mozilla / blurts-server

Mozilla Monitor arms you with tools to keep your personal information safe. Find out what hackers already know about you and learn how to stay a step ahead of them.
https://monitor.mozilla.org
Mozilla Public License 2.0
700 stars 198 forks source link

Set protected status on production branch #225

Closed moz-hwine closed 6 years ago

moz-hwine commented 6 years ago

The production branch on this repository is not protected against force pushes. This setting is recommended as part of Mozilla's Guidelines for a Sensitive Repository.

Anyone with admin permissions for this repository can correct the setting using this URL.

If you have any questions, or believe this issue was opened in error, please contact us and mention SOGH0001 and this repository.

Thank you for your prompt attention to this issue. --Firefox Security Operations team

lesleyjanenorton commented 6 years ago

Thanks for the heads up Hal! I just sent an email to secops+github@mozilla.com. I don't know that I have the necessary credentials / permissions to make this change so any guidance you could give me about how to move forward on this would be greatly appreciated.

nhnt11 commented 6 years ago

master and SHIELD_STUDY branches are now protected against force push and deletion. @moz-hwine, let me know if that's sufficient to close this issue. I'll look into enabling further protection features after the weekend.

moz-hwine commented 6 years ago

Thanks for the prompt handling!

I'll look into enabling further protection features after the weekend.

@nhnt11 just to clarify, we're not looking for additional lockdown at this time :) If you do choose to go ahead, please be aware of the known issues and the linked tips and tricks page. (Additions welcome).