From eb5d6c6dbae3d97a46054678ed1cf08b3a50888b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20Rodr=C3=ADguez?= Date: Tue, 22 Sep 2026 11:21:23 +0100 Subject: [PATCH 1/2] docs: record the awesome-entra submissions and what they required awesome-entra is read by the people who administer what IntuneGraph models, and nothing of ours was on it. Records both PRs, the sections and the format rules that list enforces, so a rejected entry is not blindly resubmitted later. Also fixes the gap that had opened between the README lead and the repository description, since the index entry has to be the same sentence as both. --- README.md | 2 +- docs/discoverability.md | 54 +++++++++++++++++++++++++++++++++++++++++ 2 files changed, 55 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 639b8cb..10201fd 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # IntuneGraph -**Turn your Microsoft Intune tenant into an interactive relationship graph.** See what actually applies to a device and *why*, preview the blast radius before you touch a group, and find the orphaned junk, all from a local, read-only snapshot. +**Turn your Microsoft Intune tenant into an interactive relationship graph.** See what applies to a device or user and why, preview the blast radius before you touch a group, and find orphaned or broken assignments. Read-only Graph, offline-capable demo, self-contained HTML viewer. Zero write scopes. [![PowerShell Gallery](https://img.shields.io/powershellgallery/v/IntuneGraphKit?label=PSGallery)](https://www.powershellgallery.com/packages/IntuneGraphKit) [![PowerShell](https://img.shields.io/badge/PowerShell-5.1%20%7C%207%2B-5391FE)](#requirements) diff --git a/docs/discoverability.md b/docs/discoverability.md index 846a341..e8a48e9 100644 --- a/docs/discoverability.md +++ b/docs/discoverability.md @@ -158,6 +158,60 @@ together rather than listing every repository flat. --- +## Index submissions + +Reach is not the metric; overlap is. A list read by the people who administer the thing +this tool models is worth more than a general-purpose one with a hundred times the stars. +The entry that matters is the one on the list the audience already reads. + +This table is the record. **Check it before submitting anywhere**, so that a rejected +entry is not cheerfully resubmitted six months later by someone who has forgotten. + +| Date | Index | Repo | Section | PR | State | +|---|---|---|---|---|---| +| 2026-09-22 | [merill/awesome-entra](https://github.com/merill/awesome-entra) | IntuneGraph | Tools -> CLI | [#27](https://github.com/merill/awesome-entra/pull/27) | Open | +| 2026-09-22 | [merill/awesome-entra](https://github.com/merill/awesome-entra) | [EntraHuntKit](https://github.com/juandresrodca/EntraHuntKit) | Tools -> Log Analytics, KQL, Logic Apps | [#28](https://github.com/merill/awesome-entra/pull/28) | Open | + +### The rules that list enforces + +Its `contributing.md` is short and it is checked. One link per pull request, which is why +these are two PRs and not one. Alphabetical ordering where the section already has it: the +CLI list does, so IntuneGraph sits between GraphRunner and JWTDetails; the KQL list does +not, so EntraHuntKit went beside the other `Entra*` entries. A stars badge, a description +ending in a full stop, no trailing whitespace, and a PR title of the form +`Add user/repo - Short repo description`. + +Two things it does not spell out, but that a maintainer looks for anyway: whether the +project credits its alternatives rather than talking past them, which is what +[`comparison.md`](comparison.md) is for, and whether a contributor arriving from the list +has somewhere to land, which is what the issue forms and pull request template under +`.github/` are for. Neither existed a fortnight ago, and submitting before they did would +have been submitting a worse repository. + +### One description, not three + +A listing is another place the project describes itself, and the quickest way to look +careless is to describe it differently in each one. So the entry text is the **repository +description, verbatim** - the same text recorded under [*Description*](#description) above, +and the same text the README opens with. Three surfaces, one sentence. + +The README lead was reworded in this commit to close a gap that had already opened between +it and the repository description; they now match word for word. Changing the pitch means +changing all three in the same commit, which is the rule already stated for the Gallery +manifest and now extends to any index this project is listed in. + +### Deferring to upstream + +While submitting, EntraHuntKit's `ioc/malicious-oauth-app-ids.md` was found to be +hand-maintaining a table of Microsoft first-party app IDs, and two of its six rows had +drifted from [merill/microsoft-info](https://github.com/merill/microsoft-info), the +maintained daily-regenerated source for exactly that data. It now cites the feed rather +than restating it ([EntraHuntKit#5](https://github.com/juandresrodca/EntraHuntKit/pull/5)). + +Worth generalising: an index maintainer notices when a submission duplicates something +they already maintain. Citing it is both more accurate and a better first impression than +a copy that quietly rots. + ## Reviewing this Worth a look whenever the project gains a capability that someone would search for by From 133ab7002fdf39ca77fa60e6ce1461fa32ad0ee3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juan=20Rodr=C3=ADguez?= Date: Tue, 22 Sep 2026 11:27:45 +0100 Subject: [PATCH 2/2] docs: point the EntraHuntKit reference at the reopened PR --- docs/discoverability.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/discoverability.md b/docs/discoverability.md index e8a48e9..402e58c 100644 --- a/docs/discoverability.md +++ b/docs/discoverability.md @@ -206,7 +206,7 @@ While submitting, EntraHuntKit's `ioc/malicious-oauth-app-ids.md` was found to b hand-maintaining a table of Microsoft first-party app IDs, and two of its six rows had drifted from [merill/microsoft-info](https://github.com/merill/microsoft-info), the maintained daily-regenerated source for exactly that data. It now cites the feed rather -than restating it ([EntraHuntKit#5](https://github.com/juandresrodca/EntraHuntKit/pull/5)). +than restating it ([EntraHuntKit#6](https://github.com/juandresrodca/EntraHuntKit/pull/6)). Worth generalising: an index maintainer notices when a submission duplicates something they already maintain. Citing it is both more accurate and a better first impression than