`quickstart` gets users off on the wrong foot

[evankanderson]

Describe the issue

It looks like the quickstart command (which was written in 2023) needs some updates from 2024 and 2025.

• It starts users off trying to enroll using a PAT, rather than using the GitHub App
• It doesn't leverage the resource-agnostic apply batch command, which really simplifies development.
• The setup installs a single ruletype, but doesn't really set you up for installing more or managing the existing rule. It would be better if this could pull from e.g. top-level directories with README.md files in github.com/mindersec/minder-rules-and-profiles (or some other chosen repository).
  • (IMO) it would be great to set things up with an infrastructure-as-code setup using the mindersec/minder action and some policy copied into their own repo. I have a sample of this in https://github.com/custcodian/minder-rules-and-profiles/tree/main/bootstrap (though the mermaid diagram seems a bit broken).

To Reproduce

Run minder quickstart

What version are you using?

upstream/main on 10 April

[evankanderson]

In the meantime, we should probably pull the quickstart documentation.

[sachin9058]

Hi @evankanderson, I’d like to take this up.

From what I see, the quickstart flow could be improved in a few areas — switching to GitHub App onboarding, using the batch apply command, and making rule setup more intuitive.

Would you prefer tackling this step by step (like starting with CLI changes or docs), or should it be approached as a broader redesign?

Happy to work on it either way 👍

[dakshhhhh16]

This one's accurate right?

[evankanderson]

I think it makes the most sense to approach this as a broader redesign, with the goal being to set up users with a useful Minder setup that they can feel confident in going forward.

[sachin9058]

@evankanderson I’ve started by deprecating the current quickstart docs in #6341 .

For the redesign, I’m thinking of moving toward a more declarative flow instead of a guided CLI setup:

• GitHub App–based onboarding (minder auth login)
• using minder apply with a starter configuration (e.g. bootstrap repo)
• allowing users to manage rules and profiles via config (GitOps-style)

Example: minder apply -f ./minder-config

or potentially from a maintained starter repo.

This would simplify onboarding and make it easier to scale beyond a single rule.

Happy to prototype this or break it into smaller steps depending on what makes sense.

[evankanderson]

It would be great if the quickstart command could use an in-memory clone of the target repo to get catalogs of rules and profiles to offer the user.