🚀 Big News: Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team.Learn more

ghtools

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

ghtools

ghtools: tools for interacting with the GitHub API

0.23.0
78

Supply Chain Security

100

Vulnerability

98

Quality

100

Maintenance

100

License

Unpopular package

Quality

This package is not very popular.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Maintainers
2

ghtools

A set of commandline utilities for interacting with the GitHub or GitHub Enterprise API.

.. image:: https://travis-ci.org/alphagov/ghtools.png?branch=master :target: https://travis-ci.org/alphagov/ghtools

Installation

ghtools is available on PyPI_ and can be installed using pip_::

$ pip install ghtools

.. _PyPI: http://pypi.python.org/pypi .. _pip: http://www.pip-installer.org/

Usage

Simple usage::

$ eval `gh-login`
$ gh-repo alphagov/ghtools get
$ gh-org alphagov members

ghtools is not a monolithic program. Instead, it comes with a number of scripts which each perform very specific tasks. The aim is for these scripts to be composable, allowing you to pipe their data to and from other unix tools (grep, sort, uniq, python -m json.tool, etc.) in order to build up your own more complex scripts.

Currently available tools within ghtools

================== ====================================================== Command Description ================== ====================================================== gh-browse Manually browse the GitHub API by URL gh-list-members List members of a GitHub organisation (may be removed) gh-login Login to GitHub, generating an OAuth login token gh-migrate-project Migrate an entire project between GitHub instances gh-migrate-teams Migrate organisation teams between GitHub instances gh-org Interact with organisations gh-repo Interact with repositories gh-status Submit commit build status to GitHub ================== ======================================================

Multiple instances

ghtools is, in particular, designed for interacting with multiple GitHub instances (i.e. github.com as well as your company's GitHub Enterprise installation). You tell ghtools how to connect you non-github.com GitHub instances using "nicknames" and environment variables. For example, here's how to login to a GitHub instance nicknamed "foo", using a custom SSL cert bundle::

$ export GITHUB_FOO_API_ROOT=https://github.foo/api/v3
$ export GITHUB_FOO_CA_BUNDLE=/usr/share/ssl/github_foo.crt
$ eval `gh-login --scope repo foo`
$ gh-repo foo:alphagov/ghtools get
$ gh-org foo:alphagov members 

License

ghtools is released under the MIT license, a copy of which can be found in LICENSE.

FAQs

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts