jupyter / security

BSD 3-Clause "New" or "Revised" License
19 stars 7 forks source link

Verify organizations on GitHub #11

Open krassowski opened 2 years ago

krassowski commented 2 years ago

After reading https://github.com/jupyterlab/jupyterlab_app/issues/275 I came to wonder if it would be possible to verify Jupyter organizations on GitHub. This would add to a small "verified" badge being displayed on the GitHub organization webpage: https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/about-your-organizations-profile and https://docs.github.com/en/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization.

It looks like the following organizations could apply:

Carreau commented 2 years ago

Done, done, and done, at least the domains are verified, I added entries on cloudflare. I would have to see for IPython.org.

If you have a cloudflare account I can also delegate managing of Jupyter to you.

Carreau commented 2 years ago

And done for github.com/ipython and ipython.org, it was also managed by cloudflare. The verified tick may takes some time to appear.

krassowski commented 2 years ago

Thank you! I can see the badge on IPython, but not on the others yet. At a convenient time would you mind checking if there is no need to press "Continue verifying"/"verify" now? It looks like this needs to be done soon because the tokens expire after 7 days from creation.

Carreau commented 2 years ago

The continue/verify step was done 4 days ago, it says it's done in the UI. I can't do more things except delete. My guess is there is some extra manual verification manually by github.

Screen Shot 2021-10-07 at 08 52 06
krassowski commented 2 years ago

That's useful! So it seems that they will not display "Verified" because:

I'm in no place to suggest changing the e-mail, but if we want to have the badge that might be the fastest way.