github-ospo icon indicating copy to clipboard operation
github-ospo copied to clipboard

Automation to enforce repository permissions are by github team only and not individuals

Open zkoppert opened this issue 1 year ago • 2 comments

Is your feature request related to a problem?

To ensure that permissions are easier to maintain and keep updated, its a best practice to give permission to a GitHub team and then instead of removing them from a large number of repos, you can just remove them from the team. Well maintained permissions improves security posture.

The task here would be to create a/utilize an existing GitHub action or App to accomplish this.

zkoppert avatar Apr 10 '24 18:04 zkoppert

The problem with this restriction - and the only reason i'd never want to enable it - is that I can't put non-org-members on teams.

with this capability, i would always want this for org-owned repos.

ljharb avatar Apr 10 '24 18:04 ljharb

Great feedback @ljharb, appreciate it!

zkoppert avatar Apr 10 '24 18:04 zkoppert