Richard-Barrett

#!/usr/bin/env python3
"""
Scan all repositories in one or more GitHub organizations for Terraform files.
If --old-string-map is found inside a Terraform `tags = { ... }` map or a
`tags = merge(...)` / `tags = tomap(...)` expression, replace it with
--new-string-map. With --add-tags-found-missing, add --new-string-map to literal
tag maps where that target tag is absent. Create one commit on a new branch and
open one pull request per affected repository.

Requires: requests

Richard-Barrett

Cadence GHES MFA, SSH Certificate Authority, and Credential Hardening Runbook

Environment: Cadence Design Systems
GHES hostname: github.cadence.com
Target GHES baseline: 3.18.x
Identity provider: Okta
Privileged access / machine identity: CyberArk
Purpose: Establish an enterprise authentication architecture that enforces strong MFA for humans, replaces long-lived developer SSH authentication with short-lived SSH certificates, limits personal access token exposure, and separates human from machine authentication.

---

Richard-Barrett

GHES 3.10.17 → 3.18.13

DevOps / Engineering Technical Breaking-Changes Checklist

Use this checklist to validate application, CI/CD, repository, security, authentication, API, and infrastructure compatibility after upgrading GitHub Enterprise Server from 3.10.17 to 3.18.13.

---

1. GitHub Actions

Runner Compatibility

Richard-Barrett

GHES Modernization Executive Summary

Upgrade from 3.10.17 to 3.18.13

Overview

GitHub Enterprise Server is being modernized from GHES 3.10.17 to GHES 3.18.13 using the supported feature-upgrade path:

3.10.17 → 3.12.17 → 3.14.16 → 3.16.20 → 3.18.13

Richard-Barrett

GitHub Enterprise Server 3.10.17 → 3.18.13

Major Changes, Breaking Changes, Deprecations, and Upgrade Considerations

Executive Summary

This document summarizes the major platform changes, compatibility impacts, retired functionality, breaking behavior, and operational considerations involved in moving GitHub Enterprise Server (GHES) from 3.10.17 to 3.18.13.

The supported upgrade path used for this modernization effort is:

Richard-Barrett

GHES 3.8.17 Root A/B Partition Expansion Runbook

Purpose

This runbook expands the GHES root A/B partitions on a VMware-backed GHES 3.8.17 appliance.

This procedure applies when:

• The VMware root VMDK has already been expanded.

Richard-Barrett

GitHub Enterprise Server (GHES) vs GitHub Enterprise Cloud with Enterprise Managed Users (EMU)

Table of Contents

• Executive Summary
• Architecture Overview
• Pros and Cons at a Glance
• High-Level Comparison
• GitHub Enterprise Server (GHES)
• GitHub Enterprise Managed Users (EMU)

Richard-Barrett

/var/log/syslog
/var/log/haproxy.log
/var/log/github-audit.log
{
    rotate 7
    daily
    missingok
    maxsize 1G
    notifempty
    delaycompress

Richard-Barrett

/var/log/github/exceptions.log
{
    rotate 7
    daily
    missingok
    maxsize 1G
    delaycompress
    compress
    notifempty
    copytruncate

Richard-Barrett

#!/usr/bin/env python3

"""
GHES Identity Audit

Analyzes GitHub Enterprise Server audit logs to identify:

- Users accessing public repositories
- Unlicensed users accessing public repositories
- GHES activity from AD-disabled users (optional)