{"action":"created","issue":{"url":"https://api.github.com/repos/servo/saltfs/issues/399","repository_url":"https://api.github.com/repos/servo/saltfs","labels_url":"https://api.github.com/repos/servo/saltfs/issues/399/labels{/name}","comments_url":"https://api.github.com/repos/servo/saltfs/issues/399/comments","events_url":"https://api.github.com/repos/servo/saltfs/issues/399/events","html_url":"https://github.com/servo/saltfs/issues/399","id":160940254,"number":399,"title":"Need to ensure 2fa for GH accounts with access to our build infrastructure","user":{"login":"larsbergstrom","id":475847,"avatar_url":"https://avatars.githubusercontent.com/u/475847?v=3","gravatar_id":"","url":"https://api.github.com/users/larsbergstrom","html_url":"https://github.com/larsbergstrom","followers_url":"https://api.github.com/users/larsbergstrom/followers","following_url":"https://api.github.com/users/larsbergstrom/following{/other_user}","gists_url":"https://api.github.com/users/larsbergstrom/gists{/gist_id}","starred_url":"https://api.github.com/users/larsbergstrom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/larsbergstrom/subscriptions","organizations_url":"https://api.github.com/users/larsbergstrom/orgs","repos_url":"https://api.github.com/users/larsbergstrom/repos","events_url":"https://api.github.com/users/larsbergstrom/events{/privacy}","received_events_url":"https://api.github.com/users/larsbergstrom/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-06-17T17:45:35Z","updated_at":"2016-07-03T12:54:08Z","closed_at":null,"body":"Users with 'r+', operator, or 'try' access should probably be using 2FA, as their accounts have the ability to land changes to Servo and should be protected. These users are listed here:\r\nhttps://github.com/servo/saltfs/blob/master/homu/files/cfg.toml#L69-L116\r\n\r\nOne idea is to add them to an organization group (\"infra?\") and require 2FA for that group.\r\n\r\nWe should also require this of everyone with write access to the organization, too. That has been granted more widely than is desireable due to the requirement of write/push access in order to change labels.\r\n\r\ncc @edunham @aneeshusa "},"comment":{"url":"https://api.github.com/repos/servo/saltfs/issues/comments/230152104","html_url":"https://github.com/servo/saltfs/issues/399#issuecomment-230152104","issue_url":"https://api.github.com/repos/servo/saltfs/issues/399","id":230152104,"user":{"login":"larsbergstrom","id":475847,"avatar_url":"https://avatars.githubusercontent.com/u/475847?v=3","gravatar_id":"","url":"https://api.github.com/users/larsbergstrom","html_url":"https://github.com/larsbergstrom","followers_url":"https://api.github.com/users/larsbergstrom/followers","following_url":"https://api.github.com/users/larsbergstrom/following{/other_user}","gists_url":"https://api.github.com/users/larsbergstrom/gists{/gist_id}","starred_url":"https://api.github.com/users/larsbergstrom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/larsbergstrom/subscriptions","organizations_url":"https://api.github.com/users/larsbergstrom/orgs","repos_url":"https://api.github.com/users/larsbergstrom/repos","events_url":"https://api.github.com/users/larsbergstrom/events{/privacy}","received_events_url":"https://api.github.com/users/larsbergstrom/received_events","type":"User","site_admin":false},"created_at":"2016-07-03T12:54:08Z","updated_at":"2016-07-03T12:54:08Z","body":"Yes, that's correct - any Gecko autolander account will need to have 2fa enabled. We should probably do that to bors-servo, too, though it's not entirely clear to me what the right way to 2fa \"robot\" accounts is. \r\n\r\n@edunham Do you have any ideas for this one?"}}
{"actor":{"display_login":"larsbergstrom"}}