cross-project-cluck 1.0.6

CLI tool to identify cross project repo access in Azure DevOps.

cross-project-cluck

Helps identify cross-project repo access in Azure DevOps.

What does it do?

For each pipeline run harvested (API limited to latest 1000), it adds a row for each repository accessed. Determines if the access is cross-project. Sets the status to "REVIEW" for cross-project access or "OK" for same-project access.

It outputs a JSON file and matching CSV. It also outputs a list of projects it found. Use the --simulate-approve-all flag to output a list of instructions if you were to set granular permissions at repo level.

[
    {
        "home_project": "HOME PROJECT",
        "run": "Link to the Pipeline Run",
        "project": "HOME PROJECT",
        "repo": "Repo Accessed",
        "branch": "Branch reference",
        "cross_project": false,
        "status": "OK"
    },
    {
        "home_project": "HOME PROJECT",
        "run": "Link to the Pipeline Run",
        "project": "CROSS PROJECT",
        "repo": "Repo Accessed",
        "branch": "Branch reference",
        "cross_project": true,
        "status": "REVIEW"
    }
]

Installation

Install via pip:

pip install cross-project-cluck

Usage

Run the tool using the CLI:

1. With arguments:

   cluck --simulate-approve-all --organization my_org --pat_token my_secret_token
   

2. Without arguments (uses config.json or environment variables):

   cluck --simulate-approve-all
   

Configuration

You can provide organization and pat_token in the following ways:

1. Command-line arguments:

   cluck --organization my_org --pat_token my_secret_token
   

2. Environment variables:

   export ORGANIZATION=my_org
   export PAT_TOKEN=my_secret_token
   cluck
   

3. config.json file:

   Create a config.json file:

   {
       "organization": "my_org",
       "pat_token": "my_secret_token"
   }
   

Priority

The tool checks for configuration in this order:

1. Command-line arguments
2. Environment variables
3. config.json

If not using pip, use the python code directly:

python cross_project_cluck.py -h
python cross_project_cluck.py --organization my_org --pat_token my_secret_token
python cross_project_cluck.py --simulate-approve-all --organization my_org --pat_token my_secret_token