Add organization repository report workflow and report generation script

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: chore
+  - package-ecosystem: pip
+    directory: /reporting
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: chore

.github/workflows/org-repo-report.yml

@@ -0,0 +1,88 @@
+name: Organization Repository Report
+
+on:
+  schedule:
+    - cron: '0 6 * * 1'
+
+permissions:
+  contents: write
+  pull-requests: read
+
+concurrency:
+  group: org-repo-report-github-org-stats
+  cancel-in-progress: true
+
+jobs:
+  generate-org-repo-report:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GH_TOKEN }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Detect report script changes
+        if: ${{ github.event_name == 'pull_request' }}
+        id: report-script-changes
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const files = await github.paginate(github.rest.pulls.listFiles, {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+              per_page: 100,
+            });
+
+            const reportScriptChanged = files.some(
+              (file) => file.filename === 'reporting/generate_org_repo_report.py'
+            );
+
+            core.info(`report_script changed: ${reportScriptChanged}`);
+            core.setOutput('report_script', reportScriptChanged ? 'true' : 'false');
+
+      - name: Run report script tests
+        if: ${{ github.event_name == 'pull_request' && steps.report-script-changes.outputs.report_script == 'true' }}
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r reporting/requirements-dev.txt
+          ruff check reporting
+          mypy reporting/generate_org_repo_report.py
+          pytest -q reporting/tests
+
+      - name: Generate report
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          ORG_NAME: morganstanley
+          OUTPUT_CSV: reporting/org-repo-report.csv
+          OUTPUT_MD: reporting/org-repo-report.md
+        run: python reporting/generate_org_repo_report.py
+
+      - name: Upload report artifacts for PR validation
+        if: ${{ github.event_name == 'pull_request' }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: org-repo-report
+          path: |
+            reporting/org-repo-report.csv
+            reporting/org-repo-report.md
+
+      - name: Commit and push report
+        if: ${{ github.event_name != 'pull_request' }}
+        run: |
+          set -euo pipefail
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git checkout -B github-org-stats
+          git add reporting/org-repo-report.csv reporting/org-repo-report.md
+          if git diff --cached --quiet; then
+            echo "No report changes to commit."
+            exit 0
+          fi
+          git commit -m "chore(reporting): update organization repository report"
+          git push origin HEAD:github-org-stats

.gitignore

@@ -0,0 +1,2 @@
+__pycache__/
+*.py[cod]