Add training request workflow

.github/workflows/acknowledgment-request-template.md

@@ -9,7 +9,7 @@ TEAM_MEMBERS=$(gh api orgs/yeatmanlab/teams/roar/members --jq '.[].login')
 
 for MEMBER in $TEAM_MEMBERS
 do
-  ISSUE_BODY="Please acknowledge that you have reviewed the Data Privacy and Information Security Manual and accompanying documents by commenting 'Acknowledged' below."
-  gh issue create --title "Acknowledgment Request for $MEMBER" --body "$ISSUE_BODY" --assignee $MEMBER
+  ISSUE_BODY="@$MEMBER, it is time for the quarterly review of ROAR's information security materials. Please review the Data Privacy and Information Security Manual and SDLC policies in this repository. When you are done, comment 'Confirmed' below and a bot will take care of closing this issue."
+  gh issue create --title "Acknowledgment request for $MEMBER" --body "$ISSUE_BODY" --assignee $MEMBER
 done
 ```

.github/workflows/log-acknowledgment.yml

@@ -10,9 +10,9 @@ jobs:
 
     # First, we add conditions to check if the comment contains "Acknowledged",
     # if the comment comes from the assignee, and if the issue is an acknowledgment issue.
-    if: contains(github.event.comment.body, 'Acknowledged') && 
+    if: contains(github.event.comment.body, 'Confirmed') && 
         github.event.issue.assignee.login == github.event.comment.user.login &&
-        contains(github.event.issue.title, 'Acknowledgment')
+        contains(github.event.issue.title, 'Acknowledgment request')
 
     steps:
       - name: Checkout repository

.github/workflows/request-acknowledgment.yml

@@ -1,8 +1,8 @@
-name: Annual Employee Acknowledgment
+name: Request Employee Acknowledgment
 
 on:
   schedule:
-    - cron: '0 0 1 1,7 *'  # Runs at midnight on January 1st and July 1st every year
+    - cron: '0 0 1 1,4,7,10 *'  # Runs at midnight on January 1st and July 1st every year
   workflow_dispatch:   # This enables manual triggering
 
 

.github/workflows/request-sisa-training.yml

@@ -0,0 +1,34 @@
+name: Request SISA Training Confirmation
+
+on:
+  schedule:
+    - cron: '0 0 1 1 *'  # Runs at midnight on January 1st and July 1st every year
+  workflow_dispatch:   # This enables manual triggering
+
+
+jobs:
+  create-issues:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install GitHub CLI
+        run: sudo apt-get install gh
+
+      - name: Read issue body
+        id: acknowledgment_request
+        run: |
+          CONTENT=$(cat .github/workflows/sisa-training-request-template.md)
+          echo "content<<EOF" >> $GITHUB_ENV
+          echo "$CONTENT" >> $GITHUB_ENV
+          echo "EOF" >> $GITHUB_ENV
+
+      - name: Get team members and create issues
+        env:
+          ISSUE_BODY: ${{ env.content }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh issue create --title "Create SISA Training Requests" --body "$ISSUE_BODY" --assignee richford
+

.github/workflows/sisa-training-request-template.md

@@ -0,0 +1,15 @@
+# Generate infosec acknowledgment issues
+
+It's time to generate SISA training issues for all of the ROAR developers.
+
+Perform these commands on your command line:
+
+```shell
+TEAM_MEMBERS=$(gh api orgs/yeatmanlab/teams/roar-maintainers/members --jq '.[].login')
+
+for MEMBER in $TEAM_MEMBERS
+do
+  ISSUE_BODY="@$MEMBER, it's time for your annual Information Security Training. Please complete a course from the [Stanford Information Security Academy](https://uit.stanford.edu/sisa/training_and_education). When you are done, confirm your training by adding a row to the sisa-training-log.md file in this repository."
+  gh issue create --title "Training request for $MEMBER" --body "$ISSUE_BODY" --assignee $MEMBER
+done
+```

sisa-training-log.md

@@ -0,0 +1,5 @@
+# ROAR Information Security Training Log
+
+| Developer Name      | Date       | Training Completed            |
+| :------------------ | :--------- | :---------------------------- |
+| Adam Richie-Halford | 2024-10-19 | SISA - Information Security I |