security-ownership-map

Topics in the source

• Security Ownership Map
• Overview
• Requirements
• Workflow
• Quick start
• Sensitivity rules
• Output artifacts
• LLM query helper

Build a bipartite graph of people and files from git history, then compute ownership risk and export graph artifacts for Neo4j/Gephi. Also build a file co-change graph (Jaccard similarity on shared commits) to cluster files by how they move together while ignoring large, noisy commits. Python 3 networkx (required; community detection is enabled by default) Install with: 1. Scope the repo and time window (optional --since/--until). 2. Decide sensitivity rules (use defaults or provide a CSV config). 3. Build the ownership map with scripts/runownershipmap.py (co-change graph is on by default; use --cochange-max-files to ignore supernode commits). 4. Communities are computed by default; graphml output is optional (--graphml). 5. Query the outputs with scripts/queryownership.py for bounded JSON slices. 6. Persist and visualize (see references/neo4j-import.md). By default, the co-change graph ignores common “glue” files (lockfiles, .github/, editor config) so clusters reflect actual code movement instead of shared infra edits. Override with --cochange-exclude or --no-default-cochange-excludes. Dependabot commits are excluded by default; override with --no-default-author-excludes or add p

This is an excerpt. Refer to the complete source and its current requirements.