform.io&#x2F;providers&#x2F;integrations&#x2F;github&#x2F;...</a>

Awesome! I built something like this for $JOB-1 too. Unfortunately didn&#x27;t get to open source this before I left.<p>I built in an a mechanism for policy checks too, e.g. to check that only an allowed list of repositories was public, and that permissions were only assigned through teams.

How about using steampipe for this?

This is super helpful!