Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request 'sethmlarson' be added as repo admin #1363

Merged
merged 1 commit into from
Aug 6, 2024

Conversation

sethmlarson
Copy link
Contributor

@sethmlarson sethmlarson commented Aug 6, 2024

This is a request to add myself as a repository admin to the python/cpython repository to be able to evaluate GitHub Security Advisories (GHSA) for a Python Security Response Team ticketing system.

GHSA is a strange feature, where only admins have the ability to "accept" reports and close tickets, even when other users and teams are added as "Collaborators" to a specific ticket (from what I can see, collaborators only have the ability to edit an advisory but not)

I wanted to add bedevere-like commands to the PSRT GitHub bot that collaborators could type in comments in order to change the state of GHSAs, but there is no API to retrieve the comments of an advisory. This means that for now if we're going to migrate to GHSA we need an admin clicking a button sometimes. This might be okay, since it's not a departure from what PSRT admins deal with today with the PSRT mailing list (needing to accept a report before it's sent to the wider team).


📚 Documentation preview 📚: https://cpython-devguide--1363.org.readthedocs.build/

@ewdurbin ewdurbin merged commit 559bd1f into python:main Aug 6, 2024
5 checks passed
@sethmlarson sethmlarson deleted the sethmlarson-repo-admin branch August 6, 2024 21:33
@ewdurbin
Copy link
Member

ewdurbin commented Aug 6, 2024

Added @sethmlarson to @python/cpython-repository-admins, Let us know when you've completed assessment Seth.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants