introducing laravel moat as an open source maintainer, recent supply chain attacks in the ecosystem made me want a simple cli to audit the security of my GitHub organizations and repositories built in Rust. for any open source project on GitHub

moat checks the things that are easy to miss 2FA, branch protection, signed commits, secret scanning, Dependabot, workflow permissions, pinned actions, webhooks, and more available now:

Neat! What's the differentiator to

wow, this is so motivating getting out of the comfort zone and seeing you build such solid software in languages other than PHP reminds me that anything is possible; CONQUER! 🔥

Could definitely enhance this using `gh api` cli to configure recommended settings, like this one for setting "Workflow permissions"

Nuno on the ball! Lets gooo!

Is this your project? You should support him. 0x8112bce2c7d68a8a1d9665feadf2118641d90ba3

That's dope! I got a question though, can we DM?

Someone from the bankr community launched a coin with fees directed to you. you can use the fees towards building the platform or even integrate a token into your tech CA：0x8112bce2c7d68a8a1d9665feadf2118641d90ba3 this thread also explains a bit more.

do u know bankr？

@taylorotwell Why Rust ?

ooooo that's cool asf, I'll be using this on graph go

Automating the provisioning of repos too would be good. Using a template or set of rules perhaps

Is this any different than the one MS gives out?

Neat

Supply-chain security is becoming maintainer UX. The right tool here is boring by design: inventory org/repo settings, surface risky permissions, and make audits repeatable before the next package incident.

Finally we are seeing some Rust here, can't wait for the full framework AI rewrite 🙏