Closed Bug 1900116 Opened 1 year ago Closed 1 year ago

Requesting GitHub membership to the mozilla org for treeherder-github-access

Categories

(mozilla.org :: Github: Administration, task)

task
Not set
normal

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: aryx, Assigned: cknowles)

Details

I've read https://wiki.mozilla.org/GitHub#Team_Maintainers_.26_Project_Leads, and need help adding a contributor to the org:

Name: treeherder-github-access
Mozilla Email: treeherder-admins@mozilla.com
Github Profile link: https://github.com/treeherder-github-access
Github Team(s) REQUIRED: Do you have a team which does not provide further access by being a member of it? There is the treeherder team but membership grants additional permissions.

The account needs to access commit history of repositories in SAML-enabled organizations, in this case in the mozilla organization, see bug 1834790.

This looks like you're trying to add a non-human (not-LDAP) user to the org - which isn't a thing. They can't SAML.

There's only a few options for non-humans.

Best is to working on app/action that does this work for you - but that's complex and takes a long time.

The next option is that you CAN add non-human users to repos as outside collaborators, which would TOTALLY allow it to get access to the commit history of the specific repositories.

Now, for proper multi-user shared access for a non-human account, security has written up a document of best practices.

Let me know if you have any quesitons.

Assignee: nobody → cknowles

Just checking in - it's been a few days, wanted to know if you had questions.

Thank you. Owners of relevant repositories will be requested to add the Github account as team members.

Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → INVALID

Just a note, not as "team" members - as that does require org membership, but instead as individual outside collaborators to the repo.

And if you need any assistance in identifying admins of the repos, please let us know.

You need to log in before you can comment on or make changes to this bug.