Skills · SkillEveryday codingTesting & SecurityReviewed

security-ownership-map

Build a people-to-file security ownership map from git history: bus factor, sensitive-code ownership, exported as CSV or JSON.

View on GitHub

Kind: Skill
Works with: Codex, Claude Code
Source: openai/skills @ 49f948faa925
Path: skills/.curated/security-ownership-map/SKILL.md
License: Apache-2.0
Jobs: Review

InstallCopy it from the source repository, or sign in and let the assistant adapt it for your project.

# Security Ownership Map

## Overview

Build a bipartite graph of people and files from git history, then compute ownership risk and export graph artifacts for Neo4j/Gephi. Also build a file co-change graph (Jaccard similarity on shared commits) to cluster files by how they move together while ignoring large, noisy commits.

## Requirements

- Python 3
- `networkx` (required; community detection is enabled by default)

Install with:

```bash
pip install networkx
```

## Workflow

1. Scope the repo and time window (optional `--since/--until`).
2. Decide sensitivity rules (use defaults or provide a CSV config).
3. Build the ownership map with `scripts/run_ownership_map.py` (co-change graph is on by default; use `--cochange-max-files` to ignore supernode commits).
4. Communities are computed by default; graphml output is optional (`--graphml`).
5. Query the outputs with `scripts/query_ownership.py` for bounded JSON slices.
6. Persist and visualize (see `references/neo4j-import.md`).
…