The [[ https://gerrit.wikimedia.org/r/admin/projects/wikimedia/security/tooling | wikimedia/security/tooling repository ]] needs some reconfiguration.
**TODO:**
[] Create separate repos for significant tools outside of the `tooling` directory, e.g. `wikimedia/security/{toolname}`. Currently, this should include:
[x] `deployer-audit` [ [[ https://gerrit.wikimedia.org/r/admin/projects/wikimedia/security/deployer-audit | new repo ]] ]
[x] `gitmonitor` [ [[ https://gerrit.wikimedia.org/r/admin/projects/wikimedia/security/gitmonitor | new repo ]] ]
[] `php-security-tools`
[x] `spamaccountstats` [ [[ https://gerrit.wikimedia.org/r/admin/projects/wikimedia/security/spamaccountstats | new repo ]] ]
[x] `usertracker` [ [[ https://gerrit.wikimedia.org/r/admin/projects/wikimedia/security/usertracker | new repo ]] ]
New repos should preserve git history, include basic CI (`tox.ini`) and have their `README`s updated, if necessary.
[] Update [[ https://gerrit.wikimedia.org/r/plugins/gitiles/wikimedia/security/tooling/+/refs/heads/master/README.md | wikimedia/security/tooling README ]] to better described how tool repositories should be organized, created and maintained.
[] Create a helpful `README` for the `wikimedia/security` repo which provides locations for current, relevant security tools.
[] Archive and delete? blank? the `wikimedia/security/automated-scanning` repository.
[] Add a new section to the #security-team [[ https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Handbook | handbook ]] which notes all of the above, upon completion.