project-config/gerrit/acls/openinfra/transparency-policy.config
Jeremy Stanley 0d066f954d Remove unsigned tagging permission from projects
Now that we have a fix in place for Gerrit's tag signature detection
regression, remove the unsafe permission for pushing unsigned tags
to return everything to the state we had prior to the 3.4 upgrade.

Change-Id: Ia9afb5fb4be311cca59d3e1cf3b7bc611184fe15
2022-01-25 17:41:19 +00:00

38 lines
962 B
Plaintext

[access "refs/heads/*"]
abandon = group Change Owner
abandon = group Project Bootstrappers
abandon = group transparency-committee-chair
exclusiveGroupPermissions = abandon label-Workflow
label-Rollcall-Vote = -1..+1 group transparency-committee
label-Workflow = -1..+0 group Change Owner
label-Workflow = -1..+1 group Project Bootstrappers
label-Workflow = -1..+1 group transparency-committee-chair
[access "refs/tags/*"]
createSignedTag = group transparency-committee-chair
[label "Code-Review"]
copyAllScoresOnTrivialRebase = true
defaultValue = 0
function = NoOp
value = -2 Unused -2
value = -1 This patch needs further work before it can be merged
value = 0 No score
value = +1 Looks good to me
value = +2 Unused +2
[label "Rollcall-Vote"]
copyAllScoresOnTrivialRebase = true
defaultValue = 0
function = NoOp
value = -1 No
value = 0 Abstain
value = +1 Yes
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true