open-telemetry / open-telemetry/community
Key Rotation for OpenTelemetry Bot tokens
Open
Nobody has claimed this yet.
area/project-infra
- Dominant language
- Python
- Stars
- 1.1k
- Forks
- 314
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 13
Description
If we roll out fine grained github tokens with an expiration date, we need a mechanism to rotate those keys before they expire. A simple reminder workflow would be a good starting point
cc @trask @austinlparker
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named in the issue. Start by identifying how the OpenTelemetry Bot tokens are managed and where a reminder workflow could live; done means a mechanism that reminds maintainers to rotate tokens before they expire.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100