diff options
| author | Rich Trott <rtrott@gmail.com> | 2016-12-29 16:16:37 -0800 |
|---|---|---|
| committer | James M Snell <jasnell@gmail.com> | 2016-12-30 08:56:17 -0800 |
| commit | 1bee74de84ae7bb602fcf195b8cf72c5cf09b2e3 (patch) | |
| tree | 09449608258e36b45ece0bec9472ca68d6406a4d /doc/onboarding.md | |
| parent | 72a8488e8e0108e92422443364752b788d58ea56 (diff) | |
| download | android-node-v8-1bee74de84ae7bb602fcf195b8cf72c5cf09b2e3.tar.gz android-node-v8-1bee74de84ae7bb602fcf195b8cf72c5cf09b2e3.tar.bz2 android-node-v8-1bee74de84ae7bb602fcf195b8cf72c5cf09b2e3.zip | |
doc: require two-factor authentication
Collaborators have elevated privileges. The CTC now requires
Collaborator accounts to have two-factor authentication. This changes
wording in the onboarding documentation to make it clear that two-factor
authentication is required and not merely recommended.
PR-URL: https://github.com/nodejs/node/pull/10529
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Evan Lucas <evanlucas@me.com>
Reviewed-By: Ali Ijaz Sheikh <ofrobots@google.com>
Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Diffstat (limited to 'doc/onboarding.md')
| -rw-r--r-- | doc/onboarding.md | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/doc/onboarding.md b/doc/onboarding.md index 665890da96..dbe3dfd569 100644 --- a/doc/onboarding.md +++ b/doc/onboarding.md @@ -5,14 +5,19 @@ onboarding session. ## One week before the onboarding session -* Ask the new Collaborator if they are using two-factor authentication on their - GitHub account. If they are not, suggest that they enable it as their account - will have elevated privileges in many of the Node.js repositories. +* Confirm that the new Collaborator is using two-factor authentication on their + GitHub account. Unless two-factor authentication is enabled, do not give an + account elevated privileges such as the ability to land code in the main + repository or to start continuous integration (CI) jobs. ## Fifteen minutes before the onboarding session -* Prior to the onboarding session, add the new Collaborators to -[the Collaborators team](https://github.com/orgs/nodejs/teams/collaborators). +* Prior to the onboarding session, add the new Collaborator to + [the Collaborators team](https://github.com/orgs/nodejs/teams/collaborators). + Note that this is the step that gives the account elevated privileges, so + do not perform this step (or any subsequent steps) unless two-factor + authentication is enabled on the new Collaborator's GitHub account. + ## Onboarding session |