1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
# Project Administration
This section documents all the information necessary to administer the
infrastructure which makes the project possible.
## Tooling
```eval_rst
.. toctree::
:titlesonly:
../README
../tools/wptserve/docs/index.rst
../tools/wptrunner/README
.. toctree::
:hidden:
../tools/wptserve/README
```
## Secrets
SSL certificates for all HTTPS-enabled domains are retrieved via [Let's
Encrypt](https://letsencrypt.org/), so that data does not represent an
explicitly-managed secret.
## Third-party account owners
- (unknown registrar): https://web-platform-tests.org
- jgraham@hoppipolla.co.uk
- (unknown registrar): https://w3c-test.org
- mike@w3.org
- (unknown registrar): http://testthewebforward.org
- web-human@w3.org
- [Google Domains](https://domains.google/): https://wpt.fyi
- foolip@google.com
- robertma@google.com
- mike@bocoup.com
- (Google internal): https://wpt.live https://wptpr.live
- foolip@google.com
- robertma@google.com
- [GitHub](https://github.com/): web-platform-tests
- [@foolip](https://github.com/foolip)
- [@Hexcles](https://github.com/Hexcles)
- [@jgraham](https://github.com/jgraham)
- [@plehegar](https://github.com/plehegar)
- [@thejohnjansen](https://github.com/thejohnjansen)
- [@youennf](https://github.com/youennf)
- [@zcorpan](https://github.com/zcorpan)
- [GitHub](https://github.com/): w3c
- [@plehegar](https://github.com/plehegar)
- [@sideshowbarker](https://github.com/sideshowbarker)
- [Google Cloud Platform](https://cloud.google.com/): wptdashboard{-staging}
- robertma@google.com
- smcgruer@google.com
- foolip@google.com
- [Google Cloud Platform](https://cloud.google.com/): wpt-live
- smcgruer@google.com
- robertma@google.com
- [Google Cloud Platform](https://cloud.google.com/): wpt-pr-bot
- smcgruer@google.com
- robertma@google.com
- E-mail address: wpt.pr.bot@gmail.com
- smcgruer@google.com
- boaz@bocoup.com
- mike@bocoup.com
- simon@bocoup.com
- [GitHub](https://github.com/): @wpt-pr-bot account
- smcgruer@google.com
- boaz@bocoup.com
- mike@bocoup.com
- simon@bocoup.com
[web-platform-tests]: https://github.com/e3c/web-platform-tests
[wpt.fyi]: https://github.com/web-platform-tests/wpt.fyi
## Emergency playbook
### Lock down write access to the repo
**Recommended but not yet verified approach:** Create a [new branch protection
rule](https://github.com/web-platform-tests/wpt/settings/branch_protection_rules/new)
that applies to `*` (i.e. all branches), and check "Restrict who can push to
matching branches". This should prevent everyone except those with the
"Maintain" role (currently only the GitHub admins listed above) from pushing
to *any* branch. To lift the limit, delete this branch protection rule.
**Alternative approach proven to work in
[#21424](https://github.com/web-platform-tests/wpt/issues/21424):** Go to
[manage access](https://github.com/web-platform-tests/wpt/settings/access),
and change the permission of "reviewers" to "Read". To lift the limit, change
it back to "Write". This has the known downside of *resubscribing all reviewers
to repo notifications*.
|
