Allstar Integration on Enterprise version of GitHub

[ossf]

Allstar Integration on Enterprise version of GitHub

[jdhaines]

We have the exact system you're describing working. This may sound dumb, but did you actually install the GitHub app itself? We were relatively new to GitHub and I set up the config but missed the step of actually installing the application. Afterwards it seemed like a silly thing to miss, but it's worth the post in case you did the same thing.

[1633605]

@jdhaines Thanks for the feedback. It worked when the configuration is defined as below.
Step1:

I was trying to run it across the repos under organisation with below config(.allstar.yaml)
Step2:
optConfig:
optOutStrategy: true

but it was not working as expected to create issues across the repos.

I tried again with new repositories as mentioned in step#1, didn't seen any issues being created for new repos which are added today. Please advise if there is something to be modified.

[jdhaines]

One thing I notice is that the repo in the organization should be called .allstar but the file in that repo should be allstar.yaml with no leading period. This one is working for me in a .allstar repo in the organization.

Also it's a .yaml file so the spacing / tabs is meaningful.

[1633605]

@jdhaines Yes the repo is created as below screenshot.

Here is the screenshot of repository level config.

All the four files below are created with same config.

1. branch_protection.yaml
   

2. binary_artifacts.yaml (same as below screenshot)

3. outside.yaml (same as below screenshot)

4. security.yaml
   

I see first rule and security rule creates issues intermittently, when i define the optOut Strategy. However creation of issues are not consistent across the repos for all the rules.
For example in one of the repo only security.md related issue is created but the issue related to branch protection rule is not created.
Is it consistent and working in expected behaviour at your side?
Please advise for any corrections required.

[jeffmendoza]

@1633605-Phaneendra Which org? I can look at the logs for errors.