get-organizations-repositories-codeowner-usage.sh

#!/bin/bash

# gets the codeowner usage for all repositories in all organizations in an enterprise

# need: `gh auth refresh -h github.com -s read:org -s read:enterprise`

# note: format is tsv

if [ $# -lt 1 ]; then
    echo "usage: $0 <enterprise slug> <hostname> > output.tsv"
    exit 1
fi

enterprise=$1
hostname=${2:-"github.com"}
export PAGER=""

# Define color codes
RED='\033[0;31m'
NC='\033[0m' # No Color

# we can't do everything in a single call b/c we need to paginate orgs and then paginate repos in the next query (can't do double pagination with gh api)
organizations=$(gh api graphql --paginate --hostname $hostname -f enterpriseName="$enterprise" -f query='
query getEnterpriseOrganizations($enterpriseName: String! $endCursor: String) {
  enterprise(slug: $enterpriseName) {
    organizations(first: 100, after: $endCursor) {
      nodes {
        id
        login
      }
      pageInfo {
        endCursor
        hasNextPage
      }
    }
  }
}' --jq '.data.enterprise.organizations.nodes[].login')

# check to see if organizations is null - null error message is confusing otherwise
if [ -z "$organizations" ] || [[ "$organizations" == *"INSUFFICIENT_SCOPES"* ]]; then
  echo -e "${RED}No organizations found for enterprise: $enterpriseslug${NC}"
  echo -e "${RED}  - Check that you have the proper scopes for enterprise with 'gh auth status' - you need at least 'read:enterprise'${NC}"
  echo -e "${RED}  - You can run 'gh auth refresh -h github.com -s read:org -s read:enterprise' to add the scopes${NC}"
  echo -e "${RED}  - Or you can run 'gh auth login -h github.com' and authenticate using a PAT with the proper scopes${NC}"
  exit 1
fi

echo -e "Repository\tUses Codeowners"

errors=""

for org in $organizations
do
  output=$(gh api graphql --paginate --hostname $hostname -f orgName="$org" -f query='
    query getOrganizationRepositories($orgName: String! $endCursor: String) {
      organization(login: $orgName) {
        repositories(first: 100, after: $endCursor) {
          nodes {
            nameWithOwner
            root: object(expression: "HEAD:CODEOWNERS") {
              ... on Blob {
                text
              }
            }
            github: object(expression: "HEAD:.github/CODEOWNERS") {
              ... on Blob {
                text
              }
            }
            docs: object(expression: "HEAD:docs/CODEOWNERS") {
              ... on Blob {
                text
              }
            }
          }
          pageInfo {
            endCursor
            hasNextPage
          }
        }
      }
    }' --jq '.data.organization.repositories.nodes[] | {nameWithOwner: .nameWithOwner, hasCodeowners: if .root.text or .github.text or .docs.text then "TRUE" else "FALSE" end} | [.nameWithOwner, .hasCodeowners] | @tsv' 2>&1)

  if [ $? -ne 0 ]; then
    errors="$errors\nError accessing organization: $org:\n$output"
  elif [ -n "$output" ]; then
    echo "$output"
  fi
done

if [ -n "$errors" ]; then
  echo -e "${RED}\nErrors encountered:\n$errors${NC}"
fi