AbsaOSS / AbsaOSS/organizational-workflows

Investigate and fix severity-to-priority mapping for enterprise repositories

Abierto
#20 0 comentarios 0 reacciones 0 asignados Ver en GitHub
enhancement
Lenguaje dominante
Python
Estrellas
0
Forks
0
Merge medio
5 d 3 h
PR fusionados (30 d)
3

Descripción

### Feature Description

Investigate why severity-to-priority mapping works for AbsaOSS-to-AbsaOSS repositories but fails for enterprise repositories, and provide a fix or a documented workaround.

### Problem / Opportunity

The GraphQL call used for severity-to-priority mapping fails on enterprise repositories with:

```
WARNING - GraphQL call failed: gh: Resource protected by organization SAML enforcement. You must grant your Personal Access token access to this organization.
```

This blocks adoption of the workflow for enterprise-protected repositories.

### Acceptance Criteria

1. Root cause of the SAML enforcement failure is identified and documented.
2. Either a fix is implemented that supports enterprise repositories, OR
3. An alternative solution is provided: a standalone mapping script where users supply their own SAML-authorized token and target API endpoint.
4. The workaround/solution is documented in the repository.

### Proposed Solution

Investigate whether the GraphQL query can be adapted to pass a user-supplied token scoped to the enterprise org.
As an alternative, provide a standalone Python/shell script that accepts `--token` and `--api-url` parameters for mapping severity to priority without relying on the shared workflow token.

### Dependencies / Related

_No response_

### Additional Context

_No response_

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.