Confirmed users
1,364
edits
(clarify 2FA requirement) |
(Be more specific about 3rd party app setup) |
||
| Line 16: | Line 16: | ||
=== How do I hook up a new 3rd party application to a repository in the mozilla org? === | === How do I hook up a new 3rd party application to a repository in the mozilla org? === | ||
3rd party applications can easily impact many other repositories than the initial one. For that reason, the following steps are strongly encouraged: | |||
# Create yourself a new github user for this repository. | |||
# Make them an admin of the repository(s) temporarily. | |||
# Sign in as the new github user and setup the 3rd party application. | |||
# Log back into your normal account. | |||
# Try to reduce access of that user from an admin of the repository(s) to read only access. | |||
# If (5) doesn't work, at least the 3rd party application will not have access to all of your normal github account's (including private repositories). | |||
* Authorizing an application to work with GitHub utilizes the permissions your account has -- so, any repositories you have access to the application will have access to as well (including private ones). If you want to grant access to an application that no one else has used with the Mozilla organization yet you'll see a "Request access" button during the set up flow. You'll need to click that button to request approval. See below for an example: | * Authorizing an application to work with GitHub utilizes the permissions your account has -- so, any repositories you have access to the application will have access to as well (including private ones). If you want to grant access to an application that no one else has used with the Mozilla organization yet you'll see a "Request access" button during the set up flow. You'll need to click that button to request approval. See below for an example: | ||