github-ospo
github-ospo copied to clipboard
Automation to enforce repository permissions are by github team only and not individuals
Is your feature request related to a problem?
To ensure that permissions are easier to maintain and keep updated, its a best practice to give permission to a GitHub team and then instead of removing them from a large number of repos, you can just remove them from the team. Well maintained permissions improves security posture.
The task here would be to create a/utilize an existing GitHub action or App to accomplish this.
The problem with this restriction - and the only reason i'd never want to enable it - is that I can't put non-org-members on teams.
with this capability, i would always want this for org-owned repos.
Great feedback @ljharb, appreciate it!