Skip to content

feat(perms): log all permissions and access #41

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 15 commits into from
Sep 22, 2025
Merged

feat(perms): log all permissions and access #41

Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
cd5e959
feat(perms): log all permissions and access
avivkeller Sep 10, 2025
1cc6db1
consistent dashes
avivkeller Sep 10, 2025
088aea0
Revise permissions and access notes in PERMISSIONS.md
avivkeller Sep 11, 2025
cc572d5
Update permissions and access tokens in documentation
avivkeller Sep 11, 2025
c481bf9
fixup!
avivkeller Sep 11, 2025
f07af7b
add crowdin, status, vercel
avivkeller Sep 14, 2025
965036b
add read link for status page
avivkeller Sep 14, 2025
54be795
fixup!
avivkeller Sep 14, 2025
7fb3332
vercel shared
avivkeller Sep 14, 2025
331e8fb
Update PERMISSIONS.md
avivkeller Sep 21, 2025
37638ef
Update PERMISSIONS.md
avivkeller Sep 21, 2025
6c6426f
Update PERMISSIONS.md
avivkeller Sep 21, 2025
684c597
Update PERMISSIONS.md
avivkeller Sep 21, 2025
5fcfd19
Update PERMISSIONS.md
avivkeller Sep 21, 2025
bbcd6c9
fixup!
avivkeller Sep 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 60 additions & 0 deletions PERMISSIONS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,60 @@
# Permissions

## Repositories

| Repository | Everyone | @nodejs/web | @nodejs/nodejs-website | @nodejs/web-infra | @nodejs/web-admins | Notes |
| ---------------------------------------- | -------- | ----------- | ---------------------- | ----------------- | ------------------ | ------------------------------ |
| **[nodejs/discord-status-worker][]** | Read | - | - | Maintain | Admin | |
| **[nodejs/doc-kit][]** | Read | - | Write | Maintain | Admin | |
| **[nodejs/node.js.org][]** | Read | Write | - | Maintain | Admin | |
| **[nodejs/nodejs.dev][]** | Read | - | Write | Maintain | Admin | This repository is _archived_. |
| **[nodejs/nodejs.org][]** | Read | - | Write | Maintain | Admin | |
| **[nodejs/nodejs.org-archive][]** | Read | Write | - | Maintain | Admin | This repository is _archived_. |
| **[nodejs/release-cloudflare-worker][]** | Read | - | - | Maintain | Admin | |
| **[nodejs/web-team][]** | Read | Triage | Maintain | - | - | |
| **[nodejs/website-cloudflare-worker][]** | - | - | - | Maintain | Admin | |

## External Services

| Service | Everyone | @nodejs/web | @nodejs/nodejs-website | @nodejs/web-infra | @nodejs/web-admins | Notes |
| ---------------------------- | ---------------------------------- | ----------- | ---------------------- | ----------------- | ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **[1Password][]** | - | - | - | Admin | Admin | |
| **[Atlassian Statuspage][]** | [Read](https://status.nodejs.org/) | - | - | App Admin | Org Admin |
| **[Chromatic][]** | Read | - | Write | Admin | Admin | Access to this service is granted via GitHub authentication. |
| **[Cloudflare][]** | - | - | - | Read | Admin | Access to this service is controlled by @nodejs/build. Additional access may be granted on a case-by-case basis. |
| **[Codecov][]** | Read | - | Admin | Admin | Admin | Access to this service is granted via GitHub authentication, and only related to the repository above. |
| **[Crowdin][]** | Read | - | - | Admin | Admin | Credentials for a user with elevated exist in 1Password. Access to this service may be granted to outside collaborators on a case-by-case, language-by-language basis. |
| **[Figma][]** | Read | - | Write | - | - | Access to this service is controlled by the OpenJS Foundation and @avivkeller, and only covers website-related design files. |
| **[HackMD][]** | - | - | - | - | Admin | |
| **[Sentry][]** | - | - | - | Admin | Admin | |
| **[Vercel][]** | - | - | - | Admin | Admin | Along with individual access, credentials for a user with elevated exist in 1Password. |

## Access Tokens & Automations

| Secret Name | Display Name | Platform(s) / Location(s) | Associated Project(s) | Access Level | Expiry | Notes |
| -------------------------- | ----------------------- | ---------------------------------------------------------------------- | ----------------------------------------- | ------------ | ------ | ------------------------------------------- |
| `CF_API_TOKEN` | N/A | [nodejs/discord-status-worker][], [nodejs/release-cloudflare-worker][] | [Cloudflare][] | Write | - | Used for deploying to Cloudflare Workers |
| `CROWDIN_GITHUB_BOT_TOKEN` | **[@nodejs-crowdin][]** | [nodejs/nodejs.org][] | [nodejs/nodejs.org][] | Write | - | Used for localization workflows via Crowdin |
| N/A | **[@openjs-vercel][]** | Vercel | [nodejs/nodejs.org][], [nodejs/doc-kit][] | Admin | - | Used for deployments |

[1Password]: https://1password.com/
[@nodejs-crowdin]: https://github.com/nodejs-crowdin
[@openjs-vercel]: https://github.com/openjs-vercel
[Atlassian Statuspage]: https://manage.statuspage.io/pages/rxy2rhgm8q1n/incidents
[Chromatic]: https://www.chromatic.com/builds?appId=64c7d71358830e9105808652
[Cloudflare]: https://dash.cloudflare.com/07be8d2fbc940503ca1be344714cb0d1
[Codecov]: https://app.codecov.io/github/nodejs
[Crowdin]: https://crowdin.com/project/nodejs-web
[Figma]: https://www.figma.com/file/a10cjjw3MzvRQMPT9FP3xz
[HackMD]: https://hackmd.io
[nodejs/discord-status-worker]: https://github.com/nodejs/discord-status-worker
[nodejs/doc-kit]: https://github.com/nodejs/doc-kit
[nodejs/node.js.org]: https://github.com/nodejs/node.js.org
[nodejs/nodejs.dev]: https://github.com/nodejs/nodejs.dev
[nodejs/nodejs.org]: https://github.com/nodejs/nodejs.org
[nodejs/nodejs.org-archive]: https://github.com/nodejs/nodejs.org-archive
[nodejs/release-cloudflare-worker]: https://github.com/nodejs/release-cloudflare-worker
[nodejs/web-team]: https://github.com/nodejs/web-team
[nodejs/website-cloudflare-worker]: https://github.com/nodejs/website-cloudflare-worker
[Sentry]: https://sentry.io/
[Vercel]: https://vercel.com/
Loading