How in CI to know if GHAS is enabled

[jcook-uptycs]

Select Topic Area

Question

Body

I'm trying to figure out in a GitHub action/workflow how to know if GitHub advanced security is enabled.

I can't find it in a the github context.

[denisstrelnikov]

I wrote this step for that.

- name: Check if GHAS is enabled
  uses: actions/github-script@v7
  id: ghas-enabled
  with:
    script: |
      const response = await github.rest.repos.get({
        owner: '${{ github.repository }}'.split("/")[0],
        repo: '${{ github.repository }}'.split("/")[1]
      });
      const securityEnabled = response.data.security_and_analysis?.advanced_security?.status === 'enabled';
      
      if (!securityEnabled) {
        const message = 'GitHub Advanced Security is NOT enabled.';
        core.warning(message);
      }
      return securityEnabled;