meta: [jonasfj-Q2-goal] Lock down temporary credentials issues by auth.taskcluster.net

RESOLVED FIXED

Status

RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: jonasfj, Assigned: jonasfj)

Tracking

Details

(Assignee)

Description

3 years ago
Right now people get '*' scopes that's not a good idea...
(Assignee)

Comment 1

3 years ago
Fixed a while ago.

People still get wide scopes... But not "auth:*",
We should work to lock this down further, but for now this have unblocked signing server, as it can use a scope prefix not with temp creds by auth.tc.n
Status: ASSIGNED → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
Component: TaskCluster → General
Product: Testing → Taskcluster
Target Milestone: --- → mozilla41
Version: unspecified → Trunk
Resetting Version and Target Milestone that accidentally got changed...
Target Milestone: mozilla41 → ---
Version: Trunk → unspecified
You need to log in before you can comment on or make changes to this bug.