Github Dependabot Across-Organization Scanner

Simple Deno script for scanning all your dependencies on GitHub and exporting these to a CSV file or console

Installation

Depends on Deno, which is a single file TypeScript interpreter. To install on MacOS:

brew install deno

Running

List dependencies

Description:
List dependencies to the console

Command Usage:
list {Options}

Required Options:
-u, --org 	 The github organization to look at the repositories of
-u, --token 	 Your personal Github command line access token

Options:
-h --help 	 Help Screen
-t, --type 	 Filter dependencies to only a specified type.  Eg. NPM (yarn, npm) or PIP (poetry, pipenv, pip, etc)
-p, --package 	 Specify a single package to filter to.  Eg. django

Export dependencies

Description:
Export dependencies to a CSV file

Command Usage:
export {Options}

Required Options:
-u, --org 	 The github organization to look at the repositories of
-u, --token 	 Your personal Github command line access token
-o, --outfile 	 For export, the file to save the CSV to

Options:
-h --help 	 Help Screen
-t, --type 	 Filter dependencies to only a specified type.  Eg. NPM (yarn, npm) or PIP (poetry, pipenv, pip, etc)
-p, --package 	 Specify a single package to filter to.  Eg. django

Example commands

# List everything
deno run --allow-net=api.github.com,pypi.org https://raw.githubusercontent.com/datalivesoftware/github-dep-scanner/v2.0.5/main.ts --org=datalivesoftware list --token=MY_PERSONAL_GITHUB_ACCESS_TOKEN

# List the django version used in every product
deno run --allow-net=api.github.com,pypi.org https://raw.githubusercontent.com/datalivesoftware/github-dep-scanner/v2.0.5/main.ts --org=datalivesoftware list --type=PIP --package=django --filename=poetry.lock --token=MY_PERSONAL_GITHUB_ACCESS_TOKEN

# Export all Python dependencies to a CSV
deno run --allow-write --allow-net=api.github.com,pypi.org https://raw.githubusercontent.com/datalivesoftware/github-dep-scanner/v2.0.5/main.ts --org=datalivesoftware export --type=PIP --outfile=pipdeps.csv --token=MY_PERSONAL_GITHUB_ACCESS_TOKEN

# Export all NPM dependencies to a CSV
deno run --allow-write --allow-net=api.github.com,pypi.org https://raw.githubusercontent.com/datalivesoftware/github-dep-scanner/v2.0.5/main.ts --org=datalivesoftware export --type=NPM --outfile=npmdeps.csv --token=MY_PERSONAL_GITHUB_ACCESS_TOKEN

Building / developing

To update the Github GraphQL typings:

GITHUB_TOKEN=YOUR_API_KEY yarn generate