NeoNephos Account Administration

Tooling and process for administering organizations in the NeoNephos GitHub Enterprise.

Contents

• Member, team & permission management — managed as code with Peribolos. Each org's membership lives in orgs/<org>/org.yaml; changes go through a PR that runs a dry-run reconcile, and apply happens on merge. See docs/peribolos-setup.md.
• Org migration — guideline and issue template for transferring an organization into the enterprise. See docs/migration-guideline.md.

Quick start

# Dry-run what would change for an org (needs GITHUB_TOKEN with org admin scope)
task reconcile ORG=neonephos

# Validate all org configs (no network)
task validate

Managing an org's members or teams is a pull request against orgs/<org>/org.yaml. The full workflow, GitHub App setup, safety rails, and schema are documented in docs/peribolos-setup.md.

Layout

orgs/<org>/org.yaml         # source of truth: members, admins, teams, permissions
Taskfile.yml                # validate / dump / reconcile (needs go-task)
admin/github-app/           # GitHub App creation guide
.github/workflows/          # peribolos.yml (PR dry-run + apply on merge)
CODEOWNERS                  # approval gates
docs/                       # setup + migration guides