AbsaOSS / AbsaOSS/organizational-workflows

Investigate and fix severity-to-priority mapping for enterprise repositories

未關閉
#20 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
enhancement
主要語言
Python
星號
0
分支
0
平均合併
7 天 15 小時
30 天內合併 PR
10

描述

### Feature Description

Investigate why severity-to-priority mapping works for AbsaOSS-to-AbsaOSS repositories but fails for enterprise repositories, and provide a fix or a documented workaround.

### Problem / Opportunity

The GraphQL call used for severity-to-priority mapping fails on enterprise repositories with:

```
WARNING - GraphQL call failed: gh: Resource protected by organization SAML enforcement. You must grant your Personal Access token access to this organization.
```

This blocks adoption of the workflow for enterprise-protected repositories.

### Acceptance Criteria

1. Root cause of the SAML enforcement failure is identified and documented.
2. Either a fix is implemented that supports enterprise repositories, OR
3. An alternative solution is provided: a standalone mapping script where users supply their own SAML-authorized token and target API endpoint.
4. The workaround/solution is documented in the repository.

### Proposed Solution

Investigate whether the GraphQL query can be adapted to pass a user-supplied token scoped to the enterprise org.
As an alternative, provide a standalone Python/shell script that accepts `--token` and `--api-url` parameters for mapping severity to priority without relying on the shared workflow token.

### Dependencies / Related

_No response_

### Additional Context

_No response_

貢獻指南

開啟貢獻指南

研究方向

Start at the severity-to-priority GraphQL call and compare its authentication path for AbsaOSS-to-AbsaOSS versus enterprise repositories. Reproduce the SAML enforcement failure with an enterprise repository, then verify either enterprise support or a standalone Python/shell mapping script accepting --token and --api-url. Done means the root cause and workaround or fix are documented in the repository.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
github, graphql, python, shell
領域
authentication, devops, security
Issue 類型
功能
難度
4/5
預估耗時
3-5 天
活躍度
冷清
描述清晰度
基本清楚
新手友好度
48/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。