From d9cc48c7f2d307ff5c386137c5c13e5805b2a56a Mon Sep 17 00:00:00 2001 From: Steve Loeppky Date: Fri, 23 Oct 2026 10:30:38 -0700 Subject: [PATCH 1/2] Remove FilOzzy admin access from FilOzone repos FilOzzy was granted admin in #47 (and by hand on tpm-utils) so that private vulnerability report notifications reach infra@filoz.org. Admin is not needed for that: FilOzzy now holds the org-level security manager role, which grants read on all repos plus security alert access and is notified of private vulnerability reports, as long as FilOzzy watches the repo with "Security alerts" selected. dealbot and synapse-sdk go back to push (their pre-#47 permission); the other repos go to triage. squid-evm-funding is left as-is pending a question to its owner. Fixes #67 Co-Authored-By: Claude Opus 5.5 --- github/FilOzone.yml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/github/FilOzone.yml b/github/FilOzone.yml index 28595b8..928452a 100644 --- a/github/FilOzone.yml +++ b/github/FilOzone.yml @@ -135,7 +135,6 @@ repositories: archived: false collaborators: admin: - - FilOzzy - SgtPooki maintain: - beck-8 @@ -143,6 +142,7 @@ repositories: pull: - Chaitu-Tatipamula push: + - FilOzzy - juliangruber has_discussions: false merge_commit_message: PR_TITLE @@ -412,7 +412,6 @@ repositories: archived: false collaborators: admin: - - FilOzzy - jennijuju maintain: - juliangruber @@ -420,6 +419,8 @@ repositories: - hugomrdias - lordshashank - silent-cipher + triage: + - FilOzzy has_discussions: true merge_commit_message: PR_TITLE merge_commit_title: MERGE_MESSAGE @@ -438,7 +439,6 @@ repositories: archived: false collaborators: admin: - - FilOzzy - jennijuju - rjan90 - rvagg @@ -453,6 +453,7 @@ repositories: - silent-cipher triage: - davidgasquez + - FilOzzy has_discussions: true merge_commit_message: PR_BODY merge_commit_title: PR_TITLE @@ -997,8 +998,6 @@ repositories: allow_update_branch: false archived: false collaborators: - admin: - - FilOzzy maintain: - Kubuxu push: @@ -1007,6 +1006,8 @@ repositories: - juliangruber - LexLuthr - nijoe1 + triage: + - FilOzzy has_discussions: false merge_commit_message: PR_TITLE merge_commit_title: MERGE_MESSAGE @@ -1095,10 +1096,11 @@ repositories: archived: false collaborators: admin: - - FilOzzy - wjmelements maintain: - Kubuxu + triage: + - FilOzzy has_discussions: false merge_commit_message: PR_TITLE merge_commit_title: MERGE_MESSAGE @@ -1165,7 +1167,6 @@ repositories: archived: false collaborators: admin: - - FilOzzy - rjan90 - rvagg maintain: @@ -1173,6 +1174,7 @@ repositories: - hugomrdias - JAG-UK push: + - FilOzzy - silent-cipher has_discussions: false merge_commit_message: PR_TITLE @@ -1218,7 +1220,7 @@ repositories: allow_update_branch: false archived: false collaborators: - admin: + triage: - FilOzzy has_discussions: false merge_commit_message: PR_TITLE From 0aca475a7046d59b9fe0012ea3880e5886920a4b Mon Sep 17 00:00:00 2001 From: Steve Loeppky Date: Fri, 23 Oct 2026 11:18:23 -0700 Subject: [PATCH 2/2] Drop FilOzzy from admin to push on squid-evm-funding FilOzzy needs write access there for release-please (the org workflow runs as FilOzzy via FILOZZY_RELEASE_PLEASE_PAT), but not admin. Co-Authored-By: Claude Opus 5.5 --- github/FilOzone.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/github/FilOzone.yml b/github/FilOzone.yml index 928452a..990592f 100644 --- a/github/FilOzone.yml +++ b/github/FilOzone.yml @@ -1135,9 +1135,9 @@ repositories: archived: false collaborators: admin: - - FilOzzy - SgtPooki push: + - FilOzzy - snissn has_discussions: false merge_commit_message: PR_TITLE