github/entitlements-app

Stars
409
Rank 105,709 (Top 3 %)
Language
Ruby
License
MIT License
Created over 2 years ago
Updated 7 months ago

github/entitlements-app

github

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

The Ruby Gem that Powers Entitlements - GitHub's Identity and Access Management System

entitlements-app

entitlements-app is a Ruby gem which provides git-managed LDAP group configuration and access provisioning to your declared resources. It powers Entitlements, GitHub's internal Identity and Access Management (IAM) system. Entitlements is a pluggable system designed to alleviate IAM pain points.

Quick Start

See getting started for quick start, and entitlements-config for example configuration.

Inputs

Entitlements currently supports a single input option of configuration files in the form of .txt, .rb and .yaml.

Git-managed config

Entitlements receives input from configuration files. By using git to back the config files, every file has a complete and visible audit trail.

See configuration for a complete guide on entitlements configuration.

Populating config from a source of truth

Entitlements requires an initial Org Chart configuration to define all of the valid users available to the system.

See orgchart for a complete guide to configuring your org chart data.

Configuration

Metadata

Entitlements allows for metadata tags which can be used to indicate attributes of the entitlements config other than membership. These metadata tags can be used to build additional automation on top of the Entitlements system.

For examples of ways to leverage metadata tags, see metadata

Expirations

Entitlements allows for expirations at the file level and the user/group level.

See expirations for more on expirations.

Filters

Entitlements supports a concept of filters. This allows you to group employees defined in your org chart by classifications, and require explicit access definitions for those employee classifications.

For examples on filters, see filters

Example

There is an example configuration repo here

Outputs

LDAP

Out of the box, Entitlements will output your sets to LDAP.

See the OpenLDAP documentation for more on LDAP.

Plugins

Entitlements is a pluggable system. Plugins can be built for additional inputs and outputs.

For more on building plugins, see plugins

Contributing

Please see CONTRIBUTING for details.

Security

We take security very seriously. Please see SECURITY for details on how to proceed if you find a security issue.

gitignore

A collection of useful .gitignore templates

copilot-docs

Documentation for GitHub Copilot

docs

The open-source repo for docs.github.com

opensource.guide

📚 Community guides for open source creators

gh-ost

GitHub's Online Schema-migration Tool for MySQL

linguist

Language Savant. If your repository's language is being reported incorrectly, send us a pull request!

semantic

Parsing, analyzing, and comparing source code across many languages

copilot.vim

Neovim plugin for GitHub Copilot

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

roadmap

GitHub public roadmap

scientist

🔬 A Ruby library for carefully refactoring critical paths.

personal-website

Code that'll help you kickstart a personal website that showcases your work as a software developer.

markup

Determines which markup library to use to render a content file (e.g. README) on GitHub

dmca

Repository with text of DMCA takedown notices as received. GitHub does not endorse or adopt any assertion contained in the following notices. Users identified in the notices are presumed innocent until proven guilty. Additional information about our DMCA policy can be found at

DIGITAL Command Language

swift-style-guide

**Archived** Style guide & coding conventions for Swift projects

gemoji

Emoji images and names.

training-kit

Open source courseware for Git and GitHub

explore

Community-curated topic and collection pages on GitHub

mona-sans

Mona Sans, a variable font from GitHub

hubot-scripts

DEPRECATED, see https://github.com/github/hubot-scripts/issues/1113 for details - optional scripts for hubot, opt in via hubot-scripts.json

choosealicense.com

A site to provide non-judgmental guidance on choosing a license for your open source project

git-sizer

Compute various size metrics for a Git repository, flagging those that might cause problems

secure_headers

Manages application of security headers with many safe defaults

gov-takedowns

Text of government takedown notices as received. GitHub does not endorse or adopt any assertion contained in the following notices.

archive-program

The GitHub Archive Program & Arctic Code Vault

scripts-to-rule-them-all

Set of boilerplate scripts describing the normalized script pattern that GitHub uses in its projects.

hotkey

Trigger an action on an element with a keyboard shortcut.

relative-time-element

Web component extensions to the standard <time> element.

janky

Continuous integration server built on top of Jenkins and Hubot

github-elements

GitHub's Web Component collection.

renaming

Guidance for changing the default branch name for GitHub repositories

view_component

A framework for building reusable, testable & encapsulated view components in Ruby on Rails.

VisualStudio

GitHub Extension for Visual Studio

glb-director

GitHub Load Balancer Director and supporting tooling.

SoftU2F

Software U2F authenticator for macOS

accessibilityjs

Client side accessibility error scanner.

CodeSearchNet

Datasets, tools, and benchmarks for representation learning of code.

Jupyter Notebook

balanced-employee-ip-agreement

GitHub's employee intellectual property agreement, open sourced and reusable

github-services

Legacy GitHub Services Integration

platform-samples

A public place for all platform sample projects.

hubot-sans

Hubot Sans, a variable font from GitHub

pages-gem

A simple Ruby Gem to bootstrap dependencies for setting up and maintaining a local Jekyll environment in sync with GitHub Pages

india

GitHub resources and information for the developer community in India

haikus-for-codespaces

site-policy

Collaborative development on GitHub's site policies, procedures, and guidelines

government.github.com

Gather, curate, and feature stories of public servants and civic hackers using GitHub as part of their open government innovations

advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

objective-c-style-guide

**Archived** Style guide & coding conventions for Objective-C projects

covid19-dashboard

A site that displays up to date COVID-19 stats, powered by fastpages.

Jupyter Notebook

lightcrawler

Crawl a website and run it through Google lighthouse

rest-api-description

An OpenAPI description for GitHub's REST API

feedback

Public feedback discussions for: GitHub for Mobile, GitHub Discussions, GitHub Codespaces, GitHub Sponsors, GitHub Issues and more!

developer.github.com

GitHub Developer site

backup-utils

GitHub Enterprise Backup Utilities

brubeck

A Statsd-compatible metrics aggregator

dev

Press the . key on any repo

catalyst

Catalyst is a set of patterns and techniques for developing components within a complex application.

codeql-action

Actions for running CodeQL analysis

securitylab

Resources related to GitHub Security Lab

opensourcefriday

🚲 Contribute to the open source community every Friday

graphql-client

A Ruby library for declaring, composing and executing GraphQL queries

Rebel

Cocoa framework for improving AppKit

gh-actions-importer

GitHub Actions Importer helps you plan and automate the migration of Azure DevOps, Bamboo, Bitbucket, CircleCI, GitLab, Jenkins, and Travis CI pipelines to GitHub Actions.

licensed

A Ruby gem to cache and verify the licenses of dependencies

.github

Community health files for the @GitHub organization

swordfish

EXPERIMENTAL password management app. Don't use this.

details-dialog-element

A modal dialog that's opened with <details>.

stack-graphs

Rust implementation of stack graphs

codeql-cli-binaries

Binaries for the CodeQL CLI

github-ds

A collection of Ruby libraries for working with SQL on top of ActiveRecord's connection

email_reply_parser

Small library to parse plain text email content

vulcanizer

GitHub's ops focused Elasticsearch library

github-ospo

Helping open source program offices get started

webauthn-json

🔏 A small WebAuthn API wrapper that translates to/from pure JSON using base64url.

gh-copilot

Ask for assistance right in your terminal.

rubocop-github

Code style checking for GitHub's Ruby projects

safe-settings

codespaces-jupyter

Explore machine learning and data science with Codespaces

Jupyter Notebook

dat-science

Replaced by https://github.com/github/scientist

maven-plugins

Official GitHub Maven Plugins

details-menu-element

A menu opened with <details>.

trilogy

Trilogy is a client library for MySQL-compatible database servers, designed for performance, flexibility, and ease of embedding.

freno

freno: cooperative, highly available throttler service

smimesign

An S/MIME signing utility for use with Git

brasil

Recursos e informações do GitHub para a comunidade de desenvolvedores no Brasil.

gh-valet

Valet helps facilitate the migration of Azure DevOps, CircleCI, GitLab CI, Jenkins, and Travis CI pipelines to GitHub Actions.

include-fragment-element

A client-side includes tag.

covid-19-repo-data

Data archive of identifiable COVID-19 related public projects on GitHub

vscode-github-actions

GitHub Actions extension for VS Code

vscode-codeql-starter

Starter workspace to use with the CodeQL extension for Visual Studio Code.

how-engineering-communicates

A community version of the "common API" for how the GitHub Engineering organization communicates

Archimedes

Geometry functions for Cocoa and Cocoa Touch

codeql-go

The CodeQL extractor and libraries for Go.

open-source-survey

The Open Source Survey

synsanity

netfilter (iptables) target for high performance lockless SYN cookies for SYN flood mitigation

MVG

MVG = Minimum Viable Governance

issue-metrics

Gather metrics on issues/prs/discussions such as time to first response, count of issues opened, closed, etc.

roskomnadzor

deprecated archive — moved to https://github.com/github/gov-takedowns/tree/master/Russia

clipboard-copy-element

Copy element text content or input values to the clipboard.

codespaces-react