diff options
author | Vincent Ambo <mail@tazj.in> | 2022-01-28T10·26+0300 |
---|---|---|
committer | tazjin <tazjin@tvl.su> | 2022-02-07T19·12+0000 |
commit | 3452569ddd32646ddb63fd0d99c463e1f81ab244 (patch) | |
tree | af64eba65d4d38bd7ed9f72e81dd2377c605aae8 /nix/buildLisp/default.nix | |
parent | f82f459e2cacd18c6a0c9235129d1b9a69f34c90 (diff) |
feat(tools/crfo-approve): Add tool for CRFO depot-interventions r/3782
In some cases we want to be able to "emergency approve" something on behalf of a different user. Example cases: * clean up of abandoned directories with restrictive OWNERS * security fixes blocked on people in different timezones This script can be used to perform these approvals if the user is a member of depot-interventions. Note that access to depot-interventions is audit logged. The user on behalf of whom approval is performed is always added to the attention set to ensure that they are made aware of the CRFO approval. Note: This depends on nixpkgs#156466. Keeping WIP until we have a channel with that patch. Change-Id: I16e5f9d7baa9daab49c88b629bb8f024aad9d94c Reviewed-on: https://cl.tvl.fyi/c/depot/+/5085 Tested-by: BuildkiteCI Reviewed-by: kn <klemens@posteo.de> Reviewed-by: sterni <sternenseemann@systemli.org>
Diffstat (limited to 'nix/buildLisp/default.nix')
0 files changed, 0 insertions, 0 deletions