turbot/steampipe-mod-github-insights

Dashboard: GitHub Repository Security Advisory Report

This report answers the following questions:

  • Across all my repositories do I have any open security vulnerability alerts?
This dashboard contains 5 cards and 1 table.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-github-insights

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select GitHub Repository Security Advisory Report dashboard.

You could also snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe dashboard run github_insights.dashboard.repository_security_advisory_report --share

Queries

This dashboard uses the the following queries:
select
'Open Advisories' as label,
count(*) as value
from
github_my_repository r
join github_repository_dependabot_alert a on r.name_with_owner = a.repository_full_name
where
a.state = 'open'
and r.name_with_owner like 'turbot/steampipe-plugin%'
and r.name_with_owner not in ('turbot/steampipe-plugin-papertrail', 'turbot/steampipe-plugin-wordpress', 'turbot/steampipe-plugin-html', 'turbot/steampipe-plugin-chaos', 'turbot/steampipe-plugin-chaosratelimit', 'turbot/steampipe-plugin-chaosdynamic', 'turbot/steampipe-plugin-pokemon', 'turbot/steampipe-plugin-gitlab');

Tags