{"id":49075263,"url":"https://github.com/mangobanaani/ai-scrummaster","last_synced_at":"2026-04-20T09:36:21.152Z","repository":{"id":349235167,"uuid":"1201566390","full_name":"mangobanaani/ai-scrummaster","owner":"mangobanaani","description":"AI-powered scrum master that automates GitHub project management","archived":false,"fork":false,"pushed_at":"2026-04-04T22:51:55.000Z","size":52,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-04-04T23:28:01.282Z","etag":null,"topics":["ai","automation","crewai","devops","devsecops","fastapi","github","ollama","project-management","scrum"],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mangobanaani.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-04-04T21:12:59.000Z","updated_at":"2026-04-04T22:51:59.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/mangobanaani/ai-scrummaster","commit_stats":null,"previous_names":["mangobanaani/ai-scrummaster"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/mangobanaani/ai-scrummaster","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mangobanaani%2Fai-scrummaster","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mangobanaani%2Fai-scrummaster/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mangobanaani%2Fai-scrummaster/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mangobanaani%2Fai-scrummaster/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mangobanaani","download_url":"https://codeload.github.com/mangobanaani/ai-scrummaster/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mangobanaani%2Fai-scrummaster/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32041842,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-20T00:18:06.643Z","status":"online","status_checked_at":"2026-04-20T02:00:06.527Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ai","automation","crewai","devops","devsecops","fastapi","github","ollama","project-management","scrum"],"created_at":"2026-04-20T09:36:18.987Z","updated_at":"2026-04-20T09:36:21.129Z","avatar_url":"https://github.com/mangobanaani.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AI Scrum Master\n\n[![CI](https://github.com/mangobanaani/ai-scrummaster/actions/workflows/ci.yml/badge.svg)](https://github.com/mangobanaani/ai-scrummaster/actions/workflows/ci.yml)\n[![Release](https://github.com/mangobanaani/ai-scrummaster/actions/workflows/release.yml/badge.svg)](https://github.com/mangobanaani/ai-scrummaster/actions/workflows/release.yml)\n[![GitHub release](https://img.shields.io/github/v/release/mangobanaani/ai-scrummaster)](https://github.com/mangobanaani/ai-scrummaster/releases)\n[![Python 3.12+](https://img.shields.io/badge/python-3.12%2B-blue)](https://www.python.org)\n[![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)\n\nAn AI-powered scrum master that automates GitHub project management — triaging issues, decomposing stories into tickets, detecting duplicates, running security checks on pull requests, and maintaining project hygiene.\n\n## What it does\n\n- **Story decomposition** — submit a plain-text feature description and the crew breaks it down into epics, stories, and tasks, creates GitHub issues with labels, and links sub-issues automatically\n- **Deduplication** — before creating tickets, existing open issues are checked for overlap (Jaccard similarity) so the same story can be submitted multiple times safely\n- **Triage** — incoming GitHub webhook events are classified and routed to the appropriate handler\n- **DevSecOps** — pull requests and issues are scanned for secrets (17 regex patterns), CVEs via the OSV API (with CVSS vector severity parsing), OWASP categories, and branch naming policy violations\n- **Security scan** — on-demand repository scan fetches dependency manifests (requirements.txt, package.json, go.mod) and checks for known vulnerabilities\n- **Maintenance** — detects stale issues, enforces WIP limits, and auto-closes abandoned issues based on configurable policy\n- **Standup** — generates daily standup summaries from recent issue and PR activity\n\n## Architecture\n\n```\nPOST /stories      →  story decomposer agent  →  GitHub issues (with sub-issue linking)\nPOST /webhook      →  triage agent  →  dedup + devsecops + action agents\nPOST /scan         →  fetch dep files  →  CVE scan  →  findings summary\nPOST /maintenance  →  stale/WIP check  →  maintenance agent  →  nudge/close issues\nPOST /standup      →  recent activity  →  standup agent  →  summary issue\n```\n\nAgents are built with [CrewAI](https://github.com/crewai-ai/crewai) and run against a local [Ollama](https://ollama.com) instance. GitHub interactions use the REST API and an MCP server (SSE transport).\n\n## Requirements\n\n- Python 3.12+\n- Docker and Docker Compose\n- A GitHub personal access token with `repo` scope\n- Ollama running `qwen2.5:27b` (production) or `qwen2.5:7b` (development)\n\n## Setup\n\nCopy `.env.example` to `.env` and fill in the values:\n\n```\nGITHUB_TOKEN=ghp_...\nGITHUB_WEBHOOK_SECRET=your-webhook-secret\nAPI_KEY=your-api-key\nOLLAMA_BASE_URL=http://ollama:11434\nOLLAMA_MODEL=qwen2.5:27b\nMCP_SERVER_URL=http://github-mcp:3000\n```\n\nAll three credential fields (`GITHUB_TOKEN`, `GITHUB_WEBHOOK_SECRET`, `API_KEY`) are required — the app will fail to start if any are missing.\n\nStart the stack:\n\n```bash\ndocker compose up -d\n```\n\n## Usage\n\n### Decompose a story into tickets\n\n```bash\ncurl -X POST http://localhost:8000/stories \\\n  -H \"Content-Type: application/json\" \\\n  -H \"X-Api-Key: your-api-key\" \\\n  -d '{\"repo\":\"owner/repo\",\"story\":\"As a user I want to log in with email and password.\"}'\n```\n\n### Trigger a security scan\n\n```bash\ncurl -X POST http://localhost:8000/scan \\\n  -H \"Content-Type: application/json\" \\\n  -H \"X-Api-Key: your-api-key\" \\\n  -d '{\"repo\":\"owner/repo\"}'\n```\n\n### Run maintenance\n\n```bash\ncurl -X POST http://localhost:8000/maintenance \\\n  -H \"Content-Type: application/json\" \\\n  -H \"X-Api-Key: your-api-key\" \\\n  -d '{\"repo\":\"owner/repo\"}'\n```\n\n### Generate a standup summary\n\n```bash\ncurl -X POST http://localhost:8000/standup \\\n  -H \"Content-Type: application/json\" \\\n  -H \"X-Api-Key: your-api-key\" \\\n  -d '{\"repo\":\"owner/repo\",\"since_hours\":24}'\n```\n\nThe `since_hours` parameter accepts an integer between 1 and 720 (default: 24).\n\n### GitHub webhook\n\nPoint your repository webhook at `POST /webhook` with `application/json` content type and the same secret as `GITHUB_WEBHOOK_SECRET`. Supported events: `issues`, `pull_request`, `push`.\n\n## Policy configuration\n\nEdit `policies/rules.yaml` to configure:\n\n- **WIP limits** — per-label caps on open issues (e.g., feature: 5, bug: 10)\n- **Stale thresholds** — days before nudge (default: 7) and auto-close (default: 30)\n- **Branch naming** — regex pattern for allowed branch names\n- **CVE policy** — severity levels that trigger automatic ticket creation\n- **Dedup threshold** — confidence level for LLM-based duplicate detection\n\n## Development\n\n```bash\npip install -e \".[dev]\"\npytest\n```\n\n## License\n\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmangobanaani%2Fai-scrummaster","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmangobanaani%2Fai-scrummaster","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmangobanaani%2Fai-scrummaster/lists"}