sources.json

{
  "version": 2,
  "description": "OAuthSentry data sources. Curated lists are pulled by the GitHub Actions workflow on a daily cadence; the build script (scripts/build_feeds.py) merges them into the per-service CSVs that drive the feeds. The merge is opinion-aware: a curated source (mthcht's awesome-lists) wins on every AppId conflict; the merill MicrosoftApps catalogue is used as a compliance fill - it adds Microsoft first-party AppIds that the curated source has not classified, defaulting them to compliance/info. Add a new service by dropping a curated source row with role='curated' and (optionally) a compliance fill row with role='compliance_fill'.",
  "sources": [
    {
      "id": "entra_curated_mthcht",
      "service": "entra",
      "role": "curated",
      "label": "mthcht/awesome-lists - Entra OAuth apps",
      "remote": "https://raw.githubusercontent.com/mthcht/awesome-lists/main/Lists/OAuth/entra_oauth_apps.csv",
      "local": "data/entra/curated_mthcht.csv",
      "source_url": "https://github.com/mthcht/awesome-lists/blob/main/Lists/OAuth/entra_oauth_apps.csv",
      "schema": "appname,appid,metadata_category,metadata_severity,metadata_comment,metadata_reference",
      "credit": "mthcht/awesome-lists",
      "credit_url": "https://github.com/mthcht/awesome-lists/tree/main/Lists/OAuth"
    },
    {
      "id": "entra_compliance_fill_merill",
      "service": "entra",
      "role": "compliance_fill",
      "label": "merill/microsoft-info - Microsoft first-party catalogue",
      "remote": "https://raw.githubusercontent.com/merill/microsoft-info/main/_info/MicrosoftApps.csv",
      "local": "data/entra/compliance_fill_merill.csv",
      "schema": "AppId,AppDisplayName,AppOwnerOrganizationId,Source",
      "credit": "Merill Fernando - microsoft-info",
      "credit_url": "https://github.com/merill/microsoft-info"
    },
    {
      "id": "google_curated_mthcht",
      "service": "google",
      "role": "curated",
      "label": "mthcht/awesome-lists - Google OAuth apps",
      "remote": "https://raw.githubusercontent.com/mthcht/awesome-lists/main/Lists/OAuth/google_oauth_apps.csv",
      "local": "data/google/curated_mthcht.csv",
      "source_url": "https://github.com/mthcht/awesome-lists/blob/main/Lists/OAuth/google_oauth_apps.csv",
      "schema": "appname,appid,metadata_category,metadata_severity,metadata_comment,metadata_reference",
      "credit": "mthcht/awesome-lists",
      "credit_url": "https://github.com/mthcht/awesome-lists/tree/main/Lists/OAuth"
    },
    {
      "id": "slack",
      "service": "slack",
      "role": "planned",
      "label": "Slack",
      "note": "Awaiting curated source. Contributions welcome - see CONTRIBUTING.md."
    },
    {
      "id": "github_curated_seed",
      "service": "github",
      "role": "curated",
      "label": "OAuthSentry seed - GitHub OAuth apps",
      "remote": null,
      "local": "data/github/curated_seed.csv",
      "source_url": "https://github.com/oauthsentry/oauthsentry.github.io/blob/main/data/github/curated_seed.csv",
      "schema": "appname,appid,metadata_category,metadata_severity,metadata_comment,metadata_reference",
      "credit": "OAuthSentry contributors",
      "credit_url": "https://github.com/oauthsentry/oauthsentry.github.io",
      "note": "Self-maintained seed list. No upstream curator (mthcht/awesome-lists does not yet ship a github_oauth_apps.csv). Contributions welcome - see CONTRIBUTING.md."
    },
    {
      "id": "salesforce",
      "service": "salesforce",
      "role": "planned",
      "label": "Salesforce"
    },
    {
      "id": "okta",
      "service": "okta",
      "role": "planned",
      "label": "Okta"
    }
  ]
}