batch scripts to create repos on all orgs

assign-repo-role-to-team.sh

@@ -0,0 +1,70 @@
+#!/bin/bash
+
+.  ./.gh-api-examples.conf
+
+# https://docs.github.com/en/rest/teams/teams?apiVersion=2022-11-28#add-or-update-team-repository-permissions
+
+if [ -z "$GITHUB_TOKEN" ]; then
+  echo "GITHUB_TOKEN is not set, please provide a PAT with admin:enterprise scope."
+  exit 1
+fi
+
+if [ -n "$1" ]; then
+  ending_org=$1
+fi
+
+if [ -n "$2" ]; then
+  starting_org=$2
+fi
+
+list_enterprise_team_members_output=$(./list-enterprise-team-members.sh "$team")
+if [ $? -ne 0 ]; then
+  echo $list_enterprise_team_members_output
+  exit 1
+fi
+usernames=$list_enterprise_team_members_output
+app_installs=$(./tiny-list-app-installations.sh)
+
+repo=${repo:-"private-repo-1"}
+
+# Sort app installations by account login and iterate
+echo "$app_installs" | jq -c '. | sort_by(.account.login) | .[]' | while read -r install; do
+  install_id=$(echo "$install" | jq -r '.id')
+  org=$(echo "$install" | jq -r '.account.login')
+  if [ -z "$org" ] || [ "$org" = "null" ]; then
+    continue
+  fi
+
+  if [ -n "$starting_org" ]; then
+    if [[ "$org" < "$starting_org" ]]; then
+      continue
+    fi
+  fi
+
+  if [ -n "$ending_org" ]; then
+    if [[ "$org" > "$ending_org" ]]; then
+      continue
+    fi
+  fi
+
+  echo "➡️   Assigning repo permissions for $org (install_id: $install_id)"
+  GITHUB_TOKEN=$(./ent-call-get-installation-token.sh  $install_id | jq -r '.token')
+
+  response=$(curl -s -w "\n%{http_code}" -X PUT \
+    -H "Authorization: Bearer $GITHUB_TOKEN" \
+    -H "Accept: application/vnd.github+json" \
+    -d "{\"permission\":\"triage\"}" \
+  "$GITHUB_API_BASE_URL/orgs/$org/teams/$team/repos/$org/$repo")
+  http_code=$(echo "$response" | tail -n1)
+  json_body=$(echo "$response" | sed '$d')
+
+  if [[ "$http_code" == "201" ]] || [[ "$http_code" == "204" ]]; then
+    echo "   ✅ Repo permissions assigned to $team"
+  else
+    echo "   ❌ Failed to assign repo permissions (HTTP $http_code) for $team"
+    echo "   Response: $json_body"
+  fi
+  wait
+done
+
+echo "🎉 Done assigning repo permissions."

assign-repo-role-to-user.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+
+.  ./.gh-api-examples.conf
+
+# https://docs.github.com/en/rest/collaborators/collaborators?apiVersion=2022-11-28#add-a-repository-collaborator
+
+if [ -z "$GITHUB_TOKEN" ]; then
+  echo "GITHUB_TOKEN is not set, please provide a PAT with admin:enterprise scope."
+  exit 1
+fi
+
+if [ -n "$1" ]; then
+  ending_org=$1
+fi
+
+if [ -n "$2" ]; then
+  starting_org=$2
+fi
+
+list_enterprise_team_members_output=$(./list-enterprise-team-members.sh "$team")
+if [ $? -ne 0 ]; then
+  echo $list_enterprise_team_members_output
+  exit 1
+fi
+usernames=$list_enterprise_team_members_output
+app_installs=$(./tiny-list-app-installations.sh)
+
+repo=${repo:-"private-repo-1"}
+
+# Iterate over each installation
+echo "$app_installs" | jq -c '. | sort_by(.account.login) | .[]' | while read -r install; do
+  install_id=$(echo "$install" | jq -r '.id')
+  org=$(echo "$install" | jq -r '.account.login')
+  if [ -z "$org" ] || [ "$org" = "null" ]; then
+    continue
+  fi
+
+  if [ -n "$starting_org" ]; then
+    if [[ "$org" < "$starting_org" ]]; then
+      continue
+    fi
+  fi
+
+  if [ -n "$ending_org" ]; then
+    if [[ "$org" > "$ending_org" ]]; then
+      continue
+    fi
+  fi
+
+  echo "➡️   Assigning repo permissions for $org (install_id: $install_id)"
+  GITHUB_TOKEN=$(./ent-call-get-installation-token.sh  $install_id | jq -r '.token')
+
+  for username in $usernames; do
+    (
+      response=$(curl -s -w "\n%{http_code}" -X PUT \
+        -H "Authorization: Bearer $GITHUB_TOKEN" \
+        -H "Accept: application/vnd.github+json" \
+        -d "{\"permission\":\"triage\"}" \
+      "$GITHUB_API_BASE_URL/repos/$org/$repo/collaborators/$username")
+      http_code=$(echo "$response" | tail -n1)
+      json_body=$(echo "$response" | sed '$d')
+
+      if [[ "$http_code" == "201" ]] || [[ "$http_code" == "204" ]]; then
+        echo "   ✅ Repo permissions assigned to $username"
+      else
+        echo "   ❌ Failed to assign repo permissions (HTTP $http_code) for $username"
+        #echo "   Response: $json_body"
+      fi
+    ) &
+    sleep 0.019
+  done
+  wait
+done
+
+echo "🎉 Done assigning repo permissions."

assign-roles.sh

@@ -0,0 +1,101 @@
+#!/bin/bash
+
+.  ./.gh-api-examples.conf
+
+if [ -z "$GITHUB_TOKEN" ]; then
+  echo "GITHUB_TOKEN is not set, please provide a PAT with admin:enterprise scope."
+  exit 1
+fi
+
+if [ -n "$1" ]; then
+  ending_org=$1
+fi
+
+if [ -n "$2" ]; then
+  starting_org=$2
+fi
+
+list_enterprise_team_members_output=$(./list-enterprise-team-members.sh "$team")
+if [ $? -ne 0 ]; then
+  echo $list_enterprise_team_members_output
+  exit 1
+fi
+usernames=$list_enterprise_team_members_output
+app_installs=$(./tiny-list-app-installations.sh)
+
+# Iterate over each installation
+echo "$app_installs" | jq -c '. | sort_by(.account.login) | .[]' | while read -r install; do
+  install_id=$(echo "$install" | jq -r '.id')
+  org=$(echo "$install" | jq -r '.account.login')
+
+  if [ -z "$org" ] || [ "$org" = "null" ]; then
+    continue
+  fi
+
+  if [ -n "$starting_org" ]; then
+    if [[ "$org" < "$starting_org" ]]; then
+      continue
+    fi
+  fi
+
+  if [ -n "$ending_org" ]; then
+    if [[ "$org" > "$ending_org" ]]; then
+      continue
+    fi
+  fi
+
+  echo "➡️  Assigning roles for $org (install_id: $install_id)"
+  GITHUB_TOKEN=$(./ent-call-get-installation-token.sh $install_id | jq -r '.token')
+
+  # Get first org role
+  response=$(curl -s -w "\n%{http_code}" \
+    -H "X-GitHub-Api-Version: ${github_api_version}" \
+    -H "Accept: application/vnd.github.v3+json" \
+    -H "Authorization: Bearer ${GITHUB_TOKEN}" \
+      "${GITHUB_API_BASE_URL}/orgs/${org}/organization-roles")
+  http_code=$(echo "$response" | tail -n1)
+  json_body=$(echo "$response" | sed '$d')
+  if [[ "$http_code" -lt 300 ]]; then
+    first_role_id=$(echo "$json_body" | jq -r '.roles[0].id')
+    echo "   ➡️ Got first role id for $org: $first_role_id"
+  else
+    echo "   ❌ Failed to get roles for $org (HTTP $http_code)"
+  fi
+
+  # Assign it to the team
+  # put /organizations/:organization_id/organization-roles/team/:team_id/:role_id
+  response=$(curl -s -w "\n%{http_code}" -X PUT \
+    -H "X-GitHub-Api-Version: ${github_api_version}" \
+    -H "Accept: application/vnd.github.v3+json" \
+    -H "Authorization: Bearer ${GITHUB_TOKEN}" \
+    "${GITHUB_API_BASE_URL}/orgs/${org}/organization-roles/teams/${team}/${first_role_id}")
+  http_code=$(echo "$response" | tail -n1)
+  json_body=$(echo "$response" | sed '$d')
+  if [[ "$http_code" -lt 300 ]]; then
+    echo "   ✅ Assigned role to team $team in $org"
+  else
+    echo "   ❌ Failed to assign role to team $team in $org (HTTP $http_code)"
+  fi
+
+  # Assign to every user, its redundant but we are just using this to scale test performances
+  for username in $usernames; do
+    (
+      response=$(curl -s -w "\n%{http_code}" -X PUT \
+        -H "X-GitHub-Api-Version: ${github_api_version}" \
+        -H "Accept: application/vnd.github.v3+json" \
+        -H "Authorization: Bearer ${GITHUB_TOKEN}" \
+        "${GITHUB_API_BASE_URL}/orgs/${org}/organization-roles/users/${username}/${first_role_id}")
+      http_code=$(echo "$response" | tail -n1)
+      json_body=$(echo "$response" | sed '$d')
+      if [[ "$http_code" -lt 300 ]]; then
+        echo "   ✅ Assigned role to $username in $org"
+      else
+        echo "   ❌ Failed to assign role to $username in $org (HTTP $http_code)"
+      fi
+    ) &
+    sleep 0.019
+  done
+  wait
+done
+
+echo "🎉 Done assigning roles."

assign-security-manager-org-role-to-team.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+# This script won't work without updates to the Orgs API to support BTs.
+
+.  ./.gh-api-examples.conf
+
+# https://docs.github.com/en/rest/orgs/organization-roles?apiVersion=2022-11-28#assign-an-organization-role-to-a-team
+
+APP_INSTALLS=$(./tiny-list-app-installations.sh)
+team_slug="testing"
+role_id=138
+
+# Iterate over each installation
+echo "$APP_INSTALLS" | jq -c '.[]' | while read -r install; do
+  install_id=$(echo "$install" | jq -r '.id')
+  org=$(echo "$install" | jq -r '.account.login')
+  if [ -z "$org" ] || [ "$org" = "null" ]; then
+    continue
+  fi
+
+  echo "➡️   Assigning Security Manager role for $org (install_id: $install_id)"
+  GITHUB_TOKEN=$(./ent-call-get-installation-token.sh  $install_id | jq -r '.token')
+  response=$(curl -s -w "\n%{http_code}" -X PUT \
+    -H "Authorization: Bearer $GITHUB_TOKEN" \
+    -H "Accept: application/vnd.github+json" \
+    "$GITHUB_API_BASE_URL/orgs/$org/organization-roles/teams/$team_slug/$role_id")
+  http_code=$(echo "$response" | tail -n1)
+  json_body=$(echo "$response" | sed '$d')
+  if [[ "$http_code" == "204" ]]; then
+    echo "   ✅ Security manager role assigned to $team_slug"
+  else
+    echo "   ❌ Failed to assign security manager role (HTTP $http_code)"
+    #echo "   Response: $json_body"
+  fi
+done
+
+echo "🎉 Done assigning security manager role."

assign-security-manager-org-role-to-user.sh

@@ -0,0 +1,35 @@
+#!/bin/bash
+
+.  ./.gh-api-examples.conf
+
+# https://docs.github.com/en/rest/orgs/organization-roles?apiVersion=2022-11-28#assign-an-organization-role-to-a-user
+
+APP_INSTALLS=$(./tiny-list-app-installations.sh)
+user="fmacar3na-alt_tntmd2"
+role_id=138
+
+# Iterate over each installation
+echo "$APP_INSTALLS" | jq -c '.[]' | while read -r install; do
+  install_id=$(echo "$install" | jq -r '.id')
+  org=$(echo "$install" | jq -r '.account.login')
+  if [ -z "$org" ] || [ "$org" = "null" ]; then
+    continue
+  fi
+
+  echo "➡️   Assigning Security Manager role for $org (install_id: $install_id)"
+  GITHUB_TOKEN=$(./ent-call-get-installation-token.sh  $install_id | jq -r '.token')
+  response=$(curl -s -w "\n%{http_code}" -X PUT \
+    -H "Authorization: Bearer $GITHUB_TOKEN" \
+    -H "Accept: application/vnd.github+json" \
+    "$GITHUB_API_BASE_URL/orgs/$org/organization-roles/users/$user/$role_id")
+  http_code=$(echo "$response" | tail -n1)
+  json_body=$(echo "$response" | sed '$d')
+  if [[ "$http_code" == "204" ]]; then
+    echo "   ✅ Security manager role assigned to $user"
+  else
+    echo "   ❌ Failed to assign security manager role (HTTP $http_code)"
+    #echo "   Response: $json_body"
+  fi
+done
+
+echo "🎉 Done assigning security manager role."

create-repos.sh

@@ -0,0 +1,37 @@
+#!/bin/bash
+
+.  ./.gh-api-examples.conf
+
+APP_INSTALLS=$(./tiny-list-app-installations.sh)
+
+# Iterate over each installation
+echo "$APP_INSTALLS" | jq -c '.[]' | while read -r install; do
+  install_id=$(echo "$install" | jq -r '.id')
+  org=$(echo "$install" | jq -r '.account.login')
+  if [ -z "$org" ] || [ "$org" = "null" ]; then
+    continue
+  fi
+
+  echo "➡️  Creating repos for $org (install_id: $install_id)"
+  GITHUB_TOKEN=$(./ent-call-get-installation-token.sh  $install_id | jq -r '.token')
+  for repo_num in $(seq 1 10); do
+    (
+      repo="private-repo-$repo_num"
+      response=$(curl -s -w "\n%{http_code}" -X POST "$GITHUB_API_BASE_URL/orgs/$org/repos" \
+        -H "Authorization: Bearer $GITHUB_TOKEN" \
+        -H "Accept: application/vnd.github+json" \
+        -d "{\"name\":\"$repo\",\"private\":true,\"auto_init\":true}")
+      http_code=$(echo "$response" | tail -n1)
+      json_body=$(echo "$response" | sed '$d')
+      if [[ "$http_code" == "201" ]]; then
+        echo "   ✅ Created $org/$repo"
+      else
+        echo "   ❌ Failed to create $org/$repo (HTTP $http_code)"
+        #echo "   Response: $json_body"
+      fi
+    ) &
+  done
+  wait
+done
+
+echo "🎉 Done creating repositories."

ent-call-get-installation-token.sh

@@ -6,9 +6,15 @@
 
 # rate_limits: https://docs.github.com/en/developers/apps/building-github-apps/rate-limits-for-github-apps
 
+
 JWT=$(./ent-call-get-jwt.sh ${ent_app_id} 2>/dev/null)
 
-installation_id=${ent_app_installation_id}
+# Allow passing installation_id as $1, fallback to ent_app_installation_id
+if [ -n "$1" ]; then
+  installation_id="$1"
+else
+  installation_id="${ent_app_installation_id}"
+fi
 
 curl --silent ${curl_custom_flags} \
      -X POST \