4 ms·
This is a huge issue for us at the Linux Foundation. Infra accounts make enforcing MFA for orgs impossible Even if I could do classes of accounts. Owners and a
by RyJones 10y ago
This is a huge issue for us at the Linux Foundation. Infra accounts make enforcing MFA for orgs impossible
Even if I could do classes of accounts. Owners and admins, MFA required. Users (bots) that just update CI status, not required.
- sciurus 10y agoFor CI bots I think in the future you will be able to build an "integration" instead of using a user account. From the blog post "We’re rethinking our integrations model to provide better ways for tools to extend and integrate with GitHub. We’ve added the ability for an integration to act on its own behalf instead of impersonating a user—making it a first class actor on GitHub without using a paid seat. Admins will have the ability to configure integrations directly on Organizations and control which repositories they allow access to." https://developer.github.com/changes/2016-09-14-Integrations-Early-Access/ https://developer.github.com/changes/2016-09-14-Integrations... https://developer.github.com/early-access/integrations/ https://developer.github.com/early-access/integrations/
- WorldMaker 10y agoAlso mentioned in the announcement is that bots and integrations won't need their own user accounts or to impersonate users in the (near?) future.