From fe15260ab756d192fc48ba8d8eec36696a8e481b Mon Sep 17 00:00:00 2001
From: Timothy Sanders <tsande16@jhu.edu>
Date: Sat, 2 Mar 2024 13:45:24 -0500
Subject: [PATCH] Update Security Scanning (#6)

* Update secret scanning

- Non-archived repos should have secret_scanning enabled

* Cleanup config by removing unnecessary settings

Signed-off-by: Thomas Neidhart <thomas.neidhart@eclipse-foundation.org>

---------

Signed-off-by: Thomas Neidhart <thomas.neidhart@eclipse-foundation.org>
Co-authored-by: Thomas Neidhart <thomas.neidhart@eclipse-foundation.org>
---
 otterdog/eclipse-pass.jsonnet | 20 --------------------
 1 file changed, 20 deletions(-)

diff --git a/otterdog/eclipse-pass.jsonnet b/otterdog/eclipse-pass.jsonnet
index 56c545a..6143e98 100644
--- a/otterdog/eclipse-pass.jsonnet
+++ b/otterdog/eclipse-pass.jsonnet
@@ -44,8 +44,6 @@ orgs.newOrg('eclipse-pass') {
       gh_pages_build_type: "legacy",
       gh_pages_source_branch: "main",
       gh_pages_source_path: "/",
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -68,8 +66,6 @@ orgs.newOrg('eclipse-pass') {
       gh_pages_build_type: "legacy",
       gh_pages_source_branch: "main",
       gh_pages_source_path: "/",
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -130,8 +126,6 @@ orgs.newOrg('eclipse-pass') {
       allow_update_branch: false,
       delete_branch_on_merge: false,
       dependabot_alerts_enabled: false,
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -143,8 +137,6 @@ orgs.newOrg('eclipse-pass') {
       allow_update_branch: false,
       delete_branch_on_merge: false,
       dependabot_alerts_enabled: false,
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -187,8 +179,6 @@ orgs.newOrg('eclipse-pass') {
       delete_branch_on_merge: false,
       dependabot_alerts_enabled: true,
       dependabot_security_updates_enabled: true,
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -277,8 +267,6 @@ orgs.newOrg('eclipse-pass') {
       delete_branch_on_merge: false,
       description: "Developer-focused PASS runtime, which provides PASS and all of its dependent services using docker-compose.  Provides Docker images used for production deployment of PASS.",
       homepage: "",
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -306,8 +294,6 @@ orgs.newOrg('eclipse-pass') {
       description: "PASS Documentation",
       dependabot_alerts_enabled: true,
       dependabot_security_updates_enabled: true,
-      secret_scanning: "enabled",
-      secret_scanning_push_protection: "enabled",
       web_commit_signoff_required: false,
     },
     orgs.newRepo('pass-doi-service') {
@@ -782,8 +768,6 @@ orgs.newOrg('eclipse-pass') {
       delete_branch_on_merge: false,
       dependabot_alerts_enabled: true,
       dependabot_security_updates_enabled: true,
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -812,8 +796,6 @@ orgs.newOrg('eclipse-pass') {
       dependabot_security_updates_enabled: true,
       description: "UI code base for PASS",
       homepage: "",
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,
@@ -856,8 +838,6 @@ orgs.newOrg('eclipse-pass') {
       delete_branch_on_merge: false,
       dependabot_alerts_enabled: false,
       description: "Test repository",
-      secret_scanning: "disabled",
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
       workflows+: {
         actions_can_approve_pull_request_reviews: false,