Skip to content

Export list of dependencies for an entire organization #102

@jboursier-mwb

Description

@jboursier-mwb

Is your feature request related to a problem? Please describe.
It is a bit cumbersome to export all dependencies in a csv format for all repositories of an organization. Currently, GitHub doesn't allow to export dependencies from https://github.com/orgs/ORG/insights/dependencies . GitHub support team asks to export the list of repositories, and then export all dependencies for each repository from that list. It takes a lot of time to format it properly.

Describe the solution you'd like

Ideally, ghas-cli would have a single command to export dependencies for an organization that would hide the internal complexities:

  1. Export the list of repositories,
  2. For each repository, export the list of dependencies (sbom?),
  3. Format the list as a CSV, with the following fields:
TODO

Describe alternatives you've considered
Do each step manually.

Additional context
This feature can be requested for compliance reasons by legal teams, and currently there is no way to easily and quickly export an up-to-date list of dependencies for a whole organization in GitHub.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions