Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add cake-contrib user to Cake.GitVersioning NuGet package #234

Closed
gep13 opened this issue Oct 18, 2018 · 4 comments
Closed

Add cake-contrib user to Cake.GitVersioning NuGet package #234

gep13 opened this issue Oct 18, 2018 · 4 comments

Comments

@gep13
Copy link

gep13 commented Oct 18, 2018

First of all, I wanted to thank you for adding to the Cake community by adding this addin.

I was just wondering if you had seen this blog post:

http://cakebuild.net/blog/2016/08/cake-contribution-organization

We are currently going through a process of increasing the visibility of addins, and also trying to ensure their long term maintainability.

To that end, we are asking addin creators to add the cake-contrib user on NuGet as a co-owner (this can be done through the NuGet website by clicking on Manage Owners on the package page).

Would you be interested in doing this? If you have any questions about this, please let me know. There was some initial concern that the Cake Team were trying to "take over" packages, and that couldn't be further from the truth, and if you have this concern, or others, I would like to address them.

Thanks!

@AArnott
Copy link
Collaborator

AArnott commented Oct 19, 2018

The blog post answers most of my questions. The only remaining questions are regarding the security of the cake-contrib account.

  1. Is 2FA turned on?
  2. How are the credentials protected?
  3. How many people have access?
  4. What qualifications are demanded of people before they gain access to that account?

@gep13
Copy link
Author

gep13 commented Oct 19, 2018

@AArnott thanks for following up, let me see if I can address your questions.

  1. Yes, 2FA is enabled on this account
  2. The credentials are stored in a shared LastPass Subscription which we get as part of membership of the .NET Foundation
  3. Currently there are 7 people in the Core Team at Cake (myself, @patriksvensson, @devlead, @agc93, @pascalberger, @mholo65 and @daveaglick)
  4. Can you elaborate on what you mean here by qualifications? Only people who are brought into the Core Cake Team, and made a member of the Organisation, would be given access to this account.

Please let me know if I didn't address any of your concerns.

@AArnott
Copy link
Collaborator

AArnott commented Oct 19, 2018

Yes, that addresses my concerns. Thank you. I've added cake-contrib as a package owner.

@gep13
Copy link
Author

gep13 commented Oct 19, 2018

@AArnott said...
Yes, that addresses my concerns. Thank you. I've added cake-contrib as a package owner.

Thank you very much! I have accepted the request to be added as a package owner.

@gep13 gep13 closed this as completed Oct 19, 2018
AArnott pushed a commit that referenced this issue Apr 1, 2024
Bumps [xunit](https://github.com/xunit/xunit) from 2.6.1 to 2.6.2.
- [Commits](xunit/xunit@2.6.1...2.6.2)

---
updated-dependencies:
- dependency-name: xunit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants