{"id":23340118,"url":"https://github.com/sierrasoftworks/github-automerge","last_synced_at":"2025-07-24T23:39:40.375Z","repository":{"id":37535229,"uuid":"350643492","full_name":"SierraSoftworks/github-automerge","owner":"SierraSoftworks","description":"Automatically merge dependabot pull requests across your entire organization.","archived":false,"fork":false,"pushed_at":"2025-06-24T17:14:51.000Z","size":5391,"stargazers_count":0,"open_issues_count":3,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-24T18:27:46.841Z","etag":null,"topics":["azure-functions","dependabot","github"],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/SierraSoftworks.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-03-23T08:59:27.000Z","updated_at":"2025-06-24T17:13:44.000Z","dependencies_parsed_at":"2023-09-29T20:26:20.099Z","dependency_job_id":"7e040eeb-6219-45a2-9b8f-888676c927e4","html_url":"https://github.com/SierraSoftworks/github-automerge","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/SierraSoftworks/github-automerge","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SierraSoftworks%2Fgithub-automerge","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SierraSoftworks%2Fgithub-automerge/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SierraSoftworks%2Fgithub-automerge/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SierraSoftworks%2Fgithub-automerge/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/SierraSoftworks","download_url":"https://codeload.github.com/SierraSoftworks/github-automerge/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/SierraSoftworks%2Fgithub-automerge/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262545035,"owners_count":23326660,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["azure-functions","dependabot","github"],"created_at":"2024-12-21T04:19:39.397Z","updated_at":"2025-06-29T06:07:07.616Z","avatar_url":"https://github.com/SierraSoftworks.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# GitHub Auto Merge Webhook Handler\n**Automatically merge dependabot PRs across your organization**\n\nAt Sierra Softworks, we've got hundreds of repositories, many of which use [Dependabot]\nto keep their dependencies updated. On your average day, we see anywhere from 5-20 automated\nPRs arrive and that can take a lot of time to manage.\n\nPreviously, we've used GitHub Actions to automate the process of merging these dependabot PRs,\nhowever that requires each repository to be individually configured with the necessary GitHub\nAction script - not really scalable.\n\nTo solve the problem, we've built this Azure Function which can be added as an organization-level\nwebhook handler and which will automatically (for trusted accounts) enable GitHub's built-in\nauto merge behaviour, or fall-back on using `@dependabot merge` for repos which don't have that\nenabled.\n\n## Configuration\nWhen deploying this function, you will need to provide the following configuration options:\n\n - `TRUSTED_ACCOUNTS` (default: `dependabot[bot],dependabot-preview[bot]`)\n \n   This is the comma separated list of user accounts you trust to automatically merge PRs\n   (once checks pass etc).\n\n - `GITHUB_ACCESS_TOKEN` (**required**)\n\n   This is a GitHub Personal Access Token which has the `repo` scope for your organization.\n\n - `WEBHOOK_SECRET` (**required**)\n\n   This is a secret string which will be used by GitHub to sign all webhook payloads as a means\n   of securely verifying that they were sent by GitHub. Use a secure random generator to create this.\n\n[Dependabot]: https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsierrasoftworks%2Fgithub-automerge","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsierrasoftworks%2Fgithub-automerge","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsierrasoftworks%2Fgithub-automerge/lists"}