adoptium / adoptium/infrastructure

Remove "configure" access for `build-triage` teams on all (?) jobs

Open
#4,105 1 comment 0 reactions 0 assignees View on GitHub
secure-dev
Dominant language
Python
Stars
96
Forks
106
Avg merge
1d 23h
Merged PRs (30d)
13

Description

At the moment we grant some access to people to be able to perform build triage and re-runs if required.
Some of the build jobs, such as the openjdk25-pipeline jobs, have configure access for this group. This should not be required and should be restricted to the main `build` team.

This issue covers going through the jobs, identifying which are in that state, and changing the access accordingly.

Contributor guide

Open the contributing guide

Research direction

Begin by locating the job access definitions for build-triage and the openjdk25-pipeline jobs, then inventory all jobs with configure permission for that team. Compare those permissions with the stated build-team boundary; done means build-triage can still perform triage and reruns but no longer has configure access, with the affected job definitions checked consistently.

Written by the indexing model from the issue text.

Assessment

Domain
authorization, ci-cd, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.