tvl-depot/tools
Vincent Ambo 3452569ddd feat(tools/crfo-approve): Add tool for CRFO depot-interventions
In some cases we want to be able to "emergency approve" something on
behalf of a different user.

Example cases:

* clean up of abandoned directories with restrictive OWNERS
* security fixes blocked on people in different timezones

This script can be used to perform these approvals if the user is a
member of depot-interventions. Note that access to depot-interventions
is audit logged.

The user on behalf of whom approval is performed is always added to
the attention set to ensure that they are made aware of the CRFO
approval.

Note: This depends on nixpkgs#156466. Keeping WIP until we have a
channel with that patch.

Change-Id: I16e5f9d7baa9daab49c88b629bb8f024aad9d94c
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5085
Tested-by: BuildkiteCI
Reviewed-by: kn <klemens@posteo.de>
Reviewed-by: sterni <sternenseemann@systemli.org>
2022-02-07 19:12:31 +00:00
..
cheddar refactor: expose cheddar-about script from cheddar 2022-02-03 23:41:08 +00:00
depot-scanner style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
emacs-pkgs style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
magrathea fix(tools/magrathea): prevent trailing slash for // in path 2021-12-18 20:23:35 +00:00
nsfv-setup style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
rust-crates-advisory fix(format-audit-results.jq): use advisories over vulnerabilities 2022-02-04 11:22:43 +00:00
tvlc style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
crfo-approve.nix feat(tools/crfo-approve): Add tool for CRFO depot-interventions 2022-02-07 19:12:31 +00:00
depot-build.nix fix(tools/depot-build): handle multiple levels of subdirectories 2020-08-05 22:31:47 +00:00
depot-nixpkgs-update.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
depotfmt.nix feat(depotfmt): format Nix code using nixpkgs-fmt 2022-01-31 16:16:00 +00:00
eprintf.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
gerrit-cli.nix fix(gerrit-cli): don't output the path to SSH if it's on the path 2020-06-21 23:49:30 +00:00
gerrit-update.nix feat(gerrit-update): Add helper script for updating Gerrit schema 2020-11-29 11:50:58 +00:00
hash-password.nix chore(nixpkgs): Bump channels to 2021-05-25 2021-05-25 17:09:28 +00:00
perf-flamegraph.nix fix(tools/perf-flamegraph): Get rid of most 'unknown's 2020-07-16 00:37:29 +00:00