Le 25/04/2016 17:34, Bryan Davis a écrit :
We also have a lot of admins, which I wonder is necessary: https://github.com/orgs/wikimedia/people?utf8=%E2%9C%93&query=role%3Aown... https://github.com/orgs/wikimedia/people?utf8=%E2%9C%93&query=role%3Aowner+ Do we do any security review / removal of old accounts, or have a procedure for adding new admins?
Not that I am aware of. Rights there tend to work a lot like getting elevated rights on mediawiki.org: the rights are handed out by existing admins when somebody asks for something that will be easily solved by giving them rights. I think there was some amount of cleanup done a few months ago that got admins to either add 2fa to their github account or be removed.
The private task is: https://phabricator.wikimedia.org/T118946
I havent followed up on it though but it definitely prompted a lot of admin to enable 2FA.
The up-to-date list is available if you get admin on Github: https://github.com/orgs/wikimedia/people?query=role%3Aowner