{"id":37078719,"url":"https://github.com/cdot65/scm-config-clone","last_synced_at":"2026-01-14T09:12:55.566Z","repository":{"id":257815144,"uuid":"869257433","full_name":"cdot65/scm-config-clone","owner":"cdot65","description":"A command-line tool to clone configuration objects between Palo Alto Networks Strata Cloud Manager (SCM) tenants.","archived":false,"fork":false,"pushed_at":"2025-07-18T16:28:50.000Z","size":514,"stargazers_count":2,"open_issues_count":5,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-09-29T13:18:01.989Z","etag":null,"topics":["network-automation","network-security","paloaltonetworks","prisma-access","scm"],"latest_commit_sha":null,"homepage":"https://cdot65.github.io/scm-config-clone/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cdot65.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-10-08T01:55:35.000Z","updated_at":"2025-07-18T16:28:49.000Z","dependencies_parsed_at":null,"dependency_job_id":"e1450fc1-436c-41c3-8813-d08f5d97b0ed","html_url":"https://github.com/cdot65/scm-config-clone","commit_stats":null,"previous_names":["cdot65/scm-config-clone"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/cdot65/scm-config-clone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cdot65%2Fscm-config-clone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cdot65%2Fscm-config-clone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cdot65%2Fscm-config-clone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cdot65%2Fscm-config-clone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cdot65","download_url":"https://codeload.github.com/cdot65/scm-config-clone/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cdot65%2Fscm-config-clone/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28414933,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T08:38:59.149Z","status":"ssl_error","status_checked_at":"2026-01-14T08:38:43.588Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["network-automation","network-security","paloaltonetworks","prisma-access","scm"],"created_at":"2026-01-14T09:12:54.744Z","updated_at":"2026-01-14T09:12:55.556Z","avatar_url":"https://github.com/cdot65.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# SCM Config Clone\n\n![Banner Image](https://raw.githubusercontent.com/cdot65/scm-config-clone/refs/heads/main/docs/images/logo.svg)\n\n[![Build Status](https://github.com/cdot65/scm-config-clone/actions/workflows/ci.yml/badge.svg)](https://github.com/cdot65/scm-config-clone/actions/workflows/ci.yml)\n[![PyPI version](https://badge.fury.io/py/scm-config-clone.svg)](https://badge.fury.io/py/scm-config-clone)\n[![Python versions](https://img.shields.io/pypi/pyversions/scm-config-clone.svg)](https://pypi.org/project/scm-config-clone/)\n[![License](https://img.shields.io/github/license/cdot65/scm-config-clone.svg)](https://github.com/cdot65/scm-config-clone/blob/main/LICENSE)\n\n`scm-config-clone` is a command-line tool designed to seamlessly clone configuration objects between Palo Alto Networks\nStrata Cloud Manager (SCM) tenants. From addresses and tags to application groups and security rules, this tool\nstreamlines migration tasks and reduces manual errors.\n\n## Table of Contents\n\n- [Features](#features)\n- [Installation](#installation)\n- [Docker](#docker)\n- [Basic Usage](#basic-usage)\n- [Creating the Settings File](#creating-the-settings-file)\n- [Cloning Objects](#cloning-objects)\n- [Testing](#testing)\n- [Further Reading](#further-reading)\n- [Contributing](#contributing)\n- [License](#license)\n\n## Features\n\n- **Simple Setup**: Store credentials and defaults in a `settings.yaml` file for reuse.\n- **Robust Cloning**: Supports multiple object types (addresses, tags, services, security rules, IKE \u0026 IPsec VPN configurations, and more).\n- **Extensive Filters**: Exclude specific folders, snippets, or devices to narrow down cloned objects.\n- **Flexible Controls**: Run in `dry-run` mode, auto-approve changes, suppress console output, and create reports.\n- **Commit \u0026 Push**: Automatically commit changes after objects are cloned.\n\n## Installation\n\n**Requirements**:\n\n- Python 3.10 or higher\n\nInstall directly from PyPI:\n\n```bash\npip install scm-config-clone\n```\n\n## Docker\n\n### Build Locally\n\n```powershell\n# From repository root\ndocker build -t scm-config-clone -f ./docker/Dockerfile .\n```\n\n### Pull from GitHub Container Registry\n\n```powershell\ndocker pull ghcr.io/cdot65/scm-config-clone:latest\n```\n\n### Run the CLI\n\n```powershell\ndocker run --rm ghcr.io/cdot65/scm-config-clone --help\n```\n\n### Create a settings.yaml (Windows example)\n\n`scm-clone` stores credentials in a `settings.yaml`. If you prefer, copy `settings.example.yaml` to `settings.yaml` and edit manually.\n\nTo generate it interactively, mount the current working directory into `/app` inside the container:\n\n```powershell\n# PowerShell (directory on Windows drive, e.g. C:)\ndocker run -it --rm -v \"${PWD}:/app\" ghcr.io/cdot65/scm-config-clone settings\n\n# Windows CMD\ndocker run --rm -v \"%cd%\":/app ghcr.io/cdot65/scm-config-clone settings\n```\n\nA `settings.yaml` will be generated in your current directory. Subsequent commands should include the same mount so the CLI can read the file.\n\n### Working example (clone addresses)\n\n```powershell\nPS C:\\Users\\cdot\\Documents\u003e docker run -it --rm -v \"${PWD}:/app\" ghcr.io/cdot65/scm-config-clone addresses\n🚀 Starting address objects cloning...\nName of source folder where objects are located: Austin\nName of destination folder where objects will go: Texas\nINFO:scm_config_clone.commands.objects.address:Authenticated with source SCM tenant: 1527824794\nINFO:scm_config_clone.commands.objects.address:Authenticated with destination SCM tenant: 1540792209\nINFO:scm_config_clone.commands.objects.address:Retrieved 47 address objects from source folder 'Austin'.\nINFO:scm_config_clone.commands.objects.address:Retrieved 15248 objects from destination folder 'Texas'\n╒════════════════════╤══════════════════════╕\n│ Name               │ Destination Status   │\n╞════════════════════╪══════════════════════╡\n│ snippet-object-1-1 │ x                    │\n│ snippet-object-1   │ x                    │\n│ snippet-object-2   │ x                    │\n│ snippet-object-3   │ x                    │\n│ dhcp_pool          │ x                    │\n│ bulk_address_1     │ x                    │\n│ bulk_address_2     │ x                    │\n│ bulk_address_3     │ x                    │\n│ bulk_address_4     │ x                    │\n│ bulk_address_5     │ x                    │\n│ bulk_address_6     │ x                    │\n│ bulk_address_7     │ x                    │\n│ bulk_address_8     │ x                    │\n│ bulk_address_9     │ x                    │\n│ bulk_address_10    │ x                    │\n│ bulk_address_11    │ x                    │\n│ bulk_address_12    │ x                    │\n│ bulk_address_13    │ x                    │\n│ bulk_address_14    │ x                    │\n│ bulk_address_15    │ x                    │\n│ bulk_address_16    │ x                    │\n│ bulk_address_17    │ x                    │\n│ bulk_address_18    │ x                    │\n│ bulk_address_19    │ x                    │\n│ bulk_address_20    │ x                    │\n│ bulk_address_21    │ x                    │\n│ bulk_address_22    │ x                    │\n│ bulk_address_23    │ x                    │\n│ bulk_address_24    │ x                    │\n│ bulk_address_25    │ x                    │\n│ bulk_address_26    │ x                    │\n│ bulk_address_27    │ x                    │\n│ bulk_address_28    │ x                    │\n│ bulk_address_29    │ x                    │\n│ bulk_address_30    │ x                    │\n│ bulk_address_31    │ x                    │\n│ bulk_address_32    │ x                    │\n│ bulk_address_33    │ x                    │\n│ bulk_address_34    │ x                    │\n│ bulk_address_35    │ x                    │\n│ bulk_address_36    │ x                    │\n│ bulk_address_37    │ x                    │\n│ bulk_address_38    │ x                    │\n│ bulk_address_39    │ x                    │\n│ bulk_address_40    │ x                    │\n│ bulk_address_41    │ x                    │\n│ bulk_address_42    │ x                    │\n╘════════════════════╧══════════════════════╛\nDo you want to proceed with creating these objects in the destination tenant? [y/N]: y\nINFO:scm_config_clone.commands.objects.address:No new address objects were created, skipping commit.\n🎉 Address objects cloning completed successfully! 🎉\n```\n\n### Interactive settings file creation (full flow)\n\n```powershell\nPS C:\\Users\\you\\Documents\u003e docker run -it --rm -v \"${PWD}:/app\" ghcr.io/cdot65/scm-config-clone settings\n# ...interactive prompts...\n🎉 Setup complete! 🎉\n```\n\n### Docker Usage\n\nFrom this point forward, you will need to mount your local `settings.yaml` file into the container at `/app/settings.yaml`.\n\n```powershell\nPS C:\\Users\\you\\Documents\u003e docker run -it --rm -v \"${PWD}:/app\" ghcr.io/cdot65/scm-config-clone addresses --source-folder \"Texas\"\n```\n\n\n\n\n## Basic Usage\n\nOnce installed, the primary command is `scm-clone`. Running `--help` displays global options and available sub-commands:\n\n```bash\nscm-clone --help\n```\n\nYou’ll see a list of commands like `addresses`, `tags`, `services`, `security-rules`, and `settings`.\n\n## Creating the Settings File\n\nBefore cloning, create a `settings.yaml` file to store SCM credentials and defaults:\n\n```bash\nscm-clone settings\n```\n\nYou’ll be prompted for source/destination credentials, logging level, and defaults for `auto_approve`, `create_report`,\n`dry_run`, and `quiet`. Once done, `settings.yaml` will be created in the current directory. Subsequent commands read\nfrom it, eliminating the need to re-enter credentials or defaults.\n\n## Cloning Objects\n\nWith `settings.yaml` ready, cloning objects typically involves specifying a folder and object type. For example, to\nclone address objects:\n\n```bash\nscm-clone addresses --source-folder \"Texas\"\n```\n\nIf `auto_approve` is disabled by default in `settings.yaml`, you’ll be prompted before actual creation. If you wish to\noverride this at runtime:\n\n```bash\nscm-clone addresses --source-folder \"Texas\" -A\n```\n\nThis command auto-approves without prompting. Similarly, to run in dry-run mode or commit after creation:\n\n```bash\nscm-clone addresses --source-folder \"Texas\" -D --commit-and-push\n```\n\nThis simulates the creation without applying changes (`-D`) and would commit changes if actually applied. Remove `-D` to\nrun it for real.\n\n## Testing\n\nThe project includes a comprehensive test suite with both unit and integration tests. Tests are written using pytest and use Factory Boy for creating test objects.\n\nTo run the tests:\n\n```bash\n# Install development dependencies\npoetry install\n\n# Run all tests with coverage\n./run_tests.sh\n\n# Run only unit tests\n./run_tests.sh unit\n\n# Run only integration tests\n./run_tests.sh integration\n```\n\nFor more details about the test suite, see [tests/README.md](tests/README.md).\n\n## Further Reading\n\n- [Commands Reference](https://cdot65.github.io/scm-config-clone/user-guide/python/commands/): Detailed command flags,\n  workflows, and parameters.\n- [Examples](https://cdot65.github.io/scm-config-clone/user-guide/python/examples/): Practical, real-world usage\n  patterns and integrations.\n- [Getting Started](https://cdot65.github.io/scm-config-clone/user-guide/python/getting-started/): Step-by-step guide to\n  initial setup and cloning workflows.\n\n## Contributing\n\nContributions are welcome! Please see the [CONTRIBUTING](CONTRIBUTING.md) file for guidelines.\n\n## License\n\n`scm-config-clone` is licensed under the Apache 2.0 License. See the [LICENSE](./LICENSE) file for more details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcdot65%2Fscm-config-clone","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcdot65%2Fscm-config-clone","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcdot65%2Fscm-config-clone/lists"}