pip install requests tqdm

#!/usr/bin/env python3
import os, subprocess, requests, json
from tqdm import tqdm

GITHUB_TOKEN = os.getenv("GH_TOKEN")
GITLAB_TOKEN = os.getenv("GL_TOKEN")
GITLAB_URL   = "https://gitlab.example.com/api/v4"

def list_github_repos(org):
    url = f"https://api.github.com/orgs/{org}/repos?per_page=100"
    repos = []
    while url:
        r = requests.get(url, headers={"Authorization": f"token {GITHUB_TOKEN}"})
        r.raise_for_status()
        repos.extend(r.json())
        url = r.links.get("next", {}).get("url")
    return [repo["full_name"] for repo in repos]

def create_gitlab_project(name):
    data = {"name": name, "visibility": "private", "import_url": ""}
    r = requests.post(f"{GITLAB_URL}/projects", headers={"PRIVATE-TOKEN": GITLAB_TOKEN}, json=data)
    r.raise_for_status()
    return r.json()["ssh_url_to_repo"]

def clone_and_push(repo_full):
    # clone do GitHub
    clone_url = f"https://github.com/{repo_full}.git"
    local_dir = f"/tmp/{repo_full.split('/')[-1]}"
    subprocess.run(["git", "clone", "--mirror", clone_url, local_dir], check=True)

    # cria projeto no GitLab
    gl_repo = create_gitlab_project(repo_full.split('/')[-1])

    # push para GitLab
    subprocess.run(["git", "--git-dir", local_dir, "push", "--mirror", gl_repo], check=True)

if __name__ == "__main__":
    org = "minha-org"
    repos = list_github_repos(org)
    for repo in tqdm(repos, desc="Migrando"):
        try:
            clone_and_push(repo)
        except subprocess.CalledProcessError as e:
            print(f"Erro ao migrar {repo}: {e}")

# lista todos os projetos no GitLab e checa tamanho
curl -s --header "PRIVATE-TOKEN: $GL_TOKEN" "$GITLAB_URL/projects?per_page=100" | jq '.[] | {name: .name, size: .statistics.repository_size}'

#!/usr/bin/env python3
import re, subprocess, pathlib

# Regex simples para e‑mails e CPFs
EMAIL_RE = re.compile(r"[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+")
CPF_RE   = re.compile(r"\b\d{3}\.\d{3}\.\d{3}-\d{2}\b")

def scan_repo(path):
    result = subprocess.run(["git", "-C", str(path), "grep", "-I", "-n", "-E", r"(AWS|SECRET|TOKEN)"], capture_output=True, text=True)
    secrets = result.stdout.strip().splitlines()
    emails  = EMAIL_RE.findall(open(path / "README.md").read() if (path / "README.md").exists() else "")
    cpfs    = CPF_RE.findall(open(path / "LICENSE").read() if (path / "LICENSE").exists() else "")
    return {"secrets": secrets, "emails": emails, "cpfs": cpfs}

for repo in pathlib.Path("/tmp").glob("*.git"):
    print(f"Escaneando {repo.name} …")
    findings = scan_repo(repo)
    if any(findings.values()):
        print("  Atenção! Dados sensíveis encontrados:", findings)