remove sigstore-review-bot

[bobcallaway]

Summary

Release Note

Documentation

[github-actions]

🍹 preview on sigstore-github-sync/sigstore/github-prod

Pulumi report

  Previewing update (sigstore/github-prod)

View Live: https://app.pulumi.com/sigstore/sigstore-github-sync/github-prod/previews/16ffa2cf-2f97-4b8d-a788-0338371ae4f7

@ Previewing update.....
pulumi:pulumi:Stack: (same)
  [urn=urn:pulumi:github-prod::sigstore-github-sync::pulumi:pulumi:Stack::sigstore-github-sync-github-prod]
  ~ github:index/teamMembership:TeamMembership: (update)
      [id=6463637:cpanato]
      [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/teamMembership:TeamMembership::cpanato-gitsign-codeowners]
      [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_3_2::fc324c44-57b2-4a20-a304-fbcea50f90e7]
    ~ role: "maintainer" => "member"
  ~ github:index/branchProtection:BranchProtection: (update)
      [id=BPR_kwDOFotDCM4DA1RL]
      [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-main]
      [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_3_2::fc324c44-57b2-4a20-a304-fbcea50f90e7]
    ~ restrictPushes: [
        ~ [0]: {
                ~ pushAllowances: [
                    ~ [0]: "U_kgDOByoNQQ" => "T_kwDOBDzYIc4AYVWd"
                    ~ [1]: "T_kwDOBDzYIc4AYVWd" => "MDQ6VXNlcjg2ODM3MzY5"
                      [2]: "T_kwDOBDzYIc4AZiLE"
                    - [3]: "MDQ6VXNlcjg2ODM3MzY5"
                  ]
              }
      ]
  ~ github:index/branchProtection:BranchProtection: (update)
      [id=BPR_kwDOFotDCM4DEmYE]
      [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-publish]
      [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_3_2::fc324c44-57b2-4a20-a304-fbcea50f90e7]
    ~ restrictPushes: [
        ~ [0]: {
                ~ pushAllowances: [
                    ~ [0]: "U_kgDOByoNQQ" => "T_kwDOBDzYIc4AYVWd"
                    ~ [1]: "T_kwDOBDzYIc4AYVWd" => "MDQ6VXNlcjg2ODM3MzY5"
                    - [2]: "MDQ6VXNlcjg2ODM3MzY5"
                  ]
              }
      ]
@ Previewing update....
  - github:index/repositoryCollaborator:RepositoryCollaborator: (delete)
      [id=root-signing:sigstore-review-bot]
      [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/repositoryCollaborator:RepositoryCollaborator::root-signing-sigstore-review-bot]
      [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_3_2::fc324c44-57b2-4a20-a304-fbcea50f90e7]
      permission               : "push"
      permissionDiffSuppression: false
      repository               : "root-signing"
      username                 : "sigstore-review-bot"
  - github:index/membership:Membership: (delete)
      [id=sigstore:sigstore-review-bot]
      [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/membership:Membership::sigstore-review-bot]
      [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_3_2::fc324c44-57b2-4a20-a304-fbcea50f90e7]
      downgradeOnDestroy: false
      role              : "member"
      username          : "sigstore-review-bot"
Resources:
  ~ 3 to update
  - 2 to delete
  5 changes. 588 unchanged
  

[cpanato]

should we terminate that bot as well? i mean delete the account

[bobcallaway]

should we terminate that bot as well? i mean delete the account

yes, i can do that but the permissions need to be removed while the account still exists