Re: VCS Account Request: jenkins
| From: | Florian Anderiasch | Date: | Mon, 04 Feb 2013 18:14:21 +0000 |
| Subject: | Re: VCS Account Request: jenkins | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-65647@lists.php.net to get a copy of this message | ||
On 04.02.2013 19:13, Ferenc Kovacs wrote:
> yeah, that would work also, but it has some of the concerns that were
> mentioned about the git push way:
> if you somehow compromise the jenkins box, you can get rouge commits to
> the jenkins git.php.net <http://git.php.net> repo.
> as I mentioned, I think I will use some 3rd party repo(github probably)
> for the configs and manually merge stuff to the web/jenkins repo on
> git.php.net <http://git.php.net> once in a while.
I omitted "if people are against giving the bot access" - that's why I
suggested GitHub - and I know it's usually only mirroring, but why not
add new repos for "different security contexts" there? (With a big "not
mirrored warning ofc")
Greetings,
Florian