Page MenuHomePhabricator

Document diffusion->github mirroring to https://github.com/toolforge/ on wikitech
Open, Needs TriagePublic

Description

[16:20]  <    taavi> what's up with that toolforge-push email?
[16:27]  <   dhinus> I was also wondering. it looks like it's a pretty old github account https://github.com/toolforge-push
[16:27]  <    bd808> It wasn't me. The "firefox" tag on it made me think it wasn't Phorge either (which is where the credentials are properly used)
[16:28]  <    bd808> The account is used from Phorge (phabricator) to mirror repos into the toolforge GitHub org account
[16:28]  <    bd808> https://github.com/toolforge/
[16:28]  <    bd808> https://github.com/toolforge/admin is an example of a repo that those credentials are used to keep updated
[16:31]  <    bd808> The account is wired into phabricator in places like https://phabricator.wikimedia.org/source/tool-admin-web/uri/view/18249/
[16:32]  <   dhinus> thanks bd808, do you know of other people who interacted with that account in the past?
[16:32]  <    bd808> just me.
[16:32]  <   dhinus> is the password shared somewhere?
[16:33]  <    bd808> It may be in the SRE pwstore? I can't remember if I gave it to Brooke os someone for safekeeping there
[16:33]  <    bd808> *or someone
[16:34]  <    bd808> I "own" the toolforge-push and composer-rate-limits-suck github accounts today
[16:35]  <    bd808> the https://github.com/composer-ratelimits-suck account is used in Jenkins
[16:38]  <    bd808> T242898 has some historical info related to the push account. The account and the service it facilitates are things I should have documented on wikitech. I'll make myself a task to do that.
[16:38]  < stashbot> T242898: Mirroring Diffusion repositories to GitHub seems to be broken - https://phabricator.wikimedia.org/T242898

Semi-related things from the past:

Event Timeline

The mystery of who poked the account and triggered the first email has been solved. Nothing nefarious at all, just a cloud-services-team member attempting to use the account.

I might misunderstand the task scope but see also T347577#9689792