Checklist for existing and new repositories

[inigomarquinez]

In order to have consistency in all the repositories in the organization, we are following several strategies such as:

• Repository as a template for new projects (Repo template as baseline #1)
• Health files at organization level (Metafiles Definiton #15)

However, there are some configuration rules that can't be automated (branch protection rules, deleting branches, vulnerability alrets, ...), so we need to create a check list we can follow for all the repositories.

[inigomarquinez]

The draft tool we’re using is here.

- The code has been improved to use GitHub’s GraphQL.
- The output has been improved to render in JSON and CSV (next will be markdown).
- It has already been used to detect some improvements in different repos of the OneBeyond org, and they have been fixed (mainly main branch protection and license).
- The idea is to generate a GitHub action that can be run periodically to analyze the generated repost (similar to the scorecard).