GitHub Enterprise Governance Automation

Overview

Automation for GitHub Enterprise Cloud at scale — org-level secrets management, third-party Action allowlisting, repository governance via identity platform, and a Python CLI toolkit for member/hooks/SSO/identity operations.

Tech Stack

Challenge

Managing hundreds of repositories, thousands of team memberships, org-level secrets, third-party Action policies, and service accounts for 2,000+ engineers — all while maintaining security compliance and audit trails.

Solution

Three interconnected systems: (1) Declarative secrets catalog with JSON-per-secret model and validation workflow, (2) Action allowlist with dual-team approval, license compliance, and overlap detection, (3) Python CLI (Click-based) for member management, webhooks, SSO/identity sync. All GitOps-based.