Skip to content

Commit 9a38725

Browse files
avivkellerMattIPv4
avivkeller
and
MattIPv4
authored
feat(perms): log all permissions and access (#41)
* feat(perms): log all permissions and access * consistent dashes * Revise permissions and access notes in PERMISSIONS.md * Update permissions and access tokens in documentation * fixup! * add crowdin, status, vercel * add read link for status page * fixup! * vercel shared * Update PERMISSIONS.md Co-authored-by: Matt Cowley <[email protected]> * Update PERMISSIONS.md Co-authored-by: Matt Cowley <[email protected]> * Update PERMISSIONS.md Co-authored-by: Matt Cowley <[email protected]> * Update PERMISSIONS.md * Update PERMISSIONS.md * fixup! --------- Co-authored-by: Matt Cowley <[email protected]>
1 parent 478d9bf commit 9a38725

File tree

1 file changed

+60
-0
lines changed

1 file changed

+60
-0
lines changed

‎PERMISSIONS.md‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
# Permissions
2+
3+
## Repositories
4+
5+
| Repository | Everyone | @nodejs/web | @nodejs/nodejs-website | @nodejs/web-infra | @nodejs/web-admins | Notes |
6+
| ---------------------------------------- | -------- | ----------- | ---------------------- | ----------------- | ------------------ | ------------------------------ |
7+
| **[nodejs/discord-status-worker][]** | Read | - | - | Maintain | Admin | |
8+
| **[nodejs/doc-kit][]** | Read | - | Write | Maintain | Admin | |
9+
| **[nodejs/node.js.org][]** | Read | Write | - | Maintain | Admin | |
10+
| **[nodejs/nodejs.dev][]** | Read | - | Write | Maintain | Admin | This repository is _archived_. |
11+
| **[nodejs/nodejs.org][]** | Read | - | Write | Maintain | Admin | |
12+
| **[nodejs/nodejs.org-archive][]** | Read | Write | - | Maintain | Admin | This repository is _archived_. |
13+
| **[nodejs/release-cloudflare-worker][]** | Read | - | - | Maintain | Admin | |
14+
| **[nodejs/web-team][]** | Read | Triage | Maintain | - | - | |
15+
| **[nodejs/website-cloudflare-worker][]** | - | - | - | Maintain | Admin | |
16+
17+
## External Services
18+
19+
| Service | Everyone | @nodejs/web | @nodejs/nodejs-website | @nodejs/web-infra | @nodejs/web-admins | Notes |
20+
| ---------------------------- | ---------------------------------- | ----------- | ---------------------- | ----------------- | ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
21+
| **[1Password][]** | - | - | - | Admin | Admin | |
22+
| **[Atlassian Statuspage][]** | [Read](https://status.nodejs.org/) | - | - | App Admin | Org Admin |
23+
| **[Chromatic][]** | Read | - | Write | Admin | Admin | Access to this service is granted via GitHub authentication. |
24+
| **[Cloudflare][]** | - | - | - | Read | Admin | Access to this service is controlled by @nodejs/build. Additional access may be granted on a case-by-case basis. |
25+
| **[Codecov][]** | Read | - | Admin | Admin | Admin | Access to this service is granted via GitHub authentication, and only related to the repository above. |
26+
| **[Crowdin][]** | Read | - | - | Admin | Admin | Credentials for a user with elevated exist in 1Password. Access to this service may be granted to outside collaborators on a case-by-case, language-by-language basis. |
27+
| **[Figma][]** | Read | - | Write | - | - | Access to this service is controlled by the OpenJS Foundation and @avivkeller, and only covers website-related design files. |
28+
| **[HackMD][]** | - | - | - | - | Admin | |
29+
| **[Sentry][]** | - | - | - | Admin | Admin | |
30+
| **[Vercel][]** | - | - | - | Admin | Admin | Along with individual access, credentials for a user with elevated exist in 1Password. |
31+
32+
## Access Tokens & Automations
33+
34+
| Secret Name | Display Name | Platform(s) / Location(s) | Associated Project(s) | Access Level | Expiry | Notes |
35+
| -------------------------- | ----------------------- | ---------------------------------------------------------------------- | ----------------------------------------- | ------------ | ------ | ------------------------------------------- |
36+
| `CF_API_TOKEN` | N/A | [nodejs/discord-status-worker][], [nodejs/release-cloudflare-worker][] | [Cloudflare][] | Write | - | Used for deploying to Cloudflare Workers |
37+
| `CROWDIN_GITHUB_BOT_TOKEN` | **[@nodejs-crowdin][]** | [nodejs/nodejs.org][] | [nodejs/nodejs.org][] | Write | - | Used for localization workflows via Crowdin |
38+
| N/A | **[@openjs-vercel][]** | Vercel | [nodejs/nodejs.org][], [nodejs/doc-kit][] | Admin | - | Used for deployments |
39+
40+
[1Password]: https://1password.com/
41+
[@nodejs-crowdin]: https://github.com/nodejs-crowdin
42+
[@openjs-vercel]: https://github.com/openjs-vercel
43+
[Atlassian Statuspage]: https://manage.statuspage.io/pages/rxy2rhgm8q1n/incidents
44+
[Chromatic]: https://www.chromatic.com/builds?appId=64c7d71358830e9105808652
45+
[Cloudflare]: https://dash.cloudflare.com/07be8d2fbc940503ca1be344714cb0d1
46+
[Codecov]: https://app.codecov.io/github/nodejs
47+
[Crowdin]: https://crowdin.com/project/nodejs-web
48+
[Figma]: https://www.figma.com/file/a10cjjw3MzvRQMPT9FP3xz
49+
[HackMD]: https://hackmd.io
50+
[nodejs/discord-status-worker]: https://github.com/nodejs/discord-status-worker
51+
[nodejs/doc-kit]: https://github.com/nodejs/doc-kit
52+
[nodejs/node.js.org]: https://github.com/nodejs/node.js.org
53+
[nodejs/nodejs.dev]: https://github.com/nodejs/nodejs.dev
54+
[nodejs/nodejs.org]: https://github.com/nodejs/nodejs.org
55+
[nodejs/nodejs.org-archive]: https://github.com/nodejs/nodejs.org-archive
56+
[nodejs/release-cloudflare-worker]: https://github.com/nodejs/release-cloudflare-worker
57+
[nodejs/web-team]: https://github.com/nodejs/web-team
58+
[nodejs/website-cloudflare-worker]: https://github.com/nodejs/website-cloudflare-worker
59+
[Sentry]: https://sentry.io/
60+
[Vercel]: https://vercel.com/

0 commit comments

Comments
 (0)