You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm one of the few lucky ones who has access to those build/github-bot secrets.
Should we expand the access to @nodejs-github-bot setting to other teams (Build and TSC)? (to be clear, I'm referring to the GitHub Profile, not to the nodejs/github-bot server. Those are separate things as the @nodejs-github-bot can be used by other applications as well)
Should we expand the access to @nodejs-github-bot setting to other teams (Build and TSC)?
I'd love for more people to get involved in general!
At the moment, those secrets are part of the secrets-repo in a dedicated build/github-bot directory which has its own set of GPG keys. That means not everyone in Build gets access automatically, but those who has shown interest and thereby have gotten their GPG key added specifically. It's a smaller group, some from current/emeriti TSC members and Build.
The @nodejs-github-bot account credentials are available in that directory.
SSH access credentials should be on the secrets repo, but IMO the github-bot account credentials should go to LastPass or 1Password. @bnb do you think we could add this password to 1Password? How granular are the permissions on 1Password?
@mmarchini we can limit to only groups having access to single vaults. Other groups won’t have access. The only people who’d be able to see the context outside of the people with access would be owners - so, currently, the chair people of the two committees.
a) Create personal tokens on github-bot
b) Add secrets to a repository
I requested access to the github-bot secrets, as soon as I'm granted access I could create the tokens and set it up in this repository, but it's not clear if we need to wait for approval or objections (and for how long we need to wait).
Activity
mmarchini commentedon Jun 29, 2020
I think we need to generate the secrets for
@nodejs-github-bot. I'm not sure who has the password to that account.Trott commentedon Jun 29, 2020
/ping @nodejs/github-bot
phillipj commentedon Jun 29, 2020
I'm one of the few lucky ones who has access to those build/github-bot secrets.
Not entirely sure what we're talking about here.. But trying to read between the lines, based off of what we usually do with secrets;
cclauss commentedon Jun 29, 2020
3. Someone needs the secret to configurehttps://github.com/nodejs/reliability/tree/master/.github/workflowsmmarchini commentedon Jun 29, 2020
Should we expand the access to
@nodejs-github-botsetting to other teams (Build and TSC)? (to be clear, I'm referring to the GitHub Profile, not to the nodejs/github-bot server. Those are separate things as the@nodejs-github-botcan be used by other applications as well)phillipj commentedon Jun 29, 2020
I'd love for more people to get involved in general!
At the moment, those secrets are part of the secrets-repo in a dedicated
build/github-botdirectory which has its own set of GPG keys. That means not everyone in Build gets access automatically, but those who has shown interest and thereby have gotten their GPG key added specifically. It's a smaller group, some from current/emeriti TSC members and Build.The
@nodejs-github-botaccount credentials are available in that directory.mmarchini commentedon Jun 29, 2020
SSH access credentials should be on the secrets repo, but IMO the github-bot account credentials should go to LastPass or 1Password. @bnb do you think we could add this password to 1Password? How granular are the permissions on 1Password?
bnb commentedon Jun 29, 2020
@mmarchini we can limit to only groups having access to single vaults. Other groups won’t have access. The only people who’d be able to see the context outside of the people with access would be owners - so, currently, the chair people of the two committees.
mmarchini commentedon Jun 29, 2020
We might need to clarify the process to:
a) Create personal tokens on
github-botb) Add secrets to a repository
I requested access to the github-bot secrets, as soon as I'm granted access I could create the tokens and set it up in this repository, but it's not clear if we need to wait for approval or objections (and for how long we need to wait).
mmarchini commentedon Jul 25, 2020
Secrets created, but the Action is still failing. I'll open another issue to investigate that.