hubcommander

by Netflix

1.3Kstars

154forks

378watchers

Updated 8 months ago

About

HubCommander is a user-extendable Slack bot that enables secure and streamlined GitHub organization management through chat-ops.

A Slack bot for GitHub organization management -- and other things too

Primary Use Case

This tool is designed for GitHub organization administrators who want to manage repositories, collaborators, and organization settings without granting broad administrative privileges. It facilitates performing privileged GitHub tasks directly from Slack, improving operational efficiency and governance. Security teams and DevOps engineers can use it to automate compliance auditing and risk assessment workflows within their GitHub organizations.

Key Features

Repository creation, deletion, and modification
Managing repository collaborators and permissions
Enabling and disabling branch protection
Listing and managing pull requests and deploy keys
Modifying repository topics and default branches
Enabling Travis CI integration on repositories
Safeguarding commands with 2FA via Duo
Extensible via plugins for additional commands

Installation

Ensure Python 3.5 or higher is installed
Obtain Slack credentials and set up Slack workspace
Create a GitHub bot user with organization owner privileges
Clone the HubCommander repository
Refer to the installation documentation at docs/installation.md for detailed setup steps
Optionally, use the provided Docker image to deploy HubCommander quickly

Usage

>_ !help

Displays a list of supported commands and usage help.

>_ !CreateRepo

Outputs help text on how to create a new GitHub repository via the bot.

Security Frameworks

TA0006 - Credential Access

TA0007 - Discovery

TA0008 - Lateral Movement

TA0040 - Impact

TA0042 - Resource Development

Usage Insights

Integrate HubCommander with CI/CD pipelines to automate compliance checks and enforce branch protection policies.
Leverage the 2FA Duo integration to enforce multi-factor authentication for high-risk GitHub operations.
Extend HubCommander plugins to automate onboarding/offboarding workflows, reducing human error in access management.
Use HubCommander’s Slack interface to enable real-time audit and alerting for repository permission changes.
Combine HubCommander with vulnerability scanning tools to trigger automated risk assessments on new repositories or collaborators.