Tutorial: Automating Configuration and Management of your GitHub...
summary
Minder is an open source platform that automates GitHub repository configuration and enforcement across dozens to hundreds of repos (users report 50–100 repos), running server-side with webhooks and a GitHub App to patch settings. It uses Rego rules (and a JQ dialect), offers a CLI and Minder Cloud UI (cloud.stacklock.com), integrates with Frisbee to pin Actions and with Dependabot/CodeQL, and performs automatic remediation (branch protection reappears in ~3–5s); PR-based and REST patch remediations exist, multi-file PR remediations are limited.
AI-written summary · about
chapters (8)
- 0:00Minder introduction
- 8:21Repository security
- 15:55Setup Minder Cloud
- 25:06Branch protection remediation
- 32:31Custom Rego rule
- 44:53Debugging Rego rules
- 50:43Security.md remediation
- 57:05Final exercise
related talks
31mGitHub as a self-sustaining product for large-scale environments
37mConfiguration as a Code: Managing Hundreds of GitHub Organizations to Streamline Supply Chain Security
25mManaging a GitHub Organization: Tools, Tips, and Best Practices
20mSetting up and managing GitHub actions for multiple projects
33mAutomated update management with
20mImprove project usability and reduce friction
17mNo More Walled Gardens: Removing Barriers with SCM...
58mProtect your code with GitHub security features