Skip to content

Commit

Permalink
Add bot branch protection bypass in root-signing-staging (#403)
Browse files Browse the repository at this point in the history
* Remove unused custom role

This was an attempt to allow a specific user/bot to bypass branch
protections in a repository. Luckily we should not need the role
after all.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

* Add sigstore-bot to root-signing-staging bypass list

Allow sigstore-bot to bypass required pull requests: this is for the
online signing.

Also remove sigstore-reviewe-bot: it should not be needed.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

---------

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
  • Loading branch information
jku committed Feb 16, 2024
1 parent f2a8452 commit bcd885c
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 7 deletions.
4 changes: 2 additions & 2 deletions github-sync/github-data/sigstore/repositories.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1470,8 +1470,6 @@ repositories:
permission: admin
- username: sigstore-bot
permission: push
- username: sigstore-review-bot
permission: push
teams:
- name: tuf-root-signing-staging-codeowners
id: 8790813
Expand All @@ -1497,6 +1495,8 @@ repositories:
- sigstore-bot
dismissalRestrictions:
- tuf-root-signing-staging-codeowners
pullRequestBypassers:
- sigstore-bot
- pattern: publish
enforceAdmins: true
allowsDeletions: false
Expand Down
5 changes: 0 additions & 5 deletions github-sync/github-data/sigstore/roles.yaml

This file was deleted.

0 comments on commit bcd885c

Please sign in to comment.