artis3n / ansible-collection-github

Ansible Galaxy Collection of playbooks, roles, and plugins to manage Github tasks.

Hello there.

I've been a security engineer and penetration tester and currently trick companies into letting me lead Application Security programs. You may have read an article or heard me speak about the importance of a collaborative, enablement-minded security organization.

I tend to build open source projects around improving the user experience of security tooling and integrations. The secure thing should be the easiest thing for a developer to do.

Some of my public projects include:

• artis3n.tailscale Ansible role to manage Tailscale on your servers
• digitalocean/github-oidc/vault Terraform module for GitHub OIDC auth to Hashicorp Vault from GitHub Action runners
• artis3n/ansible_galaxy_collection GitHub Action to deploy an Ansible collection to Ansible Galaxy

ansible-collection-github's Issues

See if there's a less-verbose way of invoking a lookup plugin from a collection

According to the docs, you can use the collections keyword to import a collection into a playbook to then use roles or modules by their name, but plugins must be the absolute name.

This means to use this plugin you must call

lookup('artis3n.github_version.github_version', 'ansible/ansible')

which is much too verbose. Wait and see what it looks like in a week with Ansible 2.9's official release. In the worst case, at least change the name of the collection so it makes more sense. Maybe artis3n.plugins.github_version or artis3n.github.release_version.

Support an optional Github token variable to use against private repositories

Add tests

:ashamed:

Ansible 2.9 doesn't install the collection

if [ ! -d ./collections/ansible_collections/artis3n/github_version ]; then ~/.local/bin/pipenv run ansible-galaxy collection install artis3n.github_version; fi;
- downloading role 'collection', owned by 
[WARNING]: - collection was NOT installed successfully: Content has no field named 'owner'

Googling this error only shows issues for installing roles and, in every case that I've seen, it was because users were using name-thing instead of name.thing. That is not the case here. Ansible Galaxy's generated command ansible-galaxy collection install artis3n.github_version is failing.