msys2 / msys2-autobuild

🏭🏭🏭🏭🏭🏭🏭🏭
https://packages.msys2.org/queue
MIT License
35 stars 25 forks source link

Enforcing 2FA for the msys2 organization #13

Closed lazka closed 4 years ago

lazka commented 4 years ago

With packages now starting to be build by github there is the possibility that a random organization member with admin rights can replace packages before they get signed and added to the repo.

To reduce the possibility of an account takeover we'd like to enforce two factor authentication for the msys2 org.

@martell

You can enable 2FA under https://github.com/settings/security using either SMS or a Authenticator app on your PC or mobile phone.

Feedback welcome.

lazka commented 4 years ago

@martell any thoughts? Would you mind losing access to this orga?

lazka commented 4 years ago

Since you have been active on github I assume you don't care. We can always add you back in the future if you want. 2FA is now enforced.