This repository contains sample scripts for Node and Bash which can be used to enable security alerts and automated security fixes in all of the repositories in a given organization.

This project is being provided as a sample only which illustrates how to enable Dependabot alerts and enable Dependabot security updates in all repositories in a given organization.

Note: This node script is also available integrated into the GitHub Administration Tool (ghad).

• Install Node
• Clone this repository
• At the commandline, run npm install
• Generate a new personal access token with repo and read:org permissions
• Copy .env.example to .env and include your new personal access token in the GH_AUTH_TOKEN value.

• At the commandline, run node enable-security-alerts-for-org.js myorgname where myorgname is your organization. This will enable Dependabot alerts on all repositories in your organization.

• At the commandline, run node enable-security-alerts-for-org-check.js myorgname where myorgname is your organization. This will enable Dependabot alerts on all repositories in your organization.

You'll need to enable security alerts before you can Dependabot security updates

• At the commandline, run node enable-automated-security-fixes-for-org.js myorgname where myorgname is your organization. This will enable Dependabot security updates on all repositories in your organization.

• Ensure that you have bash shell available on your system. If you're running Windows, additional setup may be required. How to install Bash on Windows 10
• Generate a new personal access token with repo and read:org permissions

• At the commandline, run ./shell_script/enable_vulnerability_alerts_for_entire_org.sh myorgname accessToken where myorgname is your organization, and accessToken is the personal access token you generated earlier.

You'll need to enable Dependabot alerts before you can enable Dependabot security updates

• At the commandline, run ./shell_script/enable_automated_security_fixes_for_entire_org.sh myorgname accessToken where myorgname is your organization, and accessToken is the personal access token you generated earlier.

If you'd like to contribute to this sample with fixes, or support for other platforms, please follow the contribution guidelines.

This project is available under the MIT license.