Remove all GitHub code scanning analysis results for a given repository and organization

gh_delete_all_analysis.sh

#!/bin/bash -e

# Remove all GitHub code scanning analysis results for a given repository and organization.
#
# The script assumes that github-cli (https://github.com/cli/cli) is installed and that authentication has already been
# performed. You might still need to request additional permissions as follows:
#
# gh auth refresh -h github.com -s admin:repo_hook
# gh auth refresh -h github.com -s delete_repo

APPLICATION_NAME=$0
ORGANIZATION=$1
REPOSITORY=$2
TOOL_NAME=$3

function print_help {
  echo "usage: $APPLICATION_NAME <organization> <repository> <tool_name>"
  echo "    organization                Name of a GitHub organization."
  echo "    repo                        Name of a GitHub repository."
  echo "    tool_name                   Name of the tool analyses to delete."
  exit 1
}

function get_analysis_ids {
  ANALYSIS_IDS=$(gh api -X GET "repos/$ORGANIZATION/$REPOSITORY/code-scanning/analyses?tool_name=$TOOL_NAME&per_page=100&direction=asc" --paginate --jq='.[] | select(.deletable==true) | .id')
}

function delete_analysis_result {
  analysis_id=$1
  echo "Deleting analysis result $analysis_id"
  gh api -X DELETE "repos/$ORGANIZATION/$REPOSITORY/code-scanning/analyses/$analysis_id?confirm_delete=true" --silent
}

if [[ -z "$3" ]]; then
   print_help
fi

echo "Retrieving all analysis results in $ORGANIZATION/$REPOSITORY"

while get_analysis_ids; do
  for analysis_id in ${ANALYSIS_IDS}
  do
    delete_analysis_result "$analysis_id"
  done
done