Am I running this correctly?

[djthornton1212]

Hello @NickLiffen I'm noticing that when I run the getRepos it's updating the repos.json as expected, but the contents look incomplete.

Example:
It starts as...

[
  {
    "login": "octodemo",
    "repos": [
      {
        "enableDependabot": "boolean",
        "enableDependabotUpdates": "boolean",
        "enableSecretScanning": "boolean",
        "enableCodeScanning": "boolean",
        "createIssue": "boolean",
        "repo": "org/repo"
      }
    ]
  }
]

Then I run yarn run getRepos yields...

[
  {
    "login": "<org_1>",
    "repos": []
  },
  {
    "login": "<org_2>",
    "repos": []
  }
]

The logs look good too. It list all the repos, their languages, etc. It also says ...

ghas:inform Success created repos.json +1ms
Done in 8.63s

Am I missing something.

[NickLiffen]

@djthornton1212 👋

Do you have access to all the organisations within this enterprise 👀 you are going to need access to every organisation. Being an enterprise admin I don't think cut's it, I think you need to be a direct admin on every org 👀

[djthornton1212]

That's correct, I am an organization owner for both:

And as I said in the post above I can see it list each and every repo in the organizations in the logs...

I think I see the problem after completely reading the logs:

ghas:inform Found 0 repositories that met the valid criteria in the organisation . Out of 96.

[djthornton1212]

Is the language option a list or should it be a single language? I'm guessing a filter for a single option. I tried adding multiple languages to filter on and it matched none. I removed it entirely and all repositories matched.

Is it expected that we should run 1 language at a time?

[NickLiffen]

Is it expected that we should run 1 language at a time?

Okay, I see where you are going 🙇 So yes, it is only meant to run one language at a time. The reason why we do this is that the codeql-analysis.yml is different, per language. So you are only meant to run it with one language at a time. E.G start with javascript, then move to python, etc 👍

This will allow you to enable the right codeql-analysis.yml across multiple files.

If you don't want to enable CodeQL, just remove the language, make it empty, and you are good to go just with secret scanning and dependabot 👍

[djthornton1212]

Got it. Ok, I was thinking that it would apply the corresponding codeql-analysis.yml to the language found per repo in one go.

Ok, I can make this work then. Thank you very much for the feedback.

[NickLiffen]

No problem 🙇 Please keep this feedback coming 🙇