diff options
| author | Antoine GIRARD <sapk@users.noreply.github.com> | 2018-06-09 18:03:23 +0200 |
|---|---|---|
| committer | techknowlogick <techknowlogick@users.noreply.github.com> | 2018-06-09 12:03:23 -0400 |
| commit | 048468560f98929bdb252403ef5c3012900769ea (patch) | |
| tree | 2bc7a870d5cba0031270cf04df5a9d5c76942548 /CONTRIBUTING.md | |
| parent | 8786c152218a656afad8c016cf8cd678ef0c681b (diff) | |
| download | gitea-048468560f98929bdb252403ef5c3012900769ea.tar.gz gitea-048468560f98929bdb252403ef5c3012900769ea.zip | |
Add security advice to contrib guide (#4187)
* Improve contributing guidelines for security
Diffstat (limited to 'CONTRIBUTING.md')
| -rw-r--r-- | CONTRIBUTING.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index e02110b574..13f1ce41c4 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -201,6 +201,10 @@ an advisor has time to code review, we will gladly welcome them back to the maintainers team. If a maintainer is inactive for more than 3 months and forgets to leave the maintainers team, the owners may move him or her from the maintainers team to the advisors team. +For security reasons, Maintainers should use 2FA for their accounts and +if possible provide gpg signed commits. +https://help.github.com/articles/securing-your-account-with-two-factor-authentication-2fa/ +https://help.github.com/articles/signing-commits-with-gpg/ ## Owners @@ -211,6 +215,9 @@ be the main owner, and the other two the assistant owners. When the new owners have been elected, the old owners will give up ownership to the newly elected owners. If an owner is unable to do so, the other owners will assist in ceding ownership to the newly elected owners. +For security reasons, Owners or any account with write access (like a bot) +must use 2FA. +https://help.github.com/articles/securing-your-account-with-two-factor-authentication-2fa/ After the election, the new owners should proactively agree with our [CONTRIBUTING](CONTRIBUTING.md) requirements in the |