ministryofjustice / operations-engineering

This repository is home to the Operations Engineering's tools and utilities for managing, monitoring, and optimising software development processes at the Ministry of Justice. • This repository is defined and managed in Terraform
https://user-guide.operations-engineering.service.justice.gov.uk/
MIT License
11 stars 5 forks source link

Replace use of `MoJ Bot` token in `ministryofjustice/github-collaborators` (OPS_BOT_TOKEN) #4558

Closed tamsinforbes closed 1 day ago

tamsinforbes commented 2 weeks ago

User Need

As a member of the operations engineering team, I want to organise and secure the GitHub personal access tokens in the moj-operations-engineering-bot account, so that we can reduce risks, improve clarity, and align with best practices in token management.

Value

Properly managing these tokens will significantly reduce security risks by limiting their scope and improving their traceability. It will also streamline our processes by creating a clear and efficient method for future token creation and management.

MoJ Bot Classic token currently used in ministryofjustice/github-collaborators as GitHub secret OPS_BOT_TOKEN.

Functional Requirements:

Acceptance Criteria:

tamsinforbes commented 1 week ago

created token MOJ_COLLABORATORS_GENERAL_ADMIN in bot account

MOJ_COLLABORATORS_GENERAL_ADMIN FG-PAT as GitHub Secret MOJ_COLLABORATORS_GENERAL_ADMIN_BOT_PAT

Permissions scope - all repos Repo perms: Admin RW; PR RW; Issue RW; Contents RW; Webhooks RW; Org perms; Admin RW; Member R