Ministry of Justice GitHub Repository Standards

This repository contains code which uses the GitHub API to find all public Ministry of Justice (MoJ) GitHub repositories, and check whether or not they comply with our standards.

These checks run on a regular schedule, and send the results to the Operations Engineering Reports web application.

Running the report

The report is scheduled to run daily, via a GitHub Actions workflow.

You can also trigger it manually via the "Run workflow" button here.

The ruby code is run directly via the GitHub Actions workflow - there is no docker image or other build steps.

Architecture

• A GraphQL query retrieves information about MoJ public GitHub repositories
• Data for each repository is used to instantiate a StandardsReport object
• Code in StandardsReport creates a report based on the data supplied

Public repositories should:

• be MIT Licensed (not implemented yet)
• have main as the default branch
• have at least one team with admin access (not implemented yet)
• delete branch on merge (not implemented yet)
• have non-empty description (shouldn't be null or "") (not implemented yet)
• have issues enabled (not implemented yet)
• have recent activity (pushedAt < ?) (not implemented yet)
• have branch protection on main, with: "requiresApprovingReviews": true, "requiresCodeOwnerReviews": true, "isAdminEnforced": true,
• have Dependabot enabled (not implemented yet)